[ 45.991397][ T966] bridge0: port 1(bridge_slave_0) entered disabled state
[ 46.005640][ T966] device veth1_macvtap left promiscuous mode
[ 46.011749][ T966] device veth0_macvtap left promiscuous mode
[ 46.018980][ T966] device veth1_vlan left promiscuous mode
[ 46.025401][ T966] device veth0_vlan left promiscuous mode
[ 46.139430][ T966] team0 (unregistering): Port device team_slave_1 removed
[ 46.151137][ T966] team0 (unregistering): Port device team_slave_0 removed
[ 46.166017][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 46.179712][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 46.221997][ T966] bond0 (unregistering): Released all slaves
[ 57.247069][ T27] audit: type=1400 audit(1652536897.274:179): avc: denied { search } for pid=3907 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.270326][ T27] audit: type=1400 audit(1652536897.294:180): avc: denied { read } for pid=3908 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.293884][ T27] audit: type=1400 audit(1652536897.304:181): avc: denied { open } for pid=3908 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.320197][ T27] audit: type=1400 audit(1652536897.304:182): avc: denied { getattr } for pid=3908 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1433 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.377582][ T27] audit: type=1400 audit(1652536897.404:183): avc: denied { write } for pid=3907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1432 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.400668][ T27] audit: type=1400 audit(1652536897.404:184): avc: denied { add_name } for pid=3907 comm="dhcpcd-run-hook" name="resolv.conf.eth2.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 57.423224][ T27] audit: type=1400 audit(1652536897.444:185): avc: denied { remove_name } for pid=3918 comm="rm" name="resolv.conf.eth2.ipv4ll" dev="tmpfs" ino=1548 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
Warning: Permanently added '10.128.0.197' (ECDSA) to the list of known hosts.
2022/05/14 14:01:38 parsed 1 programs
[ 58.681503][ T27] audit: type=1400 audit(1652536898.704:186): avc: denied { mounton } for pid=3990 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 58.749598][ T27] audit: type=1400 audit(1652536898.714:187): avc: denied { mount } for pid=3990 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 58.796161][ T27] audit: type=1400 audit(1652536898.714:188): avc: denied { create } for pid=3990 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
2022/05/14 14:01:39 executed programs: 0
[ 62.172090][ T3634] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 65.934091][ T1228] ieee802154 phy0 wpan0: encryption failed: -22
[ 65.940449][ T1228] ieee802154 phy1 wpan1: encryption failed: -22
[ 66.331976][ T3634] Bluetooth: hci0: Opcode 0x c03 failed: -110
[ 68.416833][ T27] kauditd_printk_skb: 4 callbacks suppressed
[ 68.416842][ T27] audit: type=1400 audit(1652536908.444:193): avc: denied { ioctl } for pid=4096 comm="syz-executor.0" path="socket:[29760]" dev="sockfs" ino=29760 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 68.419449][ T46] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 68.456703][ T46] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 68.464530][ T46] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 68.472713][ T46] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 68.480142][ T46] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 68.487461][ T46] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 68.506929][ T27] audit: type=1400 audit(1652536908.524:194): avc: denied { mounton } for pid=4096 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[ 68.559551][ T4096] chnl_net:caif_netlink_parms(): no params data found
[ 68.593984][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.601169][ T4096] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.609075][ T4096] device bridge_slave_0 entered promiscuous mode
[ 68.616971][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.624309][ T4096] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.631919][ T4096] device bridge_slave_1 entered promiscuous mode
[ 68.648990][ T4096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 68.660240][ T4096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 68.680012][ T4096] team0: Port device team_slave_0 added
[ 68.687584][ T4096] team0: Port device team_slave_1 added
