[ 54.404226][ T1022] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.416287][ T1022] veth1_macvtap: left promiscuous mode [ 54.421921][ T1022] veth0_macvtap: left promiscuous mode [ 54.427795][ T1022] veth1_vlan: left promiscuous mode [ 54.433254][ T1022] veth0_vlan: left promiscuous mode [ 54.567580][ T1022] team0 (unregistering): Port device team_slave_1 removed [ 54.579323][ T1022] team0 (unregistering): Port device team_slave_0 removed [ 54.591162][ T1022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.603444][ T1022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.652683][ T1022] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.40' (ECDSA) to the list of known hosts. 2023/03/09 18:51:46 ignoring optional flag "sandboxArg"="0" 2023/03/09 18:51:46 parsed 1 programs 2023/03/09 18:51:46 executed programs: 0 [ 67.971081][ T26] audit: type=1400 audit(1678387906.783:188): avc: denied { mounton } for pid=5465 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 68.015823][ T26] audit: type=1400 audit(1678387906.783:189): avc: denied { mount } for pid=5465 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 68.039719][ T26] audit: type=1400 audit(1678387906.783:190): avc: denied { create } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.060743][ T26] audit: type=1400 audit(1678387906.783:191): avc: denied { write } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.081455][ T26] audit: type=1400 audit(1678387906.783:192): avc: denied { read } for pid=5465 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.102068][ T26] audit: type=1400 audit(1678387906.823:193): avc: denied { read } for pid=4612 comm="dhcpcd" name="n79" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.123661][ T26] audit: type=1400 audit(1678387906.823:194): avc: denied { open } for pid=4612 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.146832][ T26] audit: type=1400 audit(1678387906.823:195): avc: denied { getattr } for pid=4612 comm="dhcpcd" path="/run/udev/data/n79" dev="tmpfs" ino=1535 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 68.170281][ T26] audit: type=1400 audit(1678387906.833:196): avc: denied { create } for pid=5471 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.845730][ T26] audit: type=1400 audit(1678387907.663:197): avc: denied { create } for pid=5472 comm="dhcpcd-run-hook" name="resolv.conf.lapb7.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 69.030824][ T4356] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.038974][ T4356] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.047077][ T4356] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.055575][ T4356] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.063145][ T4356] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.071381][ T4356] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.150921][ T5471] chnl_net:caif_netlink_parms(): no params data found [ 69.187878][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.195170][ T5471] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.202245][ T5471] bridge_slave_0: entered allmulticast mode [ 69.209190][ T5471] bridge_slave_0: entered promiscuous mode [ 69.216881][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.224016][ T5471] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.231426][ T5471] bridge_slave_1: entered allmulticast mode [ 69.238391][ T5471] bridge_slave_1: entered promiscuous mode [ 69.256067][ T5471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.267283][ T5471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.290426][ T5471] team0: Port device team_slave_0 added [ 69.297611][ T5471] team0: Port device team_slave_1 added [ 69.315361][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.322409][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.349625][ T5471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.362475][ T5471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.369989][ T5471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.396184][ T5471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.422829][ T5471] hsr_slave_0: entered promiscuous mode [ 69.429277][ T5471] hsr_slave_1: entered promiscuous mode [ 69.968880][ T5471] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.978515][ T5471] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.989932][ T5471] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.000554][ T5471] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.025254][ T5471] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.032375][ T5471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.039825][ T5471] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.047060][ T5471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.099120][ T5471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.112542][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.121989][ T4361] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.130248][ T4361] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.139700][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 70.154378][ T5471] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.178725][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.188621][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.198605][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.206900][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.215266][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.224291][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.236521][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.243714][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.252144][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.262207][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.282284][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.292739][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.301746][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.312269][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.321733][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.331793][ T1580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.344280][ T5471] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.360658][ T5471] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.369238][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.379181][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.389248][ T5047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.505232][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.512755][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.527218][ T5471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.550930][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.563126][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.583148][ T5471] veth0_vlan: entered promiscuous mode [ 70.593590][ T5530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.604245][ T5530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.619151][ T5471] veth1_vlan: entered promiscuous mode [ 70.628740][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.637674][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.647395][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.672346][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.681726][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.692760][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.704003][ T5471] veth0_macvtap: entered promiscuous mode [ 70.717374][ T5471] veth1_macvtap: entered promiscuous mode [ 70.738327][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.747548][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.757327][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.767080][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.776335][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.790540][ T5471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.798517][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.809629][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.820682][ T5471] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.832233][ T5471] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.842236][ T5471] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.853131][ T5471] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.932664][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.952606][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.969717][ T5538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.993100][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.001691][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.013930][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.116242][ T4356] Bluetooth: hci0: command 0x0409 tx timeout [ 71.186385][ T6] cfg80211: failed to load regulatory.db [ 71.347218][ T5538] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.634958][ T5538] usb 1-1: Using ep0 maxpacket: 16 [ 71.756239][ T5538] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 71.987240][ T5538] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 71.996720][ T5538] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.005893][ T5538] usb 1-1: Product: syz [ 72.010166][ T5538] usb 1-1: Manufacturer: syz [ 72.015971][ T5538] usb 1-1: SerialNumber: syz [ 