[ 55.683010][ T2900] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.695994][ T2900] veth1_macvtap: left promiscuous mode [ 55.701794][ T2900] veth0_macvtap: left promiscuous mode [ 55.708104][ T2900] veth1_vlan: left promiscuous mode [ 55.713515][ T2900] veth0_vlan: left promiscuous mode [ 55.854647][ T2900] team0 (unregistering): Port device team_slave_1 removed [ 55.866500][ T2900] team0 (unregistering): Port device team_slave_0 removed [ 55.879180][ T2900] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.891440][ T2900] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.938343][ T2900] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.245' (ECDSA) to the list of known hosts. 2023/02/27 12:38:20 ignoring optional flag "sandboxArg"="0" 2023/02/27 12:38:20 parsed 1 programs 2023/02/27 12:38:20 executed programs: 0 [ 69.149448][ T26] audit: type=1400 audit(1677501500.479:188): avc: denied { mounton } for pid=5448 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 69.200191][ T26] audit: type=1400 audit(1677501500.479:189): avc: denied { mount } for pid=5448 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 69.238794][ T26] audit: type=1400 audit(1677501500.479:190): avc: denied { create } for pid=5448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.243557][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.269235][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.276690][ T26] audit: type=1400 audit(1677501500.479:191): avc: denied { write } for pid=5448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.277409][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.305435][ T26] audit: type=1400 audit(1677501500.479:192): avc: denied { read } for pid=5448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.326858][ T26] audit: type=1400 audit(1677501500.559:193): avc: denied { read } for pid=5455 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=1450 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.350706][ T26] audit: type=1400 audit(1677501500.559:194): avc: denied { open } for pid=5455 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1450 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.375960][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.383195][ T26] audit: type=1400 audit(1677501500.559:195): avc: denied { getattr } for pid=5455 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=1450 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.409084][ T26] audit: type=1400 audit(1677501500.559:196): avc: denied { create } for pid=5457 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.414100][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.430909][ T26] audit: type=1400 audit(1677501500.569:197): avc: denied { ioctl } for pid=5457 comm="syz-executor.0" path="socket:[30463]" dev="sockfs" ino=30463 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.465548][ T5464] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.610422][ T5457] chnl_net:caif_netlink_parms(): no params data found [ 69.669933][ T5457] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.678829][ T5457] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.687255][ T5457] bridge_slave_0: entered allmulticast mode [ 69.694574][ T5457] bridge_slave_0: entered promiscuous mode [ 69.702881][ T5457] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.712254][ T5457] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.719890][ T5457] bridge_slave_1: entered allmulticast mode [ 69.728373][ T5457] bridge_slave_1: entered promiscuous mode [ 69.757295][ T5457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.770845][ T5457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.805025][ T5457] team0: Port device team_slave_0 added [ 69.812981][ T5457] team0: Port device team_slave_1 added [ 69.839122][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.846372][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.875081][ T5457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.888326][ T5457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.895935][ T5457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.922699][ T5457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.971098][ T5457] hsr_slave_0: entered promiscuous mode [ 69.979147][ T5457] hsr_slave_1: entered promiscuous mode [ 70.600399][ T5457] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.610622][ T5457] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.625680][ T5457] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.635436][ T5457] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.710817][ T5457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.729155][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.739433][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.750892][ T5457] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.767166][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.778419][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.788180][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.795343][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.818347][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.828034][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.837239][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.848179][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.855611][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.863745][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.874289][ T5086] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.893354][ T5457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.906979][ T5457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.920128][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.930560][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.939865][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.952168][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.962808][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.971751][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.982099][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.991004][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.004842][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.012891][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.146099][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.155970][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.166713][ T5457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.187717][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.199051][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.221749][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.231085][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.243721][ T5457] veth0_vlan: entered promiscuous mode [ 71.252374][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.262522][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.275502][ T5457] veth1_vlan: entered promiscuous mode [ 71.296549][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.305786][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.314732][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.323717][ T5087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.338615][ T5457] veth0_macvtap: entered promiscuous mode [ 71.367770][ T5457] veth1_macvtap: entered promiscuous mode [ 71.415431][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.444451][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.453531][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.464696][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.473714][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.486334][ T5457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.505180][ T4396] Bluetooth: hci0: command 0x0409 tx timeout [ 71.517787][ T5457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.544444][ T5457] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.553905][ T5457] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.563783][ T5457] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.575357][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.585458][ T897] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.671965][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.696091][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.704092][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.712180][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.751279][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.761028][ T5548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 72.124154][ T5087] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.545518][ T5087] usb 1-1: config 8 has an invalid interface number: 184 but max is 0 [ 72.554540][ T5087] usb 1-1: config 8 has an invalid interface number: 100 but max is 0 [ 72.563074][ T5087] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 72.574499][ T5087] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 72.584314][ T5087] usb 1-1: config 8 has no interface number 0 [ 72.591017][ T5087] usb 1-1: config 8 has no interface number 1 [ 72.598911][ T5087] usb 1-1: config 8 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 72.612438][ T5087] usb 1-1: too many endpoints for config 8 interface 100 altsetting 231: 95, using maximum allowed: 30 [ 72.625382][ T5087] usb 1-1: config 8 interface 100 altsetting 231 bulk endpoint 0x9 has invalid maxpacket 32 [ 72.636183][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x9, skipping [ 72.650294][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping [ 72.662011][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xE, skipping [ 72.673592][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping [ 72.685571][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x4, skipping [ 72.700101][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xA, skipping [ 72.713518][ T5087] usb 1-1: config 8 interface 100 altsetting 231 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 72.726605][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xF, skipping [ 72.738279][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping [ 72.751267][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping [ 72.762755][ T5087] usb 1-1: config 8 interface 100 altsetting 231 has 15 endpoint descriptors, different from the interface descriptor's value: 95 [ 72.777716][ T5087] usb 1-1: config 8 interface 100 has no altsetting 0 [ 72.785626][ T5087] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a09, bcdDevice= 1.b3 [ 72.796002][ T5087] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.114188][ T5087] usb 1-1: string descriptor 0 read error: -71 [ 73.574841][ T4396] Bluetooth: hci0: command 0x041b tx timeout [ 74.024282][ T5087] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 74.645833][ T5676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 74.676444][ T5086] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 74.682921][ T5086] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 74.693576][ T5087] ------------[ cut here ]------------ [ 74.699744][ T5087] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 74.711531][ T5087] WARNING: CPU: 1 PID: 5087 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb0b/0x1690 [ 74.721909][ T5087] Modules linked in: [ 74.726010][ T5087] CPU: 1 PID: 5087 Comm: kworker/1:5 Not tainted 6.2.0-syzkaller #0 [ 74.734314][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 74.744982][ T5087] Workqueue: usb_hub_wq hub_event [ 74.750199][ T5087] RIP: 0010:usb_submit_urb+0xb0b/0x1690 [ 74.755948][ T5087] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 df 6f 08 ff 44 8b 04 24 4c 89 e2 48 c7 c7 00 ab 13 8a 8b 4c 24 08 48 89 c6 e8 d5 9a 99 fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 74.776545][ T5087] RSP: 0018:ffffc900031aef48 EFLAGS: 00010282 [ 74.782727][ T5087] RAX: 0000000000000000 RBX: ffff888078f09000 RCX: 0000000000000000 [ 74.791005][ T5087] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001 [ 74.799156][ T5087] RBP: ffff888029627f00 R08: 0000000000000000 R09: ffffc900031aec77 [ 74.807261][ T5087] R10: fffff52000635d8e R11: 0000000000000000 R12: ffff8880274b0f00 [ 74.815427][ T5087] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 74.824346][ T5087] FS: 0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000 [ 74.833551][ T5087] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 74.840295][ T5087] CR2: 0000558f09498300 CR3: 000000007d681000 CR4: 00000000003506e0 [ 74.848926][ T5087] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 74.857179][ T5087] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 74.865250][ T5087] Call Trace: [ 74.868641][ T5087] [ 74.871800][ T5087] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 74.877752][ T5087] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 74.883490][ T5087] carl9170_usb_disconnect+0xc5/0x100 [ 74.888987][ T5087] usb_unbind_interface+0x187/0x7f0 [ 