[ 68.703362][ T4096] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 68.710307][ T4096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 68.736790][ T4096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 68.748749][ T4096] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 68.755978][ T4096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 68.782352][ T4096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 68.805009][ T4096] device hsr_slave_0 entered promiscuous mode
[ 68.811483][ T4096] device hsr_slave_1 entered promiscuous mode
[ 68.865130][ T4096] bridge0: port 2(bridge_slave_1) entered blocking state
[ 68.872202][ T4096] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 68.879600][ T4096] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.886711][ T4096] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 68.921726][ T4096] 8021q: adding VLAN 0 to HW filter on device bond0
[ 68.935445][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 68.944169][ T3645] bridge0: port 1(bridge_slave_0) entered disabled state
[ 68.951937][ T3645] bridge0: port 2(bridge_slave_1) entered disabled state
[ 68.959512][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 68.971464][ T4096] 8021q: adding VLAN 0 to HW filter on device team0
[ 68.983086][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 68.991474][ T3642] bridge0: port 1(bridge_slave_0) entered blocking state
[ 68.998535][ T3642] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 69.014011][ T3642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 69.022885][ T3642] bridge0: port 2(bridge_slave_1) entered blocking state
[ 69.029913][ T3642] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 69.049431][ T4096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 69.060857][ T4096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 69.074672][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 69.083367][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 69.092850][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 69.101064][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 69.109428][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 69.117677][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 69.133339][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 69.140848][ T3645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 69.154252][ T4096] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 69.311625][ T4096] device veth0_vlan entered promiscuous mode
[ 69.319185][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 69.328241][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 69.336885][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 69.344737][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 69.356572][ T4096] device veth1_vlan entered promiscuous mode
[ 69.373816][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 69.382402][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 69.390365][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 69.401415][ T4096] device veth0_macvtap entered promiscuous mode
[ 69.410804][ T4096] device veth1_macvtap entered promiscuous mode
[ 69.425562][ T4096] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 69.433133][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 69.442290][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 69.453671][ T4096] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 69.461081][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 69.509910][ T90] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.519848][ T90] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.535074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 69.545820][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 69.554446][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 69.563603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 69.594106][ T27] audit: type=1400 audit(1652536909.624:195): avc: denied { ioctl } for pid=4115 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=730 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 69.881917][ T142] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 70.161916][ T142] usb 1-1: Using ep0 maxpacket: 32
[ 70.302973][ T142] usb 1-1: config 8 has an invalid interface number: 40 but max is 2
[ 70.311257][ T142] usb 1-1: config 8 has an invalid interface number: 150 but max is 2
[ 70.319777][ T142] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[ 70.328685][ T142] usb 1-1: config 8 has an invalid interface number: 21 but max is 2
