Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. executing program syzkaller login: [ 67.701909][ T155] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.941846][ T155] usb 1-1: Using ep0 maxpacket: 16 [ 68.062365][ T155] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 68.070826][ T155] usb 1-1: config 0 has no interface number 0 [ 68.077546][ T155] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 130, changing to 11 [ 68.089088][ T155] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8260, setting to 1024 [ 68.212122][ T155] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 68.222108][ T155] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 68.230900][ T155] usb 1-1: Product: syz [ 68.235185][ T155] usb 1-1: SerialNumber: syz [ 68.246702][ T155] usb 1-1: config 0 descriptor?? [ 68.295424][ T155] cm109 1-1:0.8: invalid payload size 1024, expected 4 [ 68.305985][ T155] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 68.749887][ T155] usb 1-1: USB disconnect, device number 2 [ 68.756654][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 68.756793][ C0] ------------[ cut here ]------------ [ 68.756914][ C0] URB ffff888018244600 submitted while active [ 68.757603][ C0] WARNING: CPU: 0 PID: 155 at drivers/usb/core/urb.c:379 usb_submit_urb+0x10b1/0x1990 [ 68.757675][ C0] Modules linked in: [ 68.757694][ C0] CPU: 0 PID: 155 Comm: kworker/0:2 Not tainted 6.1.85-syzkaller #0 [ 68.757716][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 68.757729][ C0] Workqueue: usb_hub_wq hub_event [ 68.757754][ C0] RIP: 0010:usb_submit_urb+0x10b1/0x1990 [ 68.757783][ C0] Code: 54 24 fb eb 4d e8 0f 54 24 fb e9 fc ef ff ff e8 05 54 24 fb c6 05 7c 37 f9 07 01 48 c7 c7 c0 1c 8a 8b 4c 89 ee e8 1f 49 ec fa <0f> 0b e9 c7 ef ff ff e8 e3 53 24 fb eb 1a e8 dc 53 24 fb eb 13 e8 [ 68.757801][ C0] RSP: 0018:ffffc90000007718 EFLAGS: 00010046 [ 68.757819][ C0] RAX: 63cdd8ff760bb700 RBX: ffff88807dbce048 RCX: ffff888016398000 [ 68.757835][ C0] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.757849][ C0] RBP: ffff888018244608 R08: ffffffff81528eae R09: ffffed1017304f1c [ 68.757864][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 68.757877][ C0] R13: ffff888018244600 R14: 0000000000000a20 R15: ffff888022675b91 [ 68.757892][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 68.757910][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.757925][ C0] CR2: 00007f4cb3875b38 CR3: 0000000075f8c000 CR4: 00000000003506f0 [ 68.757944][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.757957][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.757970][ C0] Call Trace: [ 68.757978][ C0] [ 68.757986][ C0] ? __warn+0x15a/0x520 [ 68.758011][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.758045][ C0] ? report_bug+0x2af/0x500 [ 68.758082][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.758112][ C0] ? handle_bug+0x3d/0x70 [ 68.758142][ C0] ? exc_invalid_op+0x16/0x40 [ 68.758172][ C0] ? asm_exc_invalid_op+0x16/0x20 [ 68.758207][ C0] ? __warn_printk+0x28e/0x350 [ 68.758235][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.758263][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.758386][ C0] cm109_urb_irq_callback+0x6c4/0xc20 [ 68.758422][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 68.758454][ C0] dummy_timer+0x8ad/0x3200 [ 68.758543][ C0] ? dummy_free_streams+0x310/0x310 [ 68.758587][ C0] call_timer_fn+0x1ad/0x6b0 [ 68.758612][ C0] ? dummy_free_streams+0x310/0x310 [ 68.758639][ C0] ? call_timer_fn+0xc2/0x6b0 [ 68.758704][ C0] ? __run_timers+0x890/0x890 [ 68.758735][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.758760][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 