[ 54.549591][ T973] device veth1_macvtap left promiscuous mode [ 54.549698][ T973] device veth0_macvtap left promiscuous mode [ 54.549785][ T973] device veth1_vlan left promiscuous mode [ 54.549918][ T973] device veth0_vlan left promiscuous mode [ 54.696309][ T973] team0 (unregistering): Port device team_slave_1 removed [ 54.700425][ T973] team0 (unregistering): Port device team_slave_0 removed [ 54.707223][ T973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.731354][ T973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.772701][ T973] bond0 (unregistering): Released all slaves [ 59.760130][ T27] audit: type=1400 audit(1655142912.155:179): avc: denied { transition } for pid=3906 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 65.024126][ T27] audit: type=1400 audit(1655142917.415:180): avc: denied { search } for pid=3921 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.047476][ T27] audit: type=1400 audit(1655142917.425:181): avc: denied { read } for pid=3922 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.047509][ T27] audit: type=1400 audit(1655142917.425:182): avc: denied { open } for pid=3922 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.047526][ T27] audit: type=1400 audit(1655142917.425:183): avc: denied { getattr } for pid=3922 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.143157][ T27] audit: type=1400 audit(1655142917.535:184): avc: denied { write } for pid=3921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.143191][ T27] audit: type=1400 audit(1655142917.535:185): avc: denied { add_name } for pid=3921 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.206766][ T27] audit: type=1400 audit(1655142917.605:186): avc: denied { remove_name } for pid=3932 comm="rm" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1550 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.126' (ECDSA) to the list of known hosts. 2022/06/13 17:55:19 parsed 1 programs [ 67.243874][ T27] audit: type=1400 audit(1655142919.635:187): avc: denied { mounton } for pid=3992 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.264167][ T27] audit: type=1400 audit(1655142919.635:188): avc: denied { mount } for pid=3992 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.264188][ T27] audit: type=1400 audit(1655142919.645:189): avc: denied { create } for pid=3992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/06/13 17:55:19 executed programs: 0 [ 70.744808][ T49] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 71.306742][ T14] cfg80211: failed to load regulatory.db [ 74.904783][ T49] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 79.064858][ T49] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 83.224816][ T49] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 87.394837][ T49] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 89.473027][ T3647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.473699][ T3647] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.474006][ T3647] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.474365][ T3647] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.475632][ T3647] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 89.475879][ T3647] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.484963][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 89.484973][ T27] audit: type=1400 audit(1655142941.875:200): avc: denied { read } for pid=4123 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.484994][ T27] audit: type=1400 audit(1655142941.875:201): avc: denied { open } for pid=4123 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.485013][ T27] audit: type=1400 audit(1655142941.875:202): avc: denied { mounton } for pid=4123 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 89.571043][ T4123] chnl_net:caif_netlink_parms(): no params data found [ 89.634206][ T4123] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.634261][ T4123] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.636706][ T4123] device bridge_slave_0 entered promiscuous mode [ 89.638519][ T4123] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.638594][ T4123] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.639477][ T4123] device bridge_slave_1 entered promiscuous mode [ 89.674096][ T4123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.676916][ T4123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.710558][ T4123] team0: Port device team_slave_0 added [ 89.711817][ T4123] team0: Port device team_slave_1 added [ 89.733627][ T4123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.733632][ T4123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.733637][ T4123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.779469][ T4123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.779474][ T4123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.779479][ T4123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.834865][ T4123] device hsr_slave_0 entered promiscuous mode [ 89.835292][ T4123] device hsr_slave_1 entered promiscuous mode [ 89.898195][ T4123] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.898213][ T4123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.898301][ T4123] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.898320][ T4123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.938581][ T4123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.943863][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.944330][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.944767][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.952940][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 89.985608][ T4123] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.988554][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.988807][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.988822][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.991529][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.991755][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.991770][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.004165][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.004949][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.010533][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.017716][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.022597][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.027286][ T4123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.042295][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.042399][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.050944][ T4123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.245367][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.249192][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.249568][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.251073][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.254058][ T4123] device veth0_vlan entered promiscuous mode [ 90.260402][ T4123] device veth1_vlan entered promiscuous mode [ 90.278941][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.279484][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.280057][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.286579][ T4123] device veth0_macvtap entered promiscuous mode [ 90.290445][ T4123] device veth1_macvtap entered promiscuous mode [ 90.303427][ T4123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.303503][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.310411][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.317390][ T4123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.317617][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.410896][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.410904][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.412007][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.433480][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.433490][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.437206][ T1138] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.487692][ T27] audit: type=1400 audit(1655142942.885:203): avc: denied { ioctl } for pid=4141 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=730 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 90.754762][ T1138] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.994825][ T1138] usb 1-1: Using ep0 maxpacket: 32 [ 91.115521][ T1138] usb 1-1: config 8 has an invalid interface number: 40 but max is 2 [ 91.115533][ T1138] usb 1-1: config 8 has an invalid interface number: 150 but max is 2 [ 91.115539][ T1138] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 91.115545][ T1138] usb 1-1: config 8 has an invalid interface number: 21 but max is 2 [ 91.115549][ T1138] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 91.115554][ T1138] usb 1-1: config 8 has no interface number 0 [ 91.115557][ T1138] usb 1-1: config 8 has no interface number 1 [ 91.115560][ T1138] usb 1-1: config 8 has no interface number 2 [ 91.115594][ T1138] usb 1-1: config 8 interface 40 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 91.115698][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 91.115704][ T1138] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 91.115710][ T1138] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 91.115716][ T1138] usb 1-1: config 8 interface 150 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024 [ 91.115722][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 