Warning: Permanently added '10.128.1.101' (ECDSA) to the list of known hosts. 2023/01/27 07:30:26 ignoring optional flag "sandboxArg"="0" 2023/01/27 07:30:26 parsed 1 programs [ 74.472361][ T26] audit: type=1400 audit(1674804626.748:188): avc: denied { mounton } for pid=5519 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/01/27 07:30:26 executed programs: 0 [ 74.499787][ T26] audit: type=1400 audit(1674804626.758:189): avc: denied { mount } for pid=5519 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 74.537740][ T26] audit: type=1400 audit(1674804626.758:190): avc: denied { create } for pid=5519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.561404][ T5066] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.565666][ T26] audit: type=1400 audit(1674804626.758:191): avc: denied { write } for pid=5519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.570264][ T5066] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.590312][ T26] audit: type=1400 audit(1674804626.758:192): avc: denied { read } for pid=5519 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 74.598655][ T5066] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.618127][ T26] audit: type=1400 audit(1674804626.808:193): avc: denied { create } for pid=5524 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.618150][ T26] audit: type=1400 audit(1674804626.818:194): avc: denied { ioctl } for pid=5524 comm="syz-executor.0" path="socket:[30532]" dev="sockfs" ino=30532 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.618169][ T26] audit: type=1400 audit(1674804626.848:195): avc: denied { read } for pid=4640 comm="dhcpcd" name="n79" dev="tmpfs" ino=1551 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.618194][ T26] audit: type=1400 audit(1674804626.848:196): avc: denied { open } for pid=4640 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1551 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.618214][ T26] audit: type=1400 audit(1674804626.848:197): avc: denied { getattr } for pid=4640 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1551 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 74.625954][ T5066] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.751657][ T5066] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.759420][ T5066] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.850381][ T5524] chnl_net:caif_netlink_parms(): no params data found [ 74.886263][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.894545][ T5524] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.902694][ T5524] device bridge_slave_0 entered promiscuous mode [ 74.910801][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.918997][ T5524] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.927565][ T5524] device bridge_slave_1 entered promiscuous mode [ 74.948627][ T5524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.959730][ T5524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.981512][ T5524] team0: Port device team_slave_0 added [ 74.988801][ T5524] team0: Port device team_slave_1 added [ 75.007194][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.014792][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.042941][ T5524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.055891][ T5524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.063058][ T5524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.089773][ T5524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.117661][ T5524] device hsr_slave_0 entered promiscuous mode [ 75.124591][ T5524] device hsr_slave_1 entered promiscuous mode [ 75.788160][ T5524] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.798259][ T5524] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.807677][ T5524] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.816737][ T5524] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.843244][ T5524] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.850676][ T5524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.858348][ T5524] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.865821][ T5524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.877085][ T25] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.885346][ T25] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.951745][ T5524] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.969945][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.978707][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.990365][ T5524] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.003501][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.014030][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.024664][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.032407][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.052607][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.062852][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.071999][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.079162][ T2147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.089556][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.099073][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.117783][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.129027][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.137852][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.148563][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.157580][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.166121][ T2147] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.181847][ T5524] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.194535][ T5524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.206209][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.215649][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 76.225917][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.384592][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.394091][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.406442][ T5524] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.408355][ T898] cfg80211: failed to load regulatory.db [ 76.435873][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.446176][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.471146][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.480381][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.492032][ T5524] device veth0_vlan entered promiscuous mode [ 76.500245][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.509911][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.522041][ T5524] device veth1_vlan entered promiscuous mode [ 76.549537][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.559233][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.567511][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.576156][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.587586][ T5524] device veth0_macvtap entered promiscuous mode [ 76.599299][ T5524] device veth1_macvtap entered promiscuous mode [ 76.617439][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.624813][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.634149][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.643248][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.653108][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.665364][ T5524] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.675552][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.684696][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.695536][ T5524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.705053][ T5524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.715437][ T5524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.724765][ T5524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.794911][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.807671][ T5066] Bluetooth: hci0: command 0x0409 tx timeout [ 76.809586][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.836834][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.851622][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.860830][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.872262][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.196788][ T898] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.556812][ T898] usb 1-1: config 8 has an invalid interface number: 184 but max is 0 [ 77.565427][ T898] usb 1-1: config 8 has an invalid interface number: 100 but max is 0 [ 77.574430][ T898] usb 1-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 77.583943][ T898] usb 1-1: config 8 has 2 interfaces, different from the descriptor's value: 1 [ 77.593467][ T898] usb 1-1: config 8 has no interface number 0 [ 77.600174][ T898] usb 1-1: config 8 has no interface number 1 [ 77.606405][ T898] usb 1-1: config 8 interface 184 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 