[ 70.337046][ T142] usb 1-1: config 8 contains an unexpected descriptor of type 0x2, skipping
[ 70.345988][ T142] usb 1-1: config 8 has no interface number 0
[ 70.352259][ T142] usb 1-1: config 8 has no interface number 1
[ 70.358356][ T142] usb 1-1: config 8 has no interface number 2
[ 70.364712][ T142] usb 1-1: config 8 interface 40 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64
[ 70.375911][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xD, skipping
[ 70.386966][ T142] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[ 70.398099][ T142] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[ 70.409811][ T142] usb 1-1: config 8 interface 150 altsetting 5 bulk endpoint 0xB has invalid maxpacket 1024
[ 70.420234][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xB, skipping
[ 70.431583][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x6, skipping
[ 70.442393][ T142] usb 1-1: config 8 interface 150 altsetting 5 endpoint 0x7 has an invalid bInterval 128, changing to 7
[ 70.453564][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 70.464329][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x7, skipping
[ 70.475075][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0x5, skipping
[ 70.485824][ T142] usb 1-1: config 8 interface 150 altsetting 5 has an invalid endpoint with address 0x80, skipping
[ 70.496649][ T142] usb 1-1: config 8 interface 150 altsetting 5 has a duplicate endpoint with address 0xC, skipping
[ 70.507426][ T142] usb 1-1: config 8 interface 21 altsetting 128 bulk endpoint 0x4 has invalid maxpacket 32
[ 70.517491][ T142] usb 1-1: config 8 interface 21 altsetting 128 has an invalid endpoint with address 0x80, skipping
[ 70.528366][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xC, skipping
[ 70.539290][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x6, skipping
[ 70.550137][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping
[ 70.560994][ T142] usb 1-1: config 8 interface 21 altsetting 128 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[ 70.572245][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[ 70.573534][ T144] Bluetooth: hci0: command 0x0409 tx timeout
[ 70.583113][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xA, skipping
[ 70.600108][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0x8, skipping
[ 70.611016][ T142] usb 1-1: config 8 interface 21 altsetting 128 has a duplicate endpoint with address 0xD, skipping
[ 70.621837][ T142] usb 1-1: config 8 interface 150 has no altsetting 0
[ 70.628677][ T142] usb 1-1: config 8 interface 21 has no altsetting 0
[ 70.802427][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice=be.33
[ 70.811629][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 70.819822][ T142] usb 1-1: Product: syz
[ 70.824125][ T142] usb 1-1: Manufacturer: syz
[ 70.828773][ T142] usb 1-1: SerialNumber: syz
[ 71.053823][ T26] cfg80211: failed to load regulatory.db
2022/05/14 14:01:51 executed programs: 1
[ 72.114083][ T142] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[ 72.371872][ T142] usb 1-1: Using ep0 maxpacket: 32
[ 72.652395][ T144] Bluetooth: hci0: command 0x041b tx timeout
[ 72.991065][ T3645] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1]
[ 72.997360][ T3645] usb 1-1: firmware API: 1.9.6 2012-07-07
[ 73.004694][ T142] ------------[ cut here ]------------
[ 73.010207][ T142] usb 1-1: BOGUS urb xfer, pipe 1 != type 3
[ 73.016789][ T142] WARNING: CPU: 0 PID: 142 at drivers/usb/core/urb.c:502 usb_submit_urb+0xb07/0x1680
[ 73.026491][ T142] Modules linked in:
[ 73.030374][ T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.18.0-rc6-syzkaller #0
[ 73.038866][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 73.049188][ T142] Workqueue: usb_hub_wq hub_event
[ 73.054270][ T142] RIP: 0010:usb_submit_urb+0xb07/0x1680
[ 73.059801][ T142] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 e3 59 1c ff 44 8b 04 24 4c 89 e2 48 c7 c7 20 c6 83 89 8b 4c 24 08 48 89 c6 e8 51 93 4c 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 73.079546][ T142] RSP: 0018:ffffc90001e16f60 EFLAGS: 00010282
[ 73.085621][ T142] RAX: 0000000000000000 RBX: ffff88807d2d5000 RCX: 0000000000000000
[ 73.093730][ T142] RDX: 0000000000000001 RSI: ffffffff89421520 RDI: fffff520003c2dde
[ 73.101834][ T142] RBP: ffff88801dceec00 R08: 0000000000000001 R09: ffff8880b9e34147
[ 73.109797][ T142] R10: ffffed10173c6828 R11: 0000000000000001 R12: ffff888015a815c0
[ 73.117917][ T142] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001