91.115727][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 91.115733][ T1138] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 7 [ 91.115739][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 91.115745][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 91.115749][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 91.115755][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has an invalid endpoint with address 0x80, skipping [ 91.115760][ T1138] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 91.115781][ T1138] usb 1-1: config 8 interface 21 altsetting 128 bulk endpoint 0x4 has invalid maxpacket 32 [ 91.115787][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has an invalid endpoint with address 0x80, skipping [ 91.115792][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xC, skipping [ 91.115797][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x6, skipping [ 91.115802][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 91.115808][ T1138] usb 1-1: config 8 interface 21 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 91.115814][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 91.115819][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xA, skipping [ 91.115824][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping [ 91.115829][ T1138] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping [ 91.115834][ T1138] usb 1-1: config 8 interface 150 has no altsetting 0 [ 91.115839][ T1138] usb 1-1: config 8 interface 21 has no altsetting 0 [ 91.274828][ T1138] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice=be.33 [ 91.274866][ T1138] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.274872][ T1138] usb 1-1: Product: syz [ 91.274885][ T1138] usb 1-1: Manufacturer: syz [ 91.274888][ T1138] usb 1-1: SerialNumber: syz [ 91.545705][ T14] Bluetooth: hci0: command 0x0409 tx timeout 2022/06/13 17:55:44 executed programs: 1 [ 92.546522][ T1138] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 92.794726][ T1138] usb 1-1: Using ep0 maxpacket: 32 [ 93.439071][ T14] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 93.439080][ T14] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 93.440098][ T1138] ------------[ cut here ]------------ [ 93.440102][ T1138] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 93.440182][ T1138] WARNING: CPU: 0 PID: 1138 at drivers/usb/core/urb.c:502 usb_submit_urb+0xb07/0x1680 [ 93.474700][ T1138] Modules linked in: [ 93.478602][ T1138] CPU: 0 PID: 1138 Comm: kworker/0:3 Not tainted 5.19.0-rc2-syzkaller #0 [ 93.487185][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 93.498718][ T1138] Workqueue: usb_hub_wq hub_event [ 93.503970][ T1138] RIP: 0010:usb_submit_urb+0xb07/0x1680 [ 93.509610][ T1138] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 03 97 1a ff 44 8b 04 24 4c 89 e2 48 c7 c7 00 d5 85 89 8b 4c 24 08 48 89 c6 e8 d3 16 4f 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 93.529653][ T1138] RSP: 0018:ffffc90004d5ef30 EFLAGS: 00010282 [ 93.535919][ T1138] RAX: 0000000000000000 RBX: ffff88801befb000 RCX: 0000000000000000 [ 93.544170][ T1138] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff520009abdd8 [ 93.552936][ T1138] RBP: ffff888020f10700 R08: 0000000000000001 R09: ffff8880b9e2792b [ 93.561269][ T1138] R10: ffffed10173c4f25 R11: 0000000000002000 R12: ffff888024f04b80 [ 93.569788][ T1138] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 93.578008][ T1138] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 93.587249][ T1138] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.594015][ T1138] CR2: 00000000005680c0 CR3: 000000007a3fc000 CR4: 00000000003506f0 [ 93.602837][ T1138] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.611245][ T1138] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.619372][ T1138] Call Trace: [ 93.622650][ T1138] [ 93.625979][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 93.632502][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 93.638850][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 93.644836][ T1138] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 93.650826][ T1138] carl9170_usb_disconnect+0xc1/0xf0 [ 93.656187][ T1138] usb_unbind_interface+0x183/0x7e0 [ 93.661386][ T1138] device_release_driver_internal+0x3bc/0x600 [ 93.668486][ T1138] usb_forced_unbind_intf+0x129/0x1c0 [ 93.673944][ T1138] usb_reset_device+0x31d/0x850 [ 93.678926][ T1138] carl9170_usb_probe+0x43/0xd00 [ 93.683973][ T1138] usb_probe_interface+0x274/0x6a0 [ 93.690051][ T1138] really_probe+0x1c1/0xa40 [ 93.694689][ T1138] __driver_probe_device+0x2a6/0x460 [ 93.700573][ T1138] ? usb_match_id.part.0+0xdd/0x140 [ 93.706286][ T1138] driver_probe_device+0x44/0x110 [ 93.711423][ T1138] __device_attach_driver+0x185/0x250 [ 93.716888][ T1138] ? driver_allows_async_probing+0x110/0x110 [ 93.723215][ T1138] bus_for_each_drv+0x11e/0x1a0 [ 93.728338][ T1138] ? bus_for_each_dev+0x1a0/0x1a0 [ 93.733443][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 93.739517][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 93.744950][ T1138] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 93.750936][ T1138] __device_attach+0x19e/0x440 [ 93.755788][ T1138] ? device_driver_attach+0x1b0/0x1b0 [ 93.761255][ T1138] ? kobject_uevent_env+0x225/0x12f0 [ 93.768117][ T1138] bus_probe_device+0x19d/0x250 [ 93.772999][ T1138] device_add+0xa14/0x1b80 [ 93.777598][ T1138] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 93.783842][ T1138] ? usb_create_ep_devs+0x156/0x270 [ 93.790286][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 93.795958][ T1138] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 93.802477][ T1138] usb_set_configuration+0xc91/0x1840 [ 93.808058][ T1138] ? kernfs_create_link+0x167/0x220 [ 93.813256][ T1138] ? do_raw_spin_unlock+0x171/0x230 [ 93.818637][ T1138] usb_generic_driver_probe+0x74/0xa0 [ 93.824107][ T1138] usb_probe_device+0x95/0x240 [ 93.829477][ T1138] really_probe+0x1c1/0xa40 [ 93.834062][ T1138] __driver_probe_device+0x2a6/0x460 [ 93.839712][ T1138] driver_probe_device+0x44/0x110 [ 93.845214][ T1138] __device_attach_driver+0x185/0x250 [ 93.851014][ T1138] ? driver_allows_async_probing+0x110/0x110 [ 93.857267][ T1138] bus_for_each_drv+0x11e/0x1a0 [ 93.862222][ T1138] ? bus_for_each_dev+0x1a0/0x1a0 [ 93.867427][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 93.873596][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 93.879078][ T1138] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 93.885135][ T1138] __device_attach+0x19e/0x440 [ 93.890160][ T1138] ? device_driver_attach+0x1b0/0x1b0 [ 93.895937][ T1138] ? kobject_uevent_env+0x225/0x12f0 [ 93.901515][ T1138] bus_probe_device+0x19d/0x250 [ 93.908009][ T1138] device_add+0xa14/0x1b80 [ 93.912778][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 93.918742][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 93.923939][ T1138] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 93.931124][ T1138] ? add_device_randomness+0xaf/0xe0 [ 93.936563][ T1138] usb_new_device.cold+0x5d1/0xeeb [ 93.941687][ T1138] ? hub_disconnect+0x470/0x470 [ 93.946918][ T1138] ? rwlock_bug.part.0+0x90/0x90 [ 93.952147][ T1138] ? _raw_spin_unlock_irq+0x1f/0x40 [ 93.957533][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 93.963696][ T1138] hub_event+0x114d/0x39d0 [ 93.968476][ T1138] ? hub_port_debounce+0x2d0/0x2d0 [ 93.973778][ T1138] ? lock_release+0x501/0x780 [ 93.978603][ T1138] ? lock_release+0x780/0x780 [ 93.983386][ T1138] ? lock_downgrade+0x6e0/0x6e0 [ 93.988686][ T1138] ? do_raw_spin_lock+0x120/0x2a0 [ 93.993716][ T1138] process_one_work+0x865/0x13d0 [ 93.998754][ T1138] ? lock_release+0x780/0x780 [ 94.003429][ T1138] ? pwq_dec_nr_in_flight+0x230/0x230 [ 94.009362][ T1138] ? rwlock_bug.part.0+0x90/0x90 [ 94.014480][ T1138] ? _raw_spin_lock_irq+0x41/0x50 [ 94.019685][ T1138] worker_thread+0x598/0xec0 [ 94.024283][ T1138] ? __kthread_parkme+0xc1/0x1f0 [ 94.030708][ T1138] ? process_one_work+0x13d0/0x13d0 [ 94.036126][ T1138] kthread+0x299/0x340 [ 94.040315][ T1138] ? kthread_complete_and_exit+0x20/0x20 [ 94.046182][ T1138] ret_from_fork+0x1f/0x30 [ 94.050815][ T1138] [ 94.054018][ T1138] Kernel panic - not syncing: panic_on_warn set ... [ 94.060702][ T1138] CPU: 0 PID: 1138 Comm: kworker/0:3 Not tainted 5.19.0-rc2-syzkaller #0 [ 94.069803][ T1138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 94.080286][ T1138] Workqueue: usb_hub_wq hub_event [ 94.085509][ T1138] Call Trace: [ 94.088901][ T1138] [ 94.091923][ T1138] dump_stack_lvl+0x57/0x7d [ 94.096496][ T1138] panic+0x227/0x466 [ 94.100468][ T1138] ? panic_print_sys_info.part.0+0x69/0x69 [ 94.106351][ T1138] ? usb_submit_urb+0xb07/0x1680 [ 94.112490][ T1138] __warn.cold+0x150/0x1de [ 94.117007][ T1138] ? usb_submit_urb+0xb07/0x1680 [ 94.122109][ T1138] report_bug+0x15a/0x1c0 [ 94.126614][ T1138] ? vprintk_emit+0xf5/0x440 [ 94.131284][ T1138] handle_bug+0x3c/0x60 [ 94.135420][ T1138] exc_invalid_op+0x14/0x40 [ 94.140075][ T1138] asm_exc_invalid_op+0x1b/0x20 [ 94.145005][ T1138] RIP: 0010:usb_submit_urb+0xb07/0x1680 [ 94.150728][ T1138] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 03 97 1a ff 44 8b 04 24 4c 89 e2 48 c7 c7 00 d5 85 89 8b 4c 24 08 48 89 c6 e8 d3 16 4f 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 94.171110][ T1138] RSP: 0018:ffffc90004d5ef30 EFLAGS: 00010282 [ 94.177345][ T1138] RAX: 0000000000000000 RBX: ffff88801befb000 RCX: 0000000000000000 [ 