72.041154][ T5538] usb 1-1: config 0 descriptor?? [ 72.089985][ T5538] cm109 1-1:0.0: invalid payload size 250, expected 4 [ 72.116888][ T5538] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 72.514039][ T4361] usb 1-1: USB disconnect, device number 2 [ 72.535484][ C1] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 72.542608][ C1] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 72.562537][ T4361] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 2023/03/09 18:51:51 executed programs: 1 [ 73.184765][ T4356] Bluetooth: hci0: command 0x041b tx timeout [ 73.324889][ T4361] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 73.566177][ T4361] usb 1-1: Using ep0 maxpacket: 16 [ 73.686132][ T4361] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 73.854939][ T4361] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 73.864184][ T4361] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.873973][ T4361] usb 1-1: Product: syz [ 73.878498][ T4361] usb 1-1: Manufacturer: syz [ 73.883573][ T4361] usb 1-1: SerialNumber: syz [ 73.900715][ T4361] usb 1-1: config 0 descriptor?? [ 73.946212][ T4361] cm109 1-1:0.0: invalid payload size 250, expected 4 [ 73.953986][ T4361] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 74.376071][ T4361] usb 1-1: USB disconnect, device number 3 [ 74.385529][ C0] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 74.392485][ C0] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 74.415583][ T4361] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 75.174829][ T6] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 75.264772][ T4356] Bluetooth: hci0: command 0x040f tx timeout [ 75.414697][ T6] usb 1-1: Using ep0 maxpacket: 16 [ 75.534922][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 75.704943][ T6] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 75.714862][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.723135][ T6] usb 1-1: Product: syz [ 75.728196][ T6] usb 1-1: Manufacturer: syz [ 75.732937][ T6] usb 1-1: SerialNumber: syz [ 75.749596][ T6] usb 1-1: config 0 descriptor?? [ 75.796367][ T6] cm109 1-1:0.0: invalid payload size 250, expected 4 [ 75.804146][ T6] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 76.220500][ T5047] usb 1-1: USB disconnect, device number 4 [ 76.234719][ C0] cm109 1-1:0.0: cm109_urb_ctl_callback: urb status -71 [ 76.241684][ C0] cm109 1-1:0.0: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 76.252055][ T5047] cm109 1-1:0.0: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 77.044823][ T5046] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 77.314772][ T5046] usb 1-1: Using ep0 maxpacket: 16 [ 77.355355][ T4356] Bluetooth: hci0: command 0x0419 tx timeout [ 77.454809][ T5046] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 77.645039][ T5046] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=b6.8f [ 77.654297][ T5046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.664105][ T5046] usb 1-1: Product: syz [ 77.670388][ T5046] usb 1-1: Manufacturer: syz [ 77.677092][ T5046] usb 1-1: SerialNumber: syz [ 77.694924][ T5046] usb 1-1: config 0 descriptor?? [ 77.746291][ T5046] cm109 1-1:0.0: invalid payload size 250, expected 4 [ 77.754055][ T5046] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 78.171560][ T5046] usb 1-1: USB disconnect, device number 5 [ 78.177666][ C1] cm109 1-1:0.0: cm109_urb_irq_callback: urb status -71 [ 78.177696][ C1] ------------[ cut here ]------------ [ 78.177725][ C1] URB ffff888028e2e200 submitted while active [ 78.177860][ C1] WARNING: CPU: 1 PID: 5046 at drivers/usb/core/urb.c:379 usb_submit_urb+0x1059/0x1690 [ 78.177876][ C1] Modules linked in: [ 78.177885][ C1] CPU: 1 PID: 5046 Comm: kworker/1:3 Not tainted 6.3.0-rc1-syzkaller #0 [ 78.177892][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 78.177898][ C1] Workqueue: usb_hub_wq hub_event [ 78.177909][ C1] RIP: 0010:usb_submit_urb+0x1059/0x1690 [ 78.177916][ C1] Code: 3d d9 52 ae 07 00 b8 f0 ff ff ff 0f 85 f5 fb ff ff 48 89 ee 48 c7 c7 20 e7 c9 89 89 04 24 c6 05 ba 52 ae 07 01 e8 47 0a f1 fb <0f> 0b 8b 04 24 e9 d2 fb ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 [ 78.177923][ C1] RSP: 0018:ffffc900003e8a18 EFLAGS: 00010082 [ 78.177929][ C1] RAX: 0000000000000000 RBX: ffff88801bf5c000 RCX: 0000000000000000 [ 78.177935][ C1] RDX: 0000000000000104 RSI: 0000000000000004 RDI: 0000000000000001 [ 78.177939][ C1] RBP: ffff888028e2e200 R08: 0000000000000001 R09: ffff8880b9d2798b [ 78.177944][ C1] R10: ffffed10173a4f31 R11: 0000000000000001 R12: ffff88801bf5c058 [ 78.177948][ C1] R13: ffff8880285542c0 R14: 000000000000000f R15: ffff88802873db00 [ 