77.619877][ T898] usb 1-1: too many endpoints for config 8 interface 100 altsetting 231: 95, using maximum allowed: 30 [ 77.631519][ T898] usb 1-1: config 8 interface 100 altsetting 231 bulk endpoint 0x9 has invalid maxpacket 32 [ 77.641926][ T898] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x9, skipping [ 77.653805][ T898] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping [ 77.665567][ T898] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xE, skipping [ 77.677123][ T898] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping [ 77.689678][ T898] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0x4, skipping [ 77.702003][ T898] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xA, skipping [ 77.713950][ T898] usb 1-1: config 8 interface 100 altsetting 231 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 77.725550][ T898] usb 1-1: config 8 interface 100 altsetting 231 has a duplicate endpoint with address 0xF, skipping [ 77.737498][ T898] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x80, skipping [ 77.750669][ T898] usb 1-1: config 8 interface 100 altsetting 231 has an invalid endpoint with address 0x0, skipping [ 77.761818][ T898] usb 1-1: config 8 interface 100 altsetting 231 has 15 endpoint descriptors, different from the interface descriptor's value: 95 [ 77.777725][ T898] usb 1-1: config 8 interface 100 has no altsetting 0 [ 77.784834][ T898] usb 1-1: New USB device found, idVendor=07d1, idProduct=3a09, bcdDevice= 1.b3 [ 77.794308][ T898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.086952][ T898] usb 1-1: string descriptor 0 read error: -71 [ 78.897999][ T5066] Bluetooth: hci0: command 0x041b tx timeout [ 78.976977][ T898] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 79.538398][ T5701] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.574527][ T5064] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 79.581023][ T5064] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 79.590293][ T898] ------------[ cut here ]------------ [ 79.595966][ T898] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 79.603000][ T898] WARNING: CPU: 0 PID: 898 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb0b/0x1690 [ 79.614766][ T898] Modules linked in: [ 79.619116][ T898] CPU: 0 PID: 898 Comm: kworker/0:2 Not tainted 6.2.0-rc5-syzkaller #0 [ 79.629003][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 79.640081][ T898] Workqueue: usb_hub_wq hub_event [ 79.645251][ T898] RIP: 0010:usb_submit_urb+0xb0b/0x1690 [ 79.652544][ T898] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 df 60 16 ff 44 8b 04 24 4c 89 e2 48 c7 c7 c0 cb 12 8a 8b 4c 24 08 48 89 c6 e8 8f 86 67 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 79.673837][ T898] RSP: 0018:ffffc900043b6f08 EFLAGS: 00010286 [ 79.680561][ T898] RAX: 0000000000000000 RBX: ffff88807bdda000 RCX: 0000000000000000 [ 79.690180][ T898] RDX: 0000000000000001 RSI: ffffffff89c42080 RDI: fffff52000876dd3 [ 79.698848][ T898] RBP: ffff88802827bc00 R08: 0000000000000001 R09: ffffc900043b6d2f [ 79.708517][ T898] R10: fffff52000876da5 R11: 0000000000000000 R12: ffff8880291bd8c0 [ 79.716517][ T898] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 79.725163][ T898] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000 [ 79.736007][ T898] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.742912][ T898] CR2: 00005616086ba2e0 CR3: 000000002c23c000 CR4: 00000000003506f0 [ 79.752723][ T898] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.764990][ T898] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.774970][ T898] Call Trace: [ 79.778894][ T898] [ 79.781859][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 79.789872][ T898] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 79.795791][ T898] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 79.802203][ T898] carl9170_usb_disconnect+0xc5/0x100 [ 79.809313][ T898] usb_unbind_interface+0x187/0x7f0 [ 79.814636][ T898] device_release_driver_internal+0x3c0/0x600 [ 79.821762][ T898] usb_forced_unbind_intf+0xee/0x1c0 [ 79.828662][ T898] usb_reset_device+0x3c1/0x970 [ 79.833751][ T898] carl9170_usb_probe+0x47/0xd00 [ 79.839372][ T898] usb_probe_interface+0x278/0x6a0 [ 79.844505][ T898] really_probe+0x5a6/0xa50 [ 79.851099][ T898] __driver_probe_device+0x186/0x460 [ 79.856514][ T898] ? usb_match_id.part.0+0xdd/0x140 [ 79.862211][ T898] driver_probe_device+0x44/0x110 [ 79.868884][ T898] __device_attach_driver+0x14e/0x270 [ 79.874292][ T898] ? driver_probe_device+0x110/0x110 [ 79.880470][ T898] bus_for_each_drv+0x122/0x1a0 [ 79.885346][ T898] ? bus_for_each_dev+0x1a0/0x1a0 [ 79.892055][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 79.898477][ T898] ? lockdep_hardirqs_on+0x7d/0x100 [ 79.904225][ T898] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 79.911965][ T898] __device_attach+0x19e/0x440 [ 79.917226][ T898] ? device_driver_attach+0x1b0/0x1b0 [ 79.922895][ T898] ? kobject_uevent_env+0x229/0x12d0 [ 79.930755][ T898] bus_probe_device+0x1a1/0x250 [ 79.935774][ T898] device_add+0xa18/0x1b90 [ 79.943419][ T898] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 79.951298][ T898] ? usb_create_ep_devs+0x15a/0x270 [ 79.956530][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 79.962993][ T898] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 79.970566][ T898] usb_set_configuration+0xa05/0x18a0 [ 79.975975][ T898] ? kernfs_create_link+0x16b/0x230 [ 79.981814][ T898] ? do_raw_spin_unlock+0x175/0x230 [ 79.988620][ T898] usb_generic_driver_probe+0x78/0xa0 [ 79.994107][ T898] usb_probe_device+0x98/0x240 [ 79.999401][ T898] really_probe+0x5a6/0xa50 [ 80.004111][ T898] __driver_probe_device+0x186/0x460 [ 80.011063][ T898] driver_probe_device+0x44/0x110 [ 80.016306][ T898] __device_attach_driver+0x14e/0x270 [ 80.022172][ T898] ? driver_probe_device+0x110/0x110 [ 80.029276][ T898] bus_for_each_drv+0x122/0x1a0 [ 80.034249][ T898] ? preempt_schedule_thunk+0x1a/0x20 [ 80.040373][ T898] ? bus_for_each_dev+0x1a0/0x1a0 [ 80.045558][ T898] ? _raw_spin_unlock_irqrestore+0x5b/0x70 [ 80.053030][ T898] __device_attach+0x19e/0x440 [ 80.058322][ T898] ? device_driver_attach+0x1b0/0x1b0 [ 80.063794][ T898] ? kobject_uevent_env+0x229/0x12d0 [ 80.071004][ T898] bus_probe_device+0x1a1/0x250 [ 80.075907][ T898] device_add+0xa18/0x1b90 [ 80.080714][ T898] ? usb_new_device+0xf2/0x7f0 [ 80.085829][ T898] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 80.093719][ T898] ? usb_detect_static_quirks+0xbc/0x2d0 [ 80.101008][ T898] ? mark_held_locks+0x9f/0xe0 [ 80.105892][ T898] usb_new_device.cold+0x600/0xf02 [ 80.112606][ T898] ? hub_disconnect+0x470/0x470 [ 80.117846][ T898] ? rwlock_bug.part.0+0x90/0x90 [ 80.122808][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 80.130534][ T898] hub_event+0x2450/0x3ce0 [ 80.135044][ T898] ? hub_port_debounce+0x2e0/0x2e0 [ 80.140704][ T898] ? lock_acquire+0x1e3/0x630 [ 80.145555][ T898] ? lock_release+0x810/0x810 [ 80.152382][ T898] ? lock_downgrade+0x6e0/0x6e0 [ 80.157877][ T898] ? do_raw_spin_lock+0x124/0x2b0 [ 80.162931][ T898] process_one_work+0x8ba/0x14c0 [ 80.169487][ T898] ? pwq_dec_nr_in_flight+0x230/0x230 [ 80.175535][ T898] ? rwlock_bug.part.0+0x90/0x90 [ 80.181579][ T898] ? _raw_spin_lock_irq+0x45/0x50 [ 80.188444][ T898] worker_thread+0x59c/0xec0 [ 80.193420][ T898] ? __kthread_parkme+0xc1/0x1f0 [ 80.199077][ T898] ? process_one_work+0x14c0/0x14c0 [ 80.204396][ T898] kthread+0x298/0x340 [ 80.210373][ T898] ? kthread_complete_and_exit+0x20/0x20 [ 80.216454][ T898] ret_from_fork+0x1f/0x30 [ 80.222122][ T898] [ 80.225176][ T898] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 80.233083][ T898] CPU: 0 PID: 898 Comm: kworker/0:2 Not tainted 6.2.0-rc5-syzkaller #0 [ 80.241679][ T898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023 [ 80.252635][ T898] Workqueue: usb_hub_wq hub_event [ 80.257854][ T898] Call Trace: [ 80.261147][ T898] [ 80.264429][ T898] dump_stack_lvl+0x5b/0x81 [ 80.268943][ T898] panic+0x21d/0x457 [ 80.273372][ T898] ? panic_print_sys_info.part.0+0x6e/0x6e [ 80.279714][ T898] ? usb_submit_urb+0xb0b/0x1690 [ 80.284755][ T898] check_panic_on_warn.cold+0x14/0x2b [ 80.290147][ T898] __warn+0xd4/0x170 [ 80.294150][ T898] ? usb_submit_urb+0xb0b/0x1690 [ 80.299105][ T898] report_bug+0x15e/0x1c0 [ 80.303454][ T898] ? vprintk_emit+0x126/0x3d0 [ 80.308145][ T898] handle_bug+0x3c/0x70 [ 80.312501][ T898] exc_invalid_op+0x18/0x50 [ 80.317189][ T898] asm_exc_invalid_op+0x1a/0x20 [ 80.322064][ T898] RIP: 0010:usb_submit_urb+0xb0b/0x1690 [ 80.328066][ T898] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 df 60 16 ff 44 8b 04 24 4c 89 e2 48 c7 c7 c0 cb 12 8a 8b 4c 24 08 48 89 c6 e8 8f 86 67 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 80.347943][ T898] RSP: 0018:ffffc900043b6f08 EFLAGS: 00010286 [ 80.354199][ T898] RAX: 0000000000000000 