[ 73.126394][ T142] FS: 0000000000000000(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000
[ 73.135378][ T142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 73.141975][ T142] CR2: 00000000005680c0 CR3: 000000007cf02000 CR4: 00000000003506f0
[ 73.149940][ T142] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 73.158187][ T142] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 73.166374][ T142] Call Trace:
[ 73.169654][ T142]
[ 73.172628][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.178597][ T142] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 73.184431][ T142] carl9170_usb_submit_cmd_urb+0x61/0xe0
[ 73.190060][ T142] carl9170_usb_disconnect+0xc1/0xf0
[ 73.195414][ T142] usb_unbind_interface+0x183/0x7e0
[ 73.200608][ T142] device_release_driver_internal+0x3be/0x590
[ 73.206862][ T142] usb_forced_unbind_intf+0x129/0x1c0
[ 73.212280][ T142] usb_reset_device+0x31d/0x850
[ 73.217135][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.223154][ T142] carl9170_usb_probe+0x43/0xd00
[ 73.228089][ T142] usb_probe_interface+0x274/0x6a0
[ 73.233252][ T142] really_probe+0x1c1/0x9d0
[ 73.237745][ T142] __driver_probe_device+0x2a6/0x460
[ 73.243068][ T142] ? usb_match_id.part.0+0xdd/0x140
[ 73.248257][ T142] driver_probe_device+0x44/0x110
[ 73.253337][ T142] __device_attach_driver+0x185/0x250
[ 73.258962][ T142] ? driver_allows_async_probing+0x120/0x120
[ 73.264972][ T142] bus_for_each_drv+0x11e/0x1a0
[ 73.269815][ T142] ? bus_for_each_dev+0x1a0/0x1a0
[ 73.274893][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.280957][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.286386][ T142] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 73.292230][ T142] __device_attach+0x1db/0x410
[ 73.296995][ T142] ? device_driver_attach+0x1b0/0x1b0
[ 73.302401][ T142] ? kobject_uevent_env+0x225/0x12f0
[ 73.307765][ T142] bus_probe_device+0x19d/0x250
[ 73.312683][ T142] device_add+0x9ca/0x1b10
[ 73.317123][ T142] ? __fw_devlink_link_to_suppliers+0x260/0x260
[ 73.323453][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.328679][ T142] ? create_intf_ep_devs.isra.0+0x113/0x190
[ 73.334668][ T142] usb_set_configuration+0xc91/0x1840
[ 73.340314][ T142] ? kernfs_create_link+0x167/0x220
[ 73.345581][ T142] ? do_raw_spin_unlock+0x171/0x230
[ 73.350932][ T142] usb_generic_driver_probe+0x74/0xa0
[ 73.356833][ T142] usb_probe_device+0x95/0x240
[ 73.361589][ T142] really_probe+0x1c1/0x9d0
[ 73.366128][ T142] __driver_probe_device+0x2a6/0x460
[ 73.371539][ T142] driver_probe_device+0x44/0x110
[ 73.376945][ T142] __device_attach_driver+0x185/0x250
[ 73.382361][ T142] ? driver_allows_async_probing+0x120/0x120
[ 73.388334][ T142] bus_for_each_drv+0x11e/0x1a0
[ 73.393237][ T142] ? bus_for_each_dev+0x1a0/0x1a0
[ 73.398259][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.404382][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.409577][ T142] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 73.415451][ T142] __device_attach+0x1db/0x410
[ 73.420211][ T142] ? device_driver_attach+0x1b0/0x1b0
[ 73.425731][ T142] ? kobject_uevent_env+0x225/0x12f0
[ 73.431061][ T142] bus_probe_device+0x19d/0x250
[ 73.435989][ T142] device_add+0x9ca/0x1b10
[ 73.440399][ T142] ? add_device_randomness+0x101/0x160
[ 73.445885][ T142] ? __fw_devlink_link_to_suppliers+0x260/0x260
[ 73.452186][ T142] usb_new_device.cold+0x5d1/0xeeb
[ 73.457297][ T142] ? hub_disconnect+0x470/0x470
[ 73.462178][ T142] ? rwlock_bug.part.0+0x90/0x90
[ 73.467111][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.473171][ T142] hub_event+0x114d/0x39b0
[ 73.477586][ T142] ? hub_port_debounce+0x2d0/0x2d0
[ 73.482720][ T142] ? mark_lock.part.0+0x3f1/0x19a0
[ 73.487823][ T142] ? lock_release+0x720/0x720
[ 73.492559][ T142] ? lock_downgrade+0x6e0/0x6e0
[ 73.497409][ T142] ? do_raw_spin_lock+0x120/0x2a0
[ 73.502472][ T142] process_one_work+0x865/0x13d0
[ 73.507513][ T142] ? lock_release+0x720/0x720
[ 73.512258][ T142] ? pwq_dec_nr_in_flight+0x230/0x230
[ 73.517810][ T142] ? rwlock_bug.part.0+0x90/0x90
[ 73.522789][ T142] ? _raw_spin_lock_irq+0x41/0x50
[ 73.527808][ T142] worker_thread+0x598/0xec0
[ 73.532664][ T142] ? __kthread_parkme+0xc1/0x1f0
[ 73.537619][ T142] ? process_one_work+0x13d0/0x13d0
[ 73.542868][ T142] kthread+0x299/0x340
[ 73.547025][ T142] ? kthread_complete_and_exit+0x20/0x20
[ 73.552718][ T142] ret_from_fork+0x1f/0x30
[ 73.557132][ T142]
[ 73.560130][ T142] Kernel panic - not syncing: panic_on_warn set ...