78.177953][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 78.177962][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.177967][ C1] CR2: 0000557398ebdd28 CR3: 000000007e3bc000 CR4: 00000000003506e0 [ 78.177972][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 78.177977][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 78.177982][ C1] Call Trace: [ 78.177986][ C1] [ 78.177991][ C1] cm109_urb_irq_callback+0x280/0xa10 [ 78.178003][ C1] __usb_hcd_giveback_urb+0x23e/0x3f0 [ 78.178010][ C1] dummy_timer+0xffa/0x2c10 [ 78.178021][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 78.178031][ C1] ? lock_acquire+0x1df/0x670 [ 78.178038][ C1] ? lock_downgrade+0x690/0x690 [ 78.178045][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 78.178051][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178059][ C1] call_timer_fn+0x19b/0x5d0 [ 78.178069][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178077][ C1] ? add_timer_on+0x440/0x440 [ 78.178084][ C1] ? lock_downgrade+0x690/0x690 [ 78.178091][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178098][ C1] expire_timers+0x259/0x4f0 [ 78.178106][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178114][ C1] run_timer_softirq+0x292/0x790 [ 78.178123][ C1] ? expire_timers+0x4f0/0x4f0 [ 78.178131][ C1] ? ktime_get+0x117/0x2f0 [ 78.178138][ C1] __do_softirq+0x2df/0xadf [ 78.178148][ C1] __irq_exit_rcu+0x114/0x190 [ 78.178157][ C1] irq_exit_rcu+0x5/0x20 [ 78.178163][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 78.178173][ C1] [ 78.178177][ C1] [ 78.178181][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.178192][ C1] RIP: 0010:console_flush_all+0x4cc/0xa70 [ 78.178201][ C1] Code: 36 05 00 00 44 88 7d 00 e8 e1 4a 00 00 4d 85 e4 0f 85 06 02 00 00 9c 58 f6 c4 02 0f 85 40 03 00 00 4d 85 e4 74 01 fb 48 89 e8 <48> 89 ea 48 c1 e8 03 83 e2 07 42 0f b6 04 28 38 d0 7f 08 84 c0 0f [ 78.178208][ C1] RSP: 0018:ffffc900030af648 EFLAGS: 00000206 [ 78.178216][ C1] RAX: ffffc900030af788 RBX: ffffffff8bdfe6e0 RCX: 1ffffffff1fb2836 [ 78.178221][ C1] RDX: 0000000000000000 RSI: ffffffff892bf8c0 RDI: ffffffff89863940 [ 78.178226][ C1] RBP: ffffc900030af788 R08: 0000000000000001 R09: ffffffff8fd93a47 [ 78.178231][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000200 [ 78.178236][ C1] R13: dffffc0000000000 R14: ffffffff8bdfe738 R15: 0000000000000000 [ 78.178244][ C1] ? devkmsg_read+0x430/0x430 [ 78.178251][ C1] ? lock_acquire+0x1df/0x670 [ 78.178259][ C1] ? lock_release+0x780/0x780 [ 78.178266][ C1] console_unlock+0x91/0x140 [ 78.178273][ C1] ? console_flush_all+0xa70/0xa70 [ 78.178279][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178286][ C1] ? dev_printk_emit+0xcc/0x110 [ 78.178296][ C1] ? __down_trylock_console_sem+0x6c/0xb0 [ 78.178304][ C1] vprintk_emit+0xa8/0x3d0 [ 78.178312][ C1] dev_printk_emit+0xcc/0x110 [ 78.178319][ C1] ? root_device_release+0x10/0x10 [ 78.178327][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 78.178336][ C1] ? mark_lock.part.0+0xee/0x1970 [ 78.178343][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 78.178351][ C1] _dev_info+0xc9/0x100 [ 78.178359][ C1] ? _dev_notice+0x100/0x100 [ 78.178367][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178373][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 78.178380][ C1] usb_disconnect+0xc9/0x870 [ 78.178388][ C1] hub_event+0x17f3/0x4240 [ 78.178397][ C1] ? hub_port_debounce+0x2e0/0x2e0 [ 78.178404][ C1] ? lock_acquire+0x1df/0x670 [ 78.178411][ C1] ? lock_release+0x780/0x780 [ 78.178417][ C1] ? lock_downgrade+0x690/0x690 [ 78.178433][ C1] process_one_work+0x8ba/0x1590 [ 78.178444][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 78.178452][ C1] ? spin_bug+0x1c0/0x1c0 [ 78.178460][ C1] worker_thread+0x598/0xec0 [ 78.178468][ C1] ? __kthread_parkme+0xc1/0x1f0 [ 78.178475][ C1] ? process_one_work+0x1590/0x1590 [ 78.178483][ C1] kthread+0x294/0x330 [ 78.178489][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 78.178497][ C1] ret_from_fork+0x1f/0x30 [ 78.178506][ C1] [ 78.178511][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 78.178515][ C1] CPU: 1 PID: 5046 Comm: kworker/1:3 Not tainted 6.3.0-rc1-syzkaller #0 [ 78.178521][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/02/2023 [ 78.178525][ C1] Workqueue: usb_hub_wq hub_event [ 78.178533][ C1] Call Trace: [ 78.178536][ C1] [ 78.178538][ C1] dump_stack_lvl+0x60/0xa0 [ 78.178548][ C1] panic+0x4ab/0x550 [ 78.178555][ C1] ? panic_smp_self_stop+0x70/0x70 [ 78.178563][ C1] ? usb_submit_urb+0x1059/0x1690 [ 78.178569][ C1] check_panic_on_warn+0x71/0x80 [ 78.178576][ C1] __warn+0xd0/0x3e0 [ 78.178583][ C1] ? usb_submit_urb+0x1059/0x1690 [ 78.178589][ C1] report_bug+0x33f/0x400 [ 78.178596][ C1] handle_bug+0x3c/0x70 [ 78.178602][ C1] exc_invalid_op+0x14/0x40 [ 78.178608][ C1] asm_exc_invalid_op+0x16/0x20 [ 78.178615][ C1] RIP: 0010:usb_submit_urb+0x1059/0x1690 [ 78.178621][ C1] Code: 3d d9 52 ae 07 00 b8 f0 ff ff ff 0f 85 f5 fb ff ff 48 89 ee 48 c7 c7 20 e7 c9 89 89 04 24 c6 05 ba 52 ae 07 01 e8 47 0a f1 fb <0f> 0b 8b 04 24 e9 d2 fb ff ff 48 b8 00 00 00 00 00 fc ff df 48 89 [ 78.178627][ C1] RSP: 0018:ffffc900003e8a18 EFLAGS: 00010082 [ 78.178633][ C1] RAX: 0000000000000000 RBX: ffff88801bf5c000 RCX: 0000000000000000 [ 78.178637][ C1] RDX: 0000000000000104 RSI: 0000000000000004 RDI: 0000000000000001 [ 78.178641][ C1] RBP: ffff888028e2e200 R08: 0000000000000001 R09: ffff8880b9d2798b [ 78.178645][ C1] R10: ffffed10173a4f31 R11: 0000000000000001 R12: ffff88801bf5c058 [ 78.178649][ C1] R13: ffff8880285542c0 R14: 000000000000000f R15: ffff88802873db00 [ 78.178655][ C1] ? usb_submit_urb+0x1059/0x1690 [ 78.178662][ C1] cm109_urb_irq_callback+0x280/0xa10 [ 78.178670][ C1] __usb_hcd_giveback_urb+0x23e/0x3f0 [ 78.178677][ C1] dummy_timer+0xffa/0x2c10 [ 78.178683][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 78.178691][ C1] ? lock_acquire+0x1df/0x670 [ 78.178697][ C1] ? lock_downgrade+0x690/0x690 [ 78.178703][ C1] ? print_usage_bug.part.0+0x660/0x660 [ 78.178708][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178716][ C1] call_timer_fn+0x19b/0x5d0 [ 78.178723][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178729][ C1] ? add_timer_on+0x440/0x440 [ 78.178735][ C1] ? lock_downgrade+0x690/0x690 [ 78.178741][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178748][ C1] expire_timers+0x259/0x4f0 [ 78.178754][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 78.178761][ C1] run_timer_softirq+0x292/0x790 [ 78.178769][ C1] ? expire_timers+0x4f0/0x4f0 [ 78.178775][ C1] ? ktime_get+0x117/0x2f0 [ 78.178782][ C1] __do_softirq+0x2df/0xadf [ 78.178788][ C1] __irq_exit_rcu+0x114/0x190 [ 78.178794][ C1] irq_exit_rcu+0x5/0x20 [ 78.178800][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 78.178807][ C1] [ 78.178809][ C1] [ 78.178812][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 78.178819][ C1] RIP: 0010:console_flush_all+0x4cc/0xa70 [ 78.178825][ C1] Code: 36 05 00 00 44 88 7d 00 e8 e1 4a 00 00 4d 85 e4 0f 85 06 02 00 00 9c 58 f6 c4 02 0f 85 40 03 00 00 4d 85 e4 74 01 fb 48 89 e8 <48> 89 ea 48 c1 e8 03 83 e2 07 42 0f b6 04 28 38 d0 7f 08 84 c0 0f [ 78.178829][ C1] RSP: 0018:ffffc900030af648 EFLAGS: 00000206 [ 78.178835][ C1] RAX: ffffc900030af788 RBX: ffffffff8bdfe6e0 RCX: 1ffffffff1fb2836 [ 78.178839][ C1] RDX: 0000000000000000 RSI: ffffffff892bf8c0 RDI: ffffffff89863940 [ 78.178843][ C1] RBP: ffffc900030af788 R08: 0000000000000001 R09: ffffffff8fd93a47 [ 78.178847][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000200 [ 78.178851][ C1] R13: dffffc0000000000 R14: ffffffff8bdfe738 R15: 0000000000000000 [ 78.178856][ C1] ? devkmsg_read+0x430/0x430 [ 78.178862][ C1] ? lock_acquire+0x1df/0x670 [ 78.178867][ C1] ? lock_release+0x780/0x780 [ 78.178873][ C1] console_unlock+0x91/0x140 [ 78.178878][ C1] ? console_flush_all+0xa70/0xa70 [ 78.178884][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178889][ C1] ? dev_printk_emit+0xcc/0x110 [ 78.178895][ C1] ? __down_trylock_console_sem+0x6c/0xb0 [ 78.178900][ C1] vprintk_emit+0xa8/0x3d0 [ 78.178907][ C1] dev_printk_emit+0xcc/0x110 [ 78.178913][ C1] ? root_device_release+0x10/0x10 [ 78.178919][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 78.178926][ C1] ? mark_lock.part.0+0xee/0x1970 [ 78.178932][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 78.178939][ C1] _dev_info+0xc9/0x100 [ 78.178946][ C1] ? _dev_notice+0x100/0x100 [ 78.178953][ C1] ? mark_held_locks+0x9f/0xe0 [ 78.178959][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 78.178965][ C1] usb_disconnect+0xc9/0x870 [ 78.178971][ C1] hub_event+0x17f3/0x4240 [ 78.178978][ C1] ? hub_port_debounce+0x2e0/0x2e0 [ 78.178984][ C1] ? lock_acquire+0x1df/0x670 [ 78.178989][ C1] ? lock_release+0x780/0x780 [ 78.178994][ C1] ? lock_downgrade+0x690/0x690 [ 78.179001][ C1] process_one_work+0x8ba/0x1590 [ 78.179008][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 78.179015][ C1] ? spin_bug+0x1c0/0x1c0 [ 78.179021][ C1] worker_thread+0x598/0xec0 [ 78.179027][ C1] ? __kthread_parkme+0xc1/0x1f0 [ 78.179032][ C1] ? process_one_work+0x1590/0x1590 [ 78.179039][ C1] kthread+0x294/0x330 [ 78.179044][ C1] ? kthread_complete_and_exit+0x20/0x20 [ 78.179050][ C1] ret_from_fork+0x1f/0x30 [ 78.179058][ C1] [ 78.179380][ C1] Kernel Offset: disabled [ 79.230157][ C1] Rebooting in 86400 seconds..