74.894477][ T5087] device_release_driver_internal+0x368/0x530 [ 74.900600][ T5087] usb_forced_unbind_intf+0xee/0x1c0 [ 74.905988][ T5087] usb_reset_device+0x3c1/0x970 [ 74.910949][ T5087] carl9170_usb_probe+0x47/0xd00 [ 74.916306][ T5087] usb_probe_interface+0x26c/0x820 [ 74.921529][ T5087] really_probe+0x1c7/0xb20 [ 74.926115][ T5087] __driver_probe_device+0x186/0x460 [ 74.931415][ T5087] ? usb_match_id.part.0+0xdd/0x140 [ 74.937304][ T5087] ? driver_probe_device+0x110/0x110 [ 74.942800][ T5087] driver_probe_device+0x44/0x110 [ 74.948140][ T5087] __device_attach_driver+0x14e/0x270 [ 74.953888][ T5087] bus_for_each_drv+0x102/0x190 [ 74.958789][ T5087] ? mark_held_locks+0x9f/0xe0 [ 74.963827][ T5087] ? bus_for_each_dev+0x170/0x170 [ 74.968937][ T5087] ? lockdep_hardirqs_on+0x7d/0x100 [ 74.974215][ T5087] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 74.980138][ T5087] __device_attach+0x19e/0x3d0 [ 74.985152][ T5087] ? device_driver_attach+0x1b0/0x1b0 [ 74.990543][ T5087] ? do_raw_spin_unlock+0x175/0x230 [ 74.995945][ T5087] bus_probe_device+0x12b/0x170 [ 75.000996][ T5087] device_add+0xee4/0x1930 [ 75.005519][ T5087] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 75.012647][ T5087] ? usb_create_ep_devs+0x15a/0x270 [ 75.018443][ T5087] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 75.024483][ T5087] usb_set_configuration+0xabc/0x1a20 [ 75.030316][ T5087] ? kernfs_add_one+0x122/0x450 [ 75.035381][ T5087] usb_generic_driver_probe+0x88/0xd0 [ 75.040787][ T5087] usb_probe_device+0x98/0x240 [ 75.045741][ T5087] really_probe+0x1c7/0xb20 [ 75.050263][ T5087] __driver_probe_device+0x186/0x460 [ 75.055640][ T5087] ? driver_probe_device+0x110/0x110 [ 75.061203][ T5087] driver_probe_device+0x44/0x110 [ 75.066309][ T5087] __device_attach_driver+0x14e/0x270 [ 75.071704][ T5087] bus_for_each_drv+0x102/0x190 [ 75.076697][ T5087] ? mark_held_locks+0x9f/0xe0 [ 75.081473][ T5087] ? bus_for_each_dev+0x170/0x170 [ 75.086579][ T5087] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.091840][ T5087] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 75.097885][ T5087] __device_attach+0x19e/0x3d0 [ 75.102768][ T5087] ? device_driver_attach+0x1b0/0x1b0 [ 75.108192][ T5087] ? do_raw_spin_unlock+0x175/0x230 [ 75.113443][ T5087] bus_probe_device+0x12b/0x170 [ 75.118559][ T5087] device_add+0xee4/0x1930 [ 75.123247][ T5087] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 75.130165][ T5087] ? usb_detect_static_quirks+0xbc/0x2d0 [ 75.136058][ T5087] usb_new_device+0xc6e/0x1930 [ 75.140842][ T5087] ? hub_disconnect+0x470/0x470 [ 75.145766][ T5087] hub_event+0x24cc/0x4240 [ 75.150410][ T5087] ? hub_port_debounce+0x2e0/0x2e0 [ 75.155681][ T5087] ? lock_acquire+0x1e3/0x670 [ 75.160456][ T5087] ? lock_release+0x780/0x780 [ 75.165198][ T5087] ? lock_downgrade+0x690/0x690 [ 75.170235][ T5087] process_one_work+0x8ba/0x15a0 [ 75.175344][ T5087] ? pwq_dec_nr_in_flight+0x230/0x230 [ 75.180731][ T5087] ? spin_bug+0x1c0/0x1c0 [ 75.185182][ T5087] worker_thread+0x59c/0xec0 [ 75.189794][ T5087] ? __kthread_parkme+0xc1/0x1f0 [ 75.194971][ T5087] ? process_one_work+0x15a0/0x15a0 [ 75.200272][ T5087] kthread+0x298/0x340 [ 75.204436][ T5087] ? kthread_complete_and_exit+0x20/0x20 [ 75.210363][ T5087] ret_from_fork+0x1f/0x30 [ 75.214925][ T5087] [ 75.217999][ T5087] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 75.225462][ T5087] CPU: 1 PID: 5087 Comm: kworker/1:5 Not tainted 6.2.0-syzkaller #0 [ 75.233542][ T5087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/16/2023 [ 75.243797][ T5087] Workqueue: usb_hub_wq hub_event [ 75.249184][ T5087] Call Trace: [ 75.252657][ T5087] [ 75.255596][ T5087] dump_stack_lvl+0x64/0xb0 [ 75.260314][ T5087] panic+0x476/0x520 [ 75.264227][ T5087] ? panic_smp_self_stop+0x70/0x70 [ 75.269878][ T5087] ? usb_submit_urb+0xb0b/0x1690 [ 75.274839][ T5087] check_panic_on_warn+0x75/0x80 [ 75.279779][ T5087] __warn+0xd4/0x3e0 [ 75.284318][ T5087] ? preempt_schedule_notrace+0x5f/0xd0 [ 75.290841][ T5087] ? usb_submit_urb+0xb0b/0x1690 [ 75.295925][ T5087] report_bug+0x343/0x400 [ 75.300289][ T5087] handle_bug+0x3c/0x70 [ 75.304449][ T5087] exc_invalid_op+0x18/0x50 [ 75.308949][ T5087] asm_exc_invalid_op+0x1a/0x20 [ 75.314167][ T5087] RIP: 0010:usb_submit_urb+0xb0b/0x1690 [ 75.319700][ T5087] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 