[ 73.566685][ T142] CPU: 0 PID: 142 Comm: kworker/0:2 Not tainted 5.18.0-rc6-syzkaller #0
[ 73.575070][ T142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 73.585224][ T142] Workqueue: usb_hub_wq hub_event
[ 73.590245][ T142] Call Trace:
[ 73.593505][ T142]
[ 73.596412][ T142] dump_stack_lvl+0x57/0x7d
[ 73.600892][ T142] panic+0x227/0x466
[ 73.604772][ T142] ? panic_print_sys_info.part.0+0x69/0x69
[ 73.610559][ T142] ? usb_submit_urb+0xb07/0x1680
[ 73.615479][ T142] __warn.cold+0x14b/0x1d9
[ 73.619963][ T142] ? irq_work_queue+0x35/0x50
[ 73.624616][ T142] ? usb_submit_urb+0xb07/0x1680
[ 73.629528][ T142] report_bug+0x15a/0x1b0
[ 73.633835][ T142] handle_bug+0x3c/0x60
[ 73.637979][ T142] exc_invalid_op+0x14/0x40
[ 73.642634][ T142] asm_exc_invalid_op+0x12/0x20
[ 73.647457][ T142] RIP: 0010:usb_submit_urb+0xb07/0x1680
[ 73.652972][ T142] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 e3 59 1c ff 44 8b 04 24 4c 89 e2 48 c7 c7 20 c6 83 89 8b 4c 24 08 48 89 c6 e8 51 93 4c 03 <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00
[ 73.673888][ T142] RSP: 0018:ffffc90001e16f60 EFLAGS: 00010282
[ 73.679954][ T142] RAX: 0000000000000000 RBX: ffff88807d2d5000 RCX: 0000000000000000
[ 73.687906][ T142] RDX: 0000000000000001 RSI: ffffffff89421520 RDI: fffff520003c2dde
[ 73.695855][ T142] RBP: ffff88801dceec00 R08: 0000000000000001 R09: ffff8880b9e34147
[ 73.703891][ T142] R10: ffffed10173c6828 R11: 0000000000000001 R12: ffff888015a815c0
[ 73.711833][ T142] R13: 0000000000000002 R14: 0000000000000002 R15: 0000000000000001
[ 73.719779][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.725736][ T142] ? _raw_spin_unlock_irqrestore+0x50/0x70
[ 73.731522][ T142] carl9170_usb_submit_cmd_urb+0x61/0xe0
[ 73.737284][ T142] carl9170_usb_disconnect+0xc1/0xf0
[ 73.742568][ T142] usb_unbind_interface+0x183/0x7e0
[ 73.747871][ T142] device_release_driver_internal+0x3be/0x590
[ 73.753941][ T142] usb_forced_unbind_intf+0x129/0x1c0
[ 73.759317][ T142] usb_reset_device+0x31d/0x850
[ 73.764166][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.770295][ T142] carl9170_usb_probe+0x43/0xd00
[ 73.775206][ T142] usb_probe_interface+0x274/0x6a0
[ 73.780292][ T142] really_probe+0x1c1/0x9d0
[ 73.784770][ T142] __driver_probe_device+0x2a6/0x460
[ 73.790027][ T142] ? usb_match_id.part.0+0xdd/0x140
[ 73.795195][ T142] driver_probe_device+0x44/0x110
[ 73.800198][ T142] __device_attach_driver+0x185/0x250
[ 73.805566][ T142] ? driver_allows_async_probing+0x120/0x120
[ 73.811972][ T142] bus_for_each_drv+0x11e/0x1a0
[ 73.816800][ T142] ? bus_for_each_dev+0x1a0/0x1a0
[ 73.821798][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.827751][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.833271][ T142] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 73.839142][ T142] __device_attach+0x1db/0x410
