Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. executing program [ 44.692922][ T589] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 44.882771][ T589] usb 1-1: Using ep0 maxpacket: 8 [ 44.891180][ T589] usb 1-1: config 3 has an invalid interface number: 6 but max is 0 [ 44.899397][ T589] usb 1-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 44.908135][ T589] usb 1-1: config 3 has no interface number 0 [ 44.914317][ T589] usb 1-1: config 3 interface 6 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 44.925189][ T589] usb 1-1: config 3 interface 6 altsetting 3 has an invalid endpoint with address 0x80, skipping [ 44.935761][ T589] usb 1-1: config 3 interface 6 has no altsetting 0 [ 44.945435][ T589] usb 1-1: New USB device found, idVendor=2019, idProduct=ab2e, bcdDevice= d.a1 [ 44.954530][ T589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.962550][ T589] usb 1-1: Product: syz [ 44.966762][ T589] usb 1-1: Manufacturer: syz [ 44.971387][ T589] usb 1-1: SerialNumber: syz [ 45.587345][ T589] rtl8192cu: Chip version 0x1 executing program [ 45.806068][ T589] usb 1-1: reg 0xfe64, usbctrl_vendorreq TimeOut! status:0xffffffb9 value=0x0 reqtype=0xc0 [ 45.816237][ T589] rtl_usb: rx_max_size 15360, rx_urb_num 8, in_ep 0 [ 45.825673][ T589] rtl8192cu: Loading firmware rtlwifi/rtl8192cufw_TMSC.bin [ 45.883332][ T589] usb 1-1: USB disconnect, device number 2 [ 46.004791][ T589] INFO: trying to register non-static key. [ 46.010637][ T589] The code is fine but needs lockdep annotation, or maybe [ 46.017790][ T589] you didn't initialize this object before use? [ 46.024021][ T589] turning off the locking correctness validator. [ 46.030353][ T589] CPU: 0 PID: 589 Comm: kworker/0:2 Not tainted 6.9.0-rc5-syzkaller-00105-g3f12222a4beb #0 [ 46.040342][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.050402][ T589] Workqueue: usb_hub_wq hub_event [ 46.055474][ T589] Call Trace: [ 46.058780][ T589] [ 46.061737][ T589] dump_stack_lvl+0x116/0x1f0 [ 46.066442][ T589] register_lock_class+0xc2a/0x1230 [ 46.071687][ T589] ? register_lock_class+0xb1/0x1230 [ 46.077011][ T589] ? __pfx___lock_acquire+0x10/0x10 [ 46.082240][ T589] ? __pfx_register_lock_class+0x10/0x10 [ 46.087901][ T589] ? __pfx_register_lock_class+0x10/0x10 [ 46.093563][ T589] __lock_acquire+0x111/0x3b30 [ 46.098354][ T589] ? hlock_class+0x4e/0x130 [ 46.102886][ T589] ? __pfx___lock_acquire+0x10/0x10 [ 46.108103][ T589] ? __pfx___lock_acquire+0x10/0x10 [ 46.113328][ T589] ? __pfx_mark_lock+0x10/0x10 [ 46.118113][ T589] ? __pfx_mark_lock+0x10/0x10 [ 46.123004][ T589] lock_acquire+0x1b1/0x560 [ 46.127528][ T589] ? skb_dequeue+0x20/0x180 [ 46.132047][ T589] ? __pfx_lock_acquire+0x10/0x10 [ 46.137116][ T589] ? usb_get_from_anchor+0x7b/0xa0 [ 46.142249][ T589] ? __pfx_lock_release+0x10/0x10 [ 46.147295][ T589] _raw_spin_lock_irqsave+0x3a/0x60 [ 46.152604][ T589] ? skb_dequeue+0x20/0x180 [ 46.157136][ T589] skb_dequeue+0x20/0x180 [ 46.161500][ T589] rtl_usb_disconnect+0x49e/0x830 [ 46.166543][ T589] usb_unbind_interface+0x1e8/0x970 [ 46.171782][ T589] ? kernfs_find_ns+0x2ee/0x3f0 [ 46.176661][ T589] ? __pfx_usb_unbind_interface+0x10/0x10 [ 46.182417][ T589] device_remove+0x122/0x170 [ 46.187040][ T589] device_release_driver_internal+0x44a/0x610 [ 46.193121][ T589] bus_remove_device+0x22f/0x420 [ 46.198096][ T589] device_del+0x396/0xa10 [ 46.202456][ T589] ? __pfx_device_del+0x10/0x10 [ 46.207331][ T589] ? kobject_put+0x226/0x5b0 [ 46.211948][ T589] usb_disable_device+0x36c/0x7f0 [ 46.216988][ T589] usb_disconnect+0x2e1/0x920 [ 46.221676][ T589] hub_event+0x1be4/0x4f50 [ 46.226111][ T589] ? __pfx_hub_event+0x10/0x10 [ 46.230892][ T589] ? __pfx_lock_acquire+0x10/0x10 [ 46.235935][ T589] ? __pfx_lock_release+0x10/0x10 [ 46.240982][ T589] process_one_work+0x9a9/0x1ac0 [ 46.245937][ T589] ? __pfx_hub_event+0x10/0x10 [ 46.250734][ T589] ? __pfx_process_one_work+0x10/0x10 [ 46.256119][ T589] ? assign_work+0x1a0/0x250 [ 46.260730][ T589] worker_thread+0x6c8/0xf70 [ 46.265335][ T589] ? __kthread_parkme+0x148/0x220 [ 46.270378][ T589] ? __pfx_worker_thread+0x10/0x10 [ 46.275500][ T589] kthread+0x2c1/0x3a0 [ 46.279592][ T589] ? _raw_spin_unlock_irq+0x23/0x50 [ 46.284832][ T589] ? __pfx_kthread+0x10/0x10 [ 46.289444][ T589] ret_from_fork+0x45/0x80 [ 46.293877][ T589] ? __pfx_kthread+0x10/0x10 [ 46.298484][ T589] ret_from_fork_asm+0x1a/0x30 [ 46.303267][ T589] [ 46.306389][ T589] BUG: unable to handle page fault for address: ffffffffffffffd8 [ 46.314135][ T589] #PF: supervisor write access in kernel mode [ 46.320217][ T589] #PF: error_code(0x0002) - not-present page [ 46.326192][ T589] PGD 82a2067 P4D 82a2067 PUD 82a4067 PMD 0 [ 46.332201][ T589] Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 46.337787][ T589] CPU: 0 PID: 589 Comm: kworker/0:2 Not tainted 6.9.0-rc5-syzkaller-00105-g3f12222a4beb #0 [ 46.347785][ T589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.357849][ T589] Workqueue: usb_hub_wq hub_event [ 46.362912][ T589] RIP: 0010:usb_get_urb.part.0+0x1c/0x90 [ 46.368562][ T589] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 fd 53 bb 01 00 00 00 e8 81 19 2d fd be 04 00 00 00 48 89 ef e8 d4 02 7f fd 0f c1 5d 00 31 ff 89 de e8 46 14 2d fd 85 db 74 47 e8 5d 19 2d [ 46.388182][ T589] RSP: 0018:ffffc900019cf6b0 EFLAGS: 00010046 [ 46.394266][ T589] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8425b71c [ 46.402247][ T589] RDX: fffffbfffffffffc RSI: 0000000000000004 RDI: ffffffffffffffd8 [ 46.410253][ T589] RBP: ffffffffffffffd8 R08: 0000000000000001 R09: fffffbfffffffffb [ 46.418235][ T589] R10: ffffffffffffffdb R11: 0000000000000001 R12: ffff888118830228 [ 46.426216][ T589] R13: ffffffffffffffd8 R14: ffff888118830288 R15: dffffc0000000000 [ 46.434193][ T589] FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 [ 46.443143][ T589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.449735][ T589] CR2: ffffffffffffffd8 CR3: 0000000116906000 CR4: 00000000003506f0 [ 46.457712][ T589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.465704][ T589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.473705][ T589] Call Trace: [ 46.476989][ T589] [ 46.479924][ T589] ? show_regs+0x8c/0xa0 [ 46.484212][ T589] ? __die+0x2c/0x80 [ 46.488154][ T589] ? page_fault_oops+0x3bc/0xa90 [ 46.493106][ T589] ? __pfx_cmp_ex_search+0x10/0x10 [ 46.498254][ T589] ? __pfx_page_fault_oops+0x10/0x10 [ 46.503555][ T589] ? search_extable+0x83/0xb0 [ 46.508253][ T589] ? is_prefetch.constprop.0+0xb6/0x560 [ 46.513812][ T589] ? __pfx_search_extable+0x10/0x10 [ 46.519029][ T589] ? __module_address+0x55/0x3c0 [ 46.523992][ T589] ? __pfx_is_prefetch.constprop.0+0x10/0x10 [ 46.529993][ T589] ? usb_get_urb.part.0+0x1c/0x90 [ 46.535036][ T589] ? fixup_exception+0x110/0xc80 [ 46.539990][ T589] ? kernelmode_fixup_or_oops+0x246/0x2b0 [ 46.545724][ T589] ? __bad_area_nosemaphore+0x39f/0x6b0 [ 46.551283][ T589] ? spurious_kernel_fault+0x2f4/0x3c0 [ 46.556755][ T589] ? do_kern_addr_fault+0x5b/0x80 [ 46.561791][ T589] ? exc_page_fault+0xb1/0xc0 [ 46.566480][ T589] ? asm_exc_page_fault+0x26/0x30 [ 46.571547][ T589] ? usb_get_urb.part.0+0x1c/0x90 [ 46.576591][ T589] ? usb_get_urb.part.0+0x1c/0x90 [ 46.581635][ T589] usb_kill_anchored_urbs+0xa5/0x380 [ 46.586944][ T589] rtl_usb_disconnect+0x4d1/0x830 [ 46.591984][ T589] usb_unbind_interface+0x1e8/0x970 [ 46.597196][ T589] ? kernfs_find_ns+0x2ee/0x3f0 [ 46.602082][ T589] ? __pfx_usb_unbind_interface+0x10/0x10 [ 46.607820][ T589] device_remove+0x122/0x170 [ 46.612440][ T589] device_release_driver_internal+0x44a/0x610 [ 46.618544][ T589] bus_remove_device+0x22f/0x420 [ 46.623536][ T589] device_del+0x396/0xa10 [ 46.627888][ T589] ? __pfx_device_del+0x10/0x10 [ 46.632759][ T589] ? kobject_put+0x226/0x5b0 [ 46.637387][ T589] usb_disable_device+0x36c/0x7f0 [ 46.642434][ T589] usb_disconnect+0x2e1/0x920 [ 46.647138][ T589] hub_event+0x1be4/0x4f50 [ 46.651573][ T589] ? __pfx_hub_event+0x10/0x10 [ 46.656345][ T589] ? __pfx_lock_acquire+0x10/0x10 [ 46.661401][ T589] ? __pfx_lock_release+0x10/0x10 [ 46.666451][ T589] process_one_work+0x9a9/0x1ac0 [ 46.671405][ T589] ? __pfx_hub_event+0x10/0x10 [ 46.676181][ T589] ? __pfx_process_one_work+0x10/0x10 [ 46.681567][ T589] ? assign_work+0x1a0/0x250 [ 46.686180][ T589] worker_thread+0x6c8/0xf70 [ 46.690781][ T589] ? __kthread_parkme+0x148/0x220 [ 46.695836][ T589] ? __pfx_worker_thread+0x10/0x10 [ 46.700961][ T589] kthread+0x2c1/0x3a0 [ 46.705051][ T589] ? _raw_spin_unlock_irq+0x23/0x50 [ 46.710274][ T589] ? __pfx_kthread+0x10/0x10 [ 46.714928][ T589] ret_from_fork+0x45/0x80 [ 46.719394][ T589] ? __pfx_kthread+0x10/0x10 [ 46.724019][ T589] ret_from_fork_asm+0x1a/0x30 [ 46.728819][ T589] [ 46.731838][ T589] Modules linked in: [ 46.735750][ T589] CR2: ffffffffffffffd8 [ 46.739904][ T589] ---[ end trace 0000000000000000 ]--- [ 46.745359][ T589] RIP: 0010:usb_get_urb.part.0+0x1c/0x90 [ 46.751019][ T589] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 48 89 fd 53 bb 01 00 00 00 e8 81 19 2d fd be 04 00 00 00 48 89 ef e8 d4 02 7f fd 0f c1 5d 00 31 ff 89 de e8 46 14 2d fd 85 db 74 47 e8 5d 19 2d [ 46.770633][ T589] RSP: 0018:ffffc900019cf6b0 EFLAGS: 00010046 [ 46.776715][ T589] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff8425b71c [ 46.784709][ T589] RDX: fffffbfffffffffc RSI: 0000000000000004 RDI: ffffffffffffffd8 [ 46.792699][ T589] RBP: ffffffffffffffd8 R08: 0000000000000001 R09: fffffbfffffffffb [ 46.800675][ T589] R10: ffffffffffffffdb R11: 0000000000000001 R12: ffff888118830228 [ 46.808656][ T589] R13: ffffffffffffffd8 R14: ffff888118830288 R15: dffffc0000000000 [ 46.816633][ T589] FS: 0000000000000000(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000 [ 46.825573][ T589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.832182][ T589] CR2: ffffffffffffffd8 CR3: 0000000116906000 CR4: 00000000003506f0 [ 46.840167][ T589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.848144][ T589] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.856153][ T589] Kernel panic - not syncing: Fatal exception [ 46.862506][ T589] Kernel Offset: disabled [ 46.866855][ T589] Rebooting in 86400 seconds..