df 6f 08 ff 44 8b 04 24 4c 89 e2 48 c7 c7 00 ab 13 8a 8b 4c 24 08 48 89 c6 e8 d5 9a 99 fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 75.339729][ T5087] RSP: 0018:ffffc900031aef48 EFLAGS: 00010282 [ 75.346043][ T5087] RAX: 0000000000000000 RBX: ffff888078f09000 RCX: 0000000000000000 [ 75.354086][ T5087] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000001 [ 75.362079][ T5087] RBP: ffff888029627f00 R08: 0000000000000000 R09: ffffc900031aec77 [ 75.370135][ T5087] R10: fffff52000635d8e R11: 0000000000000000 R12: ffff8880274b0f00 [ 75.378177][ T5087] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 75.386132][ T5087] ? usb_submit_urb+0xb0b/0x1690 [ 75.391054][ T5087] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 75.397014][ T5087] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 75.402765][ T5087] carl9170_usb_disconnect+0xc5/0x100 [ 75.408136][ T5087] usb_unbind_interface+0x187/0x7f0 [ 75.413318][ T5087] device_release_driver_internal+0x368/0x530 [ 75.419541][ T5087] usb_forced_unbind_intf+0xee/0x1c0 [ 75.424840][ T5087] usb_reset_device+0x3c1/0x970 [ 75.429717][ T5087] carl9170_usb_probe+0x47/0xd00 [ 75.434774][ T5087] usb_probe_interface+0x26c/0x820 [ 75.439865][ T5087] really_probe+0x1c7/0xb20 [ 75.444453][ T5087] __driver_probe_device+0x186/0x460 [ 75.449803][ T5087] ? usb_match_id.part.0+0xdd/0x140 [ 75.455248][ T5087] ? driver_probe_device+0x110/0x110 [ 75.460970][ T5087] driver_probe_device+0x44/0x110 [ 75.465974][ T5087] __device_attach_driver+0x14e/0x270 [ 75.471327][ T5087] bus_for_each_drv+0x102/0x190 [ 75.476270][ T5087] ? mark_held_locks+0x9f/0xe0 [ 75.481105][ T5087] ? bus_for_each_dev+0x170/0x170 [ 75.486281][ T5087] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.491861][ T5087] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 75.497737][ T5087] __device_attach+0x19e/0x3d0 [ 75.502483][ T5087] ? device_driver_attach+0x1b0/0x1b0 [ 75.507930][ T5087] ? do_raw_spin_unlock+0x175/0x230 [ 75.513108][ T5087] bus_probe_device+0x12b/0x170 [ 75.518134][ T5087] device_add+0xee4/0x1930 [ 75.522549][ T5087] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 75.529501][ T5087] ? usb_create_ep_devs+0x15a/0x270 [ 75.534871][ T5087] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 75.540744][ T5087] usb_set_configuration+0xabc/0x1a20 [ 75.546477][ T5087] ? kernfs_add_one+0x122/0x450 [ 75.551311][ T5087] usb_generic_driver_probe+0x88/0xd0 [ 75.556783][ T5087] usb_probe_device+0x98/0x240 [ 75.561532][ T5087] really_probe+0x1c7/0xb20 [ 75.566137][ T5087] __driver_probe_device+0x186/0x460 [ 75.572183][ T5087] ? driver_probe_device+0x110/0x110 [ 75.577449][ T5087] driver_probe_device+0x44/0x110 [ 75.582537][ T5087] __device_attach_driver+0x14e/0x270 [ 75.587901][ T5087] bus_for_each_drv+0x102/0x190 [ 75.592851][ T5087] ? mark_held_locks+0x9f/0xe0 [ 75.598074][ T5087] ? bus_for_each_dev+0x170/0x170 [ 75.603524][ T5087] ? lockdep_hardirqs_on+0x7d/0x100 [ 75.608809][ T5087] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 75.614803][ T5087] __device_attach+0x19e/0x3d0 [ 75.619650][ T5087] ? device_driver_attach+0x1b0/0x1b0 [ 75.625373][ T5087] ? do_raw_spin_unlock+0x175/0x230 [ 75.630666][ T5087] bus_probe_device+0x12b/0x170 [ 75.635554][ T5087] device_add+0xee4/0x1930 [ 75.639994][ T5087] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 75.647101][ T5087] ? usb_detect_static_quirks+0xbc/0x2d0 [ 75.653000][ T5087] usb_new_device+0xc6e/0x1930 [ 75.657868][ T5087] ? hub_disconnect+0x470/0x470 [ 75.662875][ T5087] hub_event+0x24cc/0x4240 [ 75.667379][ T5087] ? hub_port_debounce+0x2e0/0x2e0 [ 75.672850][ T5087] ? lock_acquire+0x1e3/0x670 [ 75.677526][ T5087] ? lock_release+0x780/0x780 [ 75.682383][ T5087] ? lock_downgrade+0x690/0x690 [ 75.687420][ T5087] process_one_work+0x8ba/0x15a0 [ 75.692554][ T5087] ? pwq_dec_nr_in_flight+0x230/0x230 [ 75.698169][ T5087] ? spin_bug+0x1c0/0x1c0 [ 75.702480][ T5087] worker_thread+0x59c/0xec0 [ 75.707152][ T5087] ? __kthread_parkme+0xc1/0x1f0 [ 75.712260][ T5087] ? process_one_work+0x15a0/0x15a0 [ 75.718002][ T5087] kthread+0x298/0x340 [ 75.722068][ T5087] ? kthread_complete_and_exit+0x20/0x20 [ 75.727743][ T5087] ret_from_fork+0x1f/0x30 [ 75.732314][ T5087] [ 75.735599][ T5087] Kernel Offset: disabled [ 75.740030][ T5087] Rebooting in 86400 seconds..