[ 73.843878][ T142] ? device_driver_attach+0x1b0/0x1b0
[ 73.849349][ T142] ? kobject_uevent_env+0x225/0x12f0
[ 73.854638][ T142] bus_probe_device+0x19d/0x250
[ 73.859571][ T142] device_add+0x9ca/0x1b10
[ 73.863984][ T142] ? __fw_devlink_link_to_suppliers+0x260/0x260
[ 73.870402][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.875585][ T142] ? create_intf_ep_devs.isra.0+0x113/0x190
[ 73.881802][ T142] usb_set_configuration+0xc91/0x1840
[ 73.887146][ T142] ? kernfs_create_link+0x167/0x220
[ 73.892758][ T142] ? do_raw_spin_unlock+0x171/0x230
[ 73.897974][ T142] usb_generic_driver_probe+0x74/0xa0
[ 73.903326][ T142] usb_probe_device+0x95/0x240
[ 73.908092][ T142] really_probe+0x1c1/0x9d0
[ 73.912585][ T142] __driver_probe_device+0x2a6/0x460
[ 73.917846][ T142] driver_probe_device+0x44/0x110
[ 73.922842][ T142] __device_attach_driver+0x185/0x250
[ 73.928562][ T142] ? driver_allows_async_probing+0x120/0x120
[ 73.934615][ T142] bus_for_each_drv+0x11e/0x1a0
[ 73.939446][ T142] ? bus_for_each_dev+0x1a0/0x1a0
[ 73.944444][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 73.950394][ T142] ? lockdep_hardirqs_on+0x79/0x100
[ 73.955650][ T142] ? _raw_spin_unlock_irqrestore+0x3d/0x70
[ 73.961430][ T142] __device_attach+0x1db/0x410
[ 73.966192][ T142] ? device_driver_attach+0x1b0/0x1b0
[ 73.971534][ T142] ? kobject_uevent_env+0x225/0x12f0
[ 73.976791][ T142] bus_probe_device+0x19d/0x250
[ 73.981616][ T142] device_add+0x9ca/0x1b10
[ 73.986003][ T142] ? add_device_randomness+0x101/0x160
[ 73.991446][ T142] ? __fw_devlink_link_to_suppliers+0x260/0x260
[ 73.997680][ T142] usb_new_device.cold+0x5d1/0xeeb
[ 74.002960][ T142] ? hub_disconnect+0x470/0x470
[ 74.007786][ T142] ? rwlock_bug.part.0+0x90/0x90
[ 74.012706][ T142] ? lockdep_hardirqs_on_prepare+0x17b/0x400
[ 74.018662][ T142] hub_event+0x114d/0x39b0
[ 74.023052][ T142] ? hub_port_debounce+0x2d0/0x2d0
[ 74.028131][ T142] ? mark_lock.part.0+0x3f1/0x19a0
[ 74.033214][ T142] ? lock_release+0x720/0x720
[ 74.037884][ T142] ? lock_downgrade+0x6e0/0x6e0
[ 74.042719][ T142] ? do_raw_spin_lock+0x120/0x2a0
[ 74.047726][ T142] process_one_work+0x865/0x13d0
[ 74.052647][ T142] ? lock_release+0x720/0x720
[ 74.057296][ T142] ? pwq_dec_nr_in_flight+0x230/0x230
[ 74.062636][ T142] ? rwlock_bug.part.0+0x90/0x90
[ 74.067562][ T142] ? _raw_spin_lock_irq+0x41/0x50
[ 74.072578][ T142] worker_thread+0x598/0xec0
[ 74.077147][ T142] ? __kthread_parkme+0xc1/0x1f0
[ 74.082082][ T142] ? process_one_work+0x13d0/0x13d0
[ 74.087271][ T142] kthread+0x299/0x340
[ 74.091310][ T142] ? kthread_complete_and_exit+0x20/0x20
[ 74.096949][ T142] ret_from_fork+0x1f/0x30
[ 74.101357][ T142]
[ 74.104759][ T142] Kernel Offset: disabled
[ 74.109190][ T142] Rebooting in 86400 seconds..