68.758784][ C0] ? dummy_free_streams+0x310/0x310 [ 68.758822][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 68.758848][ C0] ? dummy_free_streams+0x310/0x310 [ 68.758876][ C0] __run_timers+0x67c/0x890 [ 68.758913][ C0] ? detach_timer+0x380/0x380 [ 68.758945][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.758975][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 68.759012][ C0] run_timer_softirq+0x63/0xf0 [ 68.759036][ C0] __do_softirq+0x2e9/0xa4c [ 68.759064][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 68.759101][ C0] ? __irq_exit_rcu+0x155/0x240 [ 68.759137][ C0] ? __entry_text_end+0x1fea01/0x1fea01 [ 68.759165][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 68.759193][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 68.759219][ C0] __irq_exit_rcu+0x155/0x240 [ 68.759251][ C0] ? irq_exit_rcu+0x20/0x20 [ 68.759397][ C0] irq_exit_rcu+0x5/0x20 [ 68.759432][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 68.759456][ C0] [ 68.759464][ C0] [ 68.759473][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.759502][ C0] RIP: 0010:console_emit_next_record+0xd67/0x1000 [ 68.759527][ C0] Code: 32 1c 00 44 0f b6 74 24 1f 48 83 7c 24 30 00 75 07 e8 0d 32 1c 00 eb 06 e8 06 32 1c 00 fb 48 c7 84 24 a0 00 00 00 0e 36 e0 45 <43> c7 04 2c 00 00 00 00 4b c7 44 2c 0a 00 00 00 00 4b c7 44 2c 12 [ 68.759543][ C0] RSP: 0018:ffffc90002e0f0a0 EFLAGS: 00000293 [ 68.759566][ C0] RAX: ffffffff816e64ea RBX: ffffffff816e622c RCX: ffff888016398000 [ 68.759584][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.759597][ C0] RBP: ffffc90002e0f350 R08: ffffffff816e64c2 R09: fffffbfff2093045 [ 68.759613][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 68.759627][ C0] R13: 1ffff920005c1e28 R14: 0000000000000001 R15: 0000000000000000 [ 68.759645][ C0] ? console_emit_next_record+0xa9c/0x1000 [ 68.759671][ C0] ? console_emit_next_record+0xd32/0x1000 [ 68.759692][ C0] ? console_emit_next_record+0xd5a/0x1000 [ 68.759727][ C0] ? console_emit_next_record+0xa9c/0x1000 [ 68.759761][ C0] ? info_print_prefix+0x300/0x300 [ 68.759813][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 68.759886][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.759917][ C0] ? validate_chain+0x13ce/0x5950 [ 68.759960][ C0] console_unlock+0x278/0x7c0 [ 68.759999][ C0] ? vprintk_emit+0x740/0x740 [ 68.760032][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.760056][ C0] ? reacquire_held_locks+0x660/0x660 [ 68.760092][ C0] ? dev_vprintk_emit+0x2aa/0x323 [ 68.760120][ C0] vprintk_emit+0x523/0x740 [ 68.760154][ C0] ? printk_sprint+0x490/0x490 [ 68.760186][ C0] ? vscnprintf+0x80/0x80 [ 68.760215][ C0] ? read_word_at_a_time+0xe/0x20 [ 68.760236][ C0] ? strscpy+0x89/0x220 [ 68.760260][ C0] dev_vprintk_emit+0x2aa/0x323 [ 68.760380][ C0] ? _dev_info+0x165/0x165 [ 68.760425][ C0] dev_printk_emit+0xd9/0x118 [ 68.760464][ C0] ? dev_vprintk_emit+0x323/0x323 [ 68.760501][ C0] ? __dev_printk+0x137/0x1a0 [ 68.760533][ C0] _dev_info+0x11e/0x165 [ 68.760562][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.760590][ C0] ? entropy_timer+0xf6/0xf6 [ 68.760619][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 68.760654][ C0] ? mutex_unlock+0x10/0x10 [ 68.760693][ C0] ? recursively_mark_NOTATTACHED+0x2ce/0x370 [ 68.760724][ C0] usb_disconnect+0xde/0x8c0 [ 68.760756][ C0] hub_event+0x1f78/0x5730 [ 68.760858][ C0] ? led_work+0x700/0x700 [ 68.760885][ C0] ? read_lock_is_recursive+0x10/0x10 [ 68.760918][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 68.760950][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.760978][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 68.761004][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.761033][ C0] ? process_one_work+0x7a9/0x11d0 [ 68.761059][ C0] process_one_work+0x8a9/0x11d0 [ 68.761100][ C0] ? worker_detach_from_pool+0x260/0x260 [ 68.761130][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 68.761155][ C0] ? kthread_data+0x4e/0xc0 [ 68.761191][ C0] ? wq_worker_running+0x97/0x190 [ 68.761228][ C0] worker_thread+0xa47/0x1200 [ 68.761271][ C0] ? _raw_spin_unlock+0x40/0x40 [ 68.761429][ C0] kthread+0x28d/0x320 [ 68.761458][ C0] ? worker_clr_flags+0x190/0x190 [ 68.761483][ C0] ? kthread_blkcg+0xd0/0xd0 [ 68.761505][ C0] ret_from_fork+0x1f/0x30 [ 68.761551][ C0] [ 68.761563][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 68.761575][ C0] CPU: 0 PID: 155 Comm: kworker/0:2 Not tainted 6.1.85-syzkaller #0 [ 68.761597][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 68.761610][ C0] Workqueue: usb_hub_wq hub_event [ 68.761636][ C0] Call Trace: [ 68.761644][ C0] [ 68.761651][ C0] dump_stack_lvl+0x1e3/0x2cb [ 68.761684][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 68.761753][ C0] ? panic+0x75d/0x75d [ 68.761780][ C0] ? vscnprintf+0x59/0x80 [ 68.761804][ C0] panic+0x318/0x75d [ 68.761826][ C0] ? __warn+0x169/0x520 [ 68.761849][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 68.761880][ C0] ? ret_from_fork+0x1f/0x30 [ 68.761914][ C0] __warn+0x348/0x520 [ 68.761935][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.761965][ C0] report_bug+0x2af/0x500 [ 68.761991][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.762016][ C0] handle_bug+0x3d/0x70 [ 68.762042][ C0] exc_invalid_op+0x16/0x40 [ 68.762068][ C0] asm_exc_invalid_op+0x16/0x20 [ 68.762091][ C0] RIP: 0010:usb_submit_urb+0x10b1/0x1990 [ 68.762114][ C0] Code: 54 24 fb eb 4d e8 0f 54 24 fb e9 fc ef ff ff e8 05 54 24 fb c6 05 7c 37 f9 07 01 48 c7 c7 c0 1c 8a 8b 4c 89 ee e8 1f 49 ec fa <0f> 0b e9 c7 ef ff ff e8 e3 53 24 fb eb 1a e8 dc 53 24 fb eb 13 e8 [ 68.762127][ C0] RSP: 0018:ffffc90000007718 EFLAGS: 00010046 [ 68.762142][ C0] RAX: 63cdd8ff760bb700 RBX: ffff88807dbce048 RCX: ffff888016398000 [ 68.762155][ C0] RDX: 0000000000000102 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.762166][ C0] RBP: ffff888018244608 R08: ffffffff81528eae R09: ffffed1017304f1c [ 68.762178][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 68.762190][ C0] R13: ffff888018244600 R14: 0000000000000a20 R15: ffff888022675b91 [ 68.762208][ C0] ? __warn_printk+0x28e/0x350 [ 68.762235][ C0] ? usb_submit_urb+0x10b1/0x1990 [ 68.762281][ C0] cm109_urb_irq_callback+0x6c4/0xc20 [ 68.762319][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 68.762346][ C0] dummy_timer+0x8ad/0x3200 [ 68.762416][ C0] ? dummy_free_streams+0x310/0x310 [ 68.762451][ C0] call_timer_fn+0x1ad/0x6b0 [ 68.762474][ C0] ? dummy_free_streams+0x310/0x310 [ 68.762495][ C0] ? call_timer_fn+0xc2/0x6b0 [ 68.762514][ C0] ? __run_timers+0x890/0x890 [ 68.762540][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.762560][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 68.762580][ C0] ? dummy_free_streams+0x310/0x310 [ 68.762614][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 68.762636][ C0] ? dummy_free_streams+0x310/0x310 [ 68.762664][ C0] __run_timers+0x67c/0x890 [ 68.762707][ C0] ? detach_timer+0x380/0x380 [ 68.762736][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.762765][ C0] ? seqcount_lockdep_reader_access+0x1bd/0x220 [ 68.762800][ C0] run_timer_softirq+0x63/0xf0 [ 68.762824][ C0] __do_softirq+0x2e9/0xa4c [ 68.762853][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 68.762890][ C0] ? __irq_exit_rcu+0x155/0x240 [ 68.762924][ C0] ? __entry_text_end+0x1fea01/0x1fea01 [ 68.762950][ C0] ? hrtimer_interrupt+0x76b/0x980 [ 68.762978][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 68.763003][ C0] __irq_exit_rcu+0x155/0x240 [ 68.763034][ C0] ? irq_exit_rcu+0x20/0x20 [ 68.763076][ C0] irq_exit_rcu+0x5/0x20 [ 68.763106][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 68.763128][ C0] [ 68.763135][ C0] [ 68.763143][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 68.763171][ C0] RIP: 0010:console_emit_next_record+0xd67/0x1000 [ 68.763196][ C0] Code: 32 1c 00 44 0f b6 74 24 1f 48 83 7c 24 30 00 75 07 e8 0d 32 1c 00 eb 06 e8 06 32 1c 00 fb 48 c7 84 24 a0 00 00 00 0e 36 e0 45 <43> c7 04 2c 00 00 00 00 4b c7 44 2c 0a 00 00 00 00 4b c7 44 2c 12 [ 68.763212][ C0] RSP: 0018:ffffc90002e0f0a0 EFLAGS: 00000293 [ 68.763232][ C0] RAX: ffffffff816e64ea RBX: ffffffff816e622c RCX: ffff888016398000 [ 68.763247][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 68.763258][ C0] RBP: ffffc90002e0f350 R08: ffffffff816e64c2 R09: fffffbfff2093045 [ 68.763274][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 68.763288][ C0] R13: 1ffff920005c1e28 R14: 0000000000000001 R15: 0000000000000000 [ 68.763306][ C0] ? console_emit_next_record+0xa9c/0x1000 [ 68.763329][ C0] ? console_emit_next_record+0xd32/0x1000 [ 68.763350][ C0] ? console_emit_next_record+0xd5a/0x1000 [ 68.763384][ C0] ? console_emit_next_record+0xa9c/0x1000 [ 68.763416][ C0] ? info_print_prefix+0x300/0x300 [ 68.763467][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 68.763501][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.763529][ C0] ? validate_chain+0x13ce/0x5950 [ 68.763572][ C0] console_unlock+0x278/0x7c0 [ 68.763609][ C0] ? vprintk_emit+0x740/0x740 [ 68.763641][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.763662][ C0] ? reacquire_held_locks+0x660/0x660 [ 68.763696][ C0] ? dev_vprintk_emit+0x2aa/0x323 [ 68.763734][ C0] vprintk_emit+0x523/0x740 [ 68.763768][ C0] ? printk_sprint+0x490/0x490 [ 68.763799][ C0] ? vscnprintf+0x80/0x80 [ 68.763828][ C0] ? read_word_at_a_time+0xe/0x20 [ 68.763849][ C0] ? strscpy+0x89/0x220 [ 68.763873][ C0] dev_vprintk_emit+0x2aa/0x323 [ 68.763905][ C0] ? _dev_info+0x165/0x165 [ 68.763949][ C0] dev_printk_emit+0xd9/0x118 [ 68.763987][ C0] ? dev_vprintk_emit+0x323/0x323 [ 68.764024][ C0] ? __dev_printk+0x137/0x1a0 [ 68.764056][ C0] _dev_info+0x11e/0x165 [ 68.764084][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.764110][ C0] ? entropy_timer+0xf6/0xf6 [ 68.764139][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 68.764170][ C0] ? mutex_unlock+0x10/0x10 [ 68.764200][ C0] ? recursively_mark_NOTATTACHED+0x2ce/0x370 [ 68.764227][ C0] usb_disconnect+0xde/0x8c0 [ 68.764257][ C0] hub_event+0x1f78/0x5730 [ 68.764329][ C0] ? led_work+0x700/0x700 [ 68.764355][ C0] ? read_lock_is_recursive+0x10/0x10 [ 68.764384][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 68.764416][ C0] ? print_irqtrace_events+0x210/0x210 [ 68.764444][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 68.764469][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 68.764495][ C0] ? process_one_work+0x7a9/0x11d0 [ 68.764519][ C0] process_one_work+0x8a9/0x11d0 [ 68.764555][ C0] ? worker_detach_from_pool+0x260/0x260 [ 68.764592][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 68.764615][ C0] ? kthread_data+0x4e/0xc0 [ 68.764650][ C0] ? wq_worker_running+0x97/0x190 [ 68.764686][ C0] worker_thread+0xa47/0x1200 [ 68.764726][ C0] ? _raw_spin_unlock+0x40/0x40 [ 68.764761][ C0] kthread+0x28d/0x320 [ 68.764779][ C0] ? worker_clr_flags+0x190/0x190 [ 68.764800][ C0] ? kthread_blkcg+0xd0/0xd0 [ 68.764821][ C0] ret_from_fork+0x1f/0x30 [ 68.764863][ C0] [ 68.765149][ C0] Kernel Offset: disabled [ 70.154663][ C0] Rebooting in 86400 seconds..