RBX: ffff88807bdda000 RCX: 0000000000000000 [ 80.362271][ T898] RDX: 0000000000000001 RSI: ffffffff89c42080 RDI: fffff52000876dd3 [ 80.370433][ T898] RBP: ffff88802827bc00 R08: 0000000000000001 R09: ffffc900043b6d2f [ 80.378523][ T898] R10: fffff52000876da5 R11: 0000000000000000 R12: ffff8880291bd8c0 [ 80.386509][ T898] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001 [ 80.394495][ T898] ? usb_submit_urb+0xb0b/0x1690 [ 80.399460][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 80.405854][ T898] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 80.411766][ T898] carl9170_usb_submit_cmd_urb+0x61/0xe0 [ 80.418114][ T898] carl9170_usb_disconnect+0xc5/0x100 [ 80.423552][ T898] usb_unbind_interface+0x187/0x7f0 [ 80.428761][ T898] device_release_driver_internal+0x3c0/0x600 [ 80.434935][ T898] usb_forced_unbind_intf+0xee/0x1c0 [ 80.440241][ T898] usb_reset_device+0x3c1/0x970 [ 80.445197][ T898] carl9170_usb_probe+0x47/0xd00 [ 80.450388][ T898] usb_probe_interface+0x278/0x6a0 [ 80.455519][ T898] really_probe+0x5a6/0xa50 [ 80.460048][ T898] __driver_probe_device+0x186/0x460 [ 80.465431][ T898] ? usb_match_id.part.0+0xdd/0x140 [ 80.470727][ T898] driver_probe_device+0x44/0x110 [ 80.475948][ T898] __device_attach_driver+0x14e/0x270 [ 80.481435][ T898] ? driver_probe_device+0x110/0x110 [ 80.487078][ T898] bus_for_each_drv+0x122/0x1a0 [ 80.491952][ T898] ? bus_for_each_dev+0x1a0/0x1a0 [ 80.496991][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 80.503067][ T898] ? lockdep_hardirqs_on+0x7d/0x100 [ 80.508451][ T898] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 80.514722][ T898] __device_attach+0x19e/0x440 [ 80.519499][ T898] ? device_driver_attach+0x1b0/0x1b0 [ 80.524882][ T898] ? kobject_uevent_env+0x229/0x12d0 [ 80.530366][ T898] bus_probe_device+0x1a1/0x250 [ 80.535363][ T898] device_add+0xa18/0x1b90 [ 80.540120][ T898] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 80.546470][ T898] ? usb_create_ep_devs+0x15a/0x270 [ 80.551784][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 80.557869][ T898] ? create_intf_ep_devs.isra.0+0x113/0x190 [ 80.563899][ T898] usb_set_configuration+0xa05/0x18a0 [ 80.569294][ T898] ? kernfs_create_link+0x16b/0x230 [ 80.574682][ T898] ? do_raw_spin_unlock+0x175/0x230 [ 80.579908][ T898] usb_generic_driver_probe+0x78/0xa0 [ 80.585363][ T898] usb_probe_device+0x98/0x240 [ 80.590147][ T898] really_probe+0x5a6/0xa50 [ 80.594664][ T898] __driver_probe_device+0x186/0x460 [ 80.600050][ T898] driver_probe_device+0x44/0x110 [ 80.605093][ T898] __device_attach_driver+0x14e/0x270 [ 80.610592][ T898] ? driver_probe_device+0x110/0x110 [ 80.615974][ T898] bus_for_each_drv+0x122/0x1a0 [ 80.620840][ T898] ? preempt_schedule_thunk+0x1a/0x20 [ 80.626756][ T898] ? bus_for_each_dev+0x1a0/0x1a0 [ 80.631798][ T898] ? _raw_spin_unlock_irqrestore+0x5b/0x70 [ 80.637790][ T898] __device_attach+0x19e/0x440 [ 80.642744][ T898] ? device_driver_attach+0x1b0/0x1b0 [ 80.648130][ T898] ? kobject_uevent_env+0x229/0x12d0 [ 80.653699][ T898] bus_probe_device+0x1a1/0x250 [ 80.658566][ T898] device_add+0xa18/0x1b90 [ 80.663261][ T898] ? usb_new_device+0xf2/0x7f0 [ 80.668050][ T898] ? __fw_devlink_link_to_suppliers+0x260/0x260 [ 80.674886][ T898] ? usb_detect_static_quirks+0xbc/0x2d0 [ 80.680719][ T898] ? mark_held_locks+0x9f/0xe0 [ 80.685497][ T898] usb_new_device.cold+0x600/0xf02 [ 80.690652][ T898] ? hub_disconnect+0x470/0x470 [ 80.695685][ T898] ? rwlock_bug.part.0+0x90/0x90 [ 80.700719][ T898] ? lockdep_hardirqs_on_prepare+0x17f/0x410 [ 80.706813][ T898] hub_event+0x2450/0x3ce0 [ 80.711363][ T898] ? hub_port_debounce+0x2e0/0x2e0 [ 80.716486][ T898] ? lock_acquire+0x1e3/0x630 [ 80.721172][ T898] ? lock_release+0x810/0x810 [ 80.725949][ T898] ? lock_downgrade+0x6e0/0x6e0 [ 80.730903][ T898] ? do_raw_spin_lock+0x124/0x2b0 [ 80.735933][ T898] process_one_work+0x8ba/0x14c0 [ 80.740897][ T898] ? pwq_dec_nr_in_flight+0x230/0x230 [ 80.746377][ T898] ? rwlock_bug.part.0+0x90/0x90 [ 80.751322][ T898] ? _raw_spin_lock_irq+0x45/0x50 [ 80.756528][ T898] worker_thread+0x59c/0xec0 [ 80.761220][ T898] ? __kthread_parkme+0xc1/0x1f0 [ 80.766260][ T898] ? process_one_work+0x14c0/0x14c0 [ 80.771466][ T898] kthread+0x298/0x340 [ 80.775543][ T898] ? kthread_complete_and_exit+0x20/0x20 [ 80.781271][ T898] ret_from_fork+0x1f/0x30 [ 80.785699][ T898] [ 80.788965][ T898] Kernel Offset: disabled [ 80.793648][ T898] Rebooting in 86400 seconds..