94.185487][ T1138] RDX: 0000000000000001 RSI: 0000000000000004 RDI: fffff520009abdd8 [ 94.194158][ T1138] RBP: ffff888020f10700 R08: 0000000000000001 R09: ffff8880b9e2792b [ 94.202358][ T1138] R10: ffffed10173c4f25 R11: 0000000000002000 R12: ffff888024f04b80 [ 94.210423][ T1138] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 94.218404][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 94.224191][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 94.230153][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 94.236130][ T1138] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 94.241856][ T1138] carl9170_usb_disconnect+0xc1/0xf0 [ 94.247578][ T1138] usb_unbind_interface+0x183/0x7e0 [ 94.252947][ T1138] device_release_driver_internal+0x3bc/0x600 [ 94.259081][ T1138] usb_forced_unbind_intf+0x129/0x1c0 [ 94.264665][ T1138] usb_reset_device+0x31d/0x850 [ 94.269618][ T1138] carl9170_usb_probe+0x43/0xd00 [ 94.274628][ T1138] usb_probe_interface+0x274/0x6a0 [ 94.279720][ T1138] really_probe+0x1c1/0xa40 [ 94.284218][ T1138] __driver_probe_device+0x2a6/0x460 [ 94.289514][ T1138] ? usb_match_id.part.0+0xdd/0x140 [ 94.294794][ T1138] driver_probe_device+0x44/0x110 [ 94.300073][ T1138] __device_attach_driver+0x185/0x250 [ 94.305428][ T1138] ? driver_allows_async_probing+0x110/0x110 [ 94.311561][ T1138] bus_for_each_drv+0x11e/0x1a0 [ 94.316413][ T1138] ? bus_for_each_dev+0x1a0/0x1a0 [ 94.321416][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 94.327461][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 94.332724][ T1138] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 94.338749][ T1138] __device_attach+0x19e/0x440 [ 94.343522][ T1138] ? device_driver_attach+0x1b0/0x1b0 [ 94.348885][ T1138] ? kobject_uevent_env+0x225/0x12f0 [ 94.354259][ T1138] bus_probe_device+0x19d/0x250 [ 94.359243][ T1138] device_add+0xa14/0x1b80 [ 94.363837][ T1138] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 94.370202][ T1138] ? usb_create_ep_devs+0x156/0x270 [ 94.375493][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 94.380782][ T1138] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 94.386681][ T1138] usb_set_configuration+0xc91/0x1840 [ 94.392310][ T1138] ? kernfs_create_link+0x167/0x220 [ 94.397595][ T1138] ? do_raw_spin_unlock+0x171/0x230 [ 94.402787][ T1138] usb_generic_driver_probe+0x74/0xa0 [ 94.408147][ T1138] usb_probe_device+0x95/0x240 [ 94.412977][ T1138] really_probe+0x1c1/0xa40 [ 94.417484][ T1138] __driver_probe_device+0x2a6/0x460 [ 94.422806][ T1138] driver_probe_device+0x44/0x110 [ 94.427817][ T1138] __device_attach_driver+0x185/0x250 [ 94.433289][ T1138] ? driver_allows_async_probing+0x110/0x110 [ 94.439696][ T1138] bus_for_each_drv+0x11e/0x1a0 [ 94.444533][ T1138] ? bus_for_each_dev+0x1a0/0x1a0 [ 94.449626][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 94.455812][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 94.460992][ T1138] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 94.466814][ T1138] __device_attach+0x19e/0x440 [ 94.471671][ T1138] ? device_driver_attach+0x1b0/0x1b0 [ 94.477034][ T1138] ? kobject_uevent_env+0x225/0x12f0 [ 94.482497][ T1138] bus_probe_device+0x19d/0x250 [ 94.487363][ T1138] device_add+0xa14/0x1b80 [ 94.492130][ T1138] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 94.498044][ T1138] ? lockdep_hardirqs_on+0x79/0x100 [ 94.503498][ T1138] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 94.510076][ T1138] ? add_device_randomness+0xaf/0xe0 [ 94.515366][ T1138] usb_new_device.cold+0x5d1/0xeeb [ 94.520547][ T1138] ? hub_disconnect+0x470/0x470 [ 94.525480][ T1138] ? rwlock_bug.part.0+0x90/0x90 [ 94.530396][ T1138] ? _raw_spin_unlock_irq+0x1f/0x40 [ 94.536096][ T1138] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 94.542188][ T1138] hub_event+0x114d/0x39d0 [ 94.546684][ T1138] ? hub_port_debounce+0x2d0/0x2d0 [ 94.552128][ T1138] ? lock_release+0x501/0x780 [ 94.556912][ T1138] ? lock_release+0x780/0x780 [ 94.561687][ T1138] ? lock_downgrade+0x6e0/0x6e0 [ 94.566720][ T1138] ? do_raw_spin_lock+0x120/0x2a0 [ 94.571850][ T1138] process_one_work+0x865/0x13d0 [ 94.577058][ T1138] ? lock_release+0x780/0x780 [ 94.581835][ T1138] ? pwq_dec_nr_in_flight+0x230/0x230 [ 94.587307][ T1138] ? rwlock_bug.part.0+0x90/0x90 [ 94.592267][ T1138] ? _raw_spin_lock_irq+0x41/0x50 [ 94.597394][ T1138] worker_thread+0x598/0xec0 [ 94.601987][ T1138] ? __kthread_parkme+0xc1/0x1f0 [ 94.607094][ T1138] ? process_one_work+0x13d0/0x13d0 [ 94.612404][ T1138] kthread+0x299/0x340 [ 94.616568][ T1138] ? kthread_complete_and_exit+0x20/0x20 [ 94.622334][ T1138] ret_from_fork+0x1f/0x30 [ 94.626936][ T1138] [ 94.630307][ T1138] Kernel Offset: disabled [ 94.634812][ T1138] Rebooting in 86400 seconds..