Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. executing program [ 91.746713][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 91.936473][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 91.946613][ T9] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 91.955384][ T9] usb 1-1: config 0 has no interface number 0 [ 91.962025][ T9] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.977401][ T9] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 91.987975][ T9] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 91.997030][ T9] usb 1-1: Product: syz [ 92.002228][ T9] usb 1-1: SerialNumber: syz [ 92.011344][ T9] usb 1-1: config 0 descriptor?? [ 92.023688][ T9] cm109 1-1:0.8: invalid payload size 208, expected 4 [ 92.034374][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input5 [ 92.429807][ C0] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71 [ 92.438440][ C0] ------------[ cut here ]------------ [ 92.445481][ C0] URB ffff88801abe5600 submitted while active [ 92.452616][ C0] WARNING: CPU: 0 PID: 5769 at drivers/usb/core/urb.c:379 usb_submit_urb+0xf95/0x1850 [ 92.464094][ C0] Modules linked in: [ 92.468300][ C0] CPU: 0 PID: 5769 Comm: syz-executor184 Not tainted 6.6.94-syzkaller #0 [ 92.478066][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 92.489213][ C0] RIP: 0010:usb_submit_urb+0xf95/0x1850 [ 92.495276][ C0] Code: 04 00 00 eb 58 e8 7b fa 35 fb e9 1a f1 ff ff e8 71 fa 35 fb c6 05 9f c0 e4 07 01 48 c7 c7 80 b3 4a 8b 48 89 de e8 5b 5f 00 fb <0f> 0b e9 e5 f0 ff ff e8 4f fa 35 fb eb 11 e8 48 fa 35 fb bd 80 00 [ 92.515685][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 92.522098][ C0] RAX: 7a9d450822291100 RBX: ffff88801abe5600 RCX: ffff88802705da00 [ 92.530947][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 92.539401][ C0] RBP: 000000000000000f R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 92.547671][ C0] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff110046bd10a [ 92.556230][ C0] R13: dffffc0000000000 R14: ffff88801abe5608 R15: 0000000000000820 [ 92.564778][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 92.576377][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.584044][ C0] CR2: 00007f12bdfc6b38 CR3: 000000000cb30000 CR4: 00000000003506f0 [ 92.593295][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 92.602024][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 92.611727][ C0] Call Trace: [ 92.615319][ C0] [ 92.619303][ C0] ? _raw_spin_lock+0x40/0x40 [ 92.624679][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 92.630289][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 92.637235][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 92.643551][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 92.649411][ C0] dummy_timer+0x8a3/0x31b0 [ 92.654504][ C0] ? mark_lock+0x94/0x320 [ 92.658999][ C0] ? lock_chain_count+0x20/0x20 [ 92.664280][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 92.671162][ C0] ? dummy_free_streams+0x530/0x530 [ 92.676382][ C0] ? debug_object_deactivate+0x67/0x350 [ 92.682137][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 92.687558][ C0] ? dummy_free_streams+0x530/0x530 [ 92.692892][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 92.698847][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 92.705980][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 92.711428][ C0] handle_softirqs+0x280/0x820 [ 92.716446][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 92.721708][ C0] ? do_softirq+0x180/0x180 [ 92.726534][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 92.732463][ C0] __irq_exit_rcu+0xc7/0x190 [ 92.738168][ C0] ? irq_exit_rcu+0x20/0x20 [ 92.742926][ C0] irq_exit_rcu+0x9/0x20 [ 92.747633][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 92.753423][ C0] [ 92.756496][ C0] [ 92.760293][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 92.766992][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 92.773698][ C0] Code: 74 05 e8 7a 26 1c f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 82 91 eb f6 65 8b 05 93 e7 93 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 92.794281][ C0] RSP: 0018:ffffc900044bf880 EFLAGS: 00000206 [ 92.800565][ C0] RAX: 7a9d450822291100 RBX: 0000000000000a02 RCX: 7a9d450822291100 [ 92.809247][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 92.818151][ C0] RBP: ffffc900044bf910 R08: ffffffff90d855ef R09: 1ffffffff21b0abd [ 92.827543][ C0] R10: dffffc0000000000 R11: fffffbfff21b0abe R12: dffffc0000000000 [ 92.836358][ C0] R13: ffff8881427d2d00 R14: ffffffff8d8c4b40 R15: 1ffff92000897f10 [ 92.845784][ C0] ? _raw_spin_unlock+0x40/0x40 [ 92.851052][ C0] ? usb_hcd_giveback_urb+0x328/0x420 [ 92.856825][ C0] usb_hcd_poll_rh_status+0x3fd/0x600 [ 92.862958][ C0] ? hub_hc_release_resources+0x2c0/0x2c0 [ 92.869396][ C0] ? set_link_state+0xc79/0x1200 [ 92.874689][ C0] dummy_pullup+0x198/0x200 [ 92.880016][ C0] ? dummy_set_selfpowered+0x150/0x150 [ 92.886586][ C0] usb_gadget_disconnect_locked+0x13d/0x470 [ 92.893084][ C0] gadget_unbind_driver+0xc4/0x420 [ 92.898664][ C0] ? gadget_bind_driver+0x750/0x750 [ 92.904221][ C0] device_release_driver_internal+0x468/0x7a0 [ 92.911002][ C0] driver_detach+0x1f3/0x2d0 [ 92.917028][ C0] bus_remove_driver+0x221/0x2f0 [ 92.923458][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 92.929535][ C0] raw_release+0xda/0x260 [ 92.934738][ C0] ? raw_open+0x520/0x520 [ 92.940516][ C0] __fput+0x234/0x970 [ 92.945505][ C0] task_work_run+0x1ce/0x250 [ 92.950892][ C0] ? task_work_cancel+0x240/0x240 [ 92.956681][ C0] do_exit+0x903/0x23c0 [ 92.961423][ C0] ? put_task_struct+0xc0/0xc0 [ 92.967394][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 92.974163][ C0] ? lock_chain_count+0x20/0x20 [ 92.980126][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 92.986853][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 92.992820][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 92.999460][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.006362][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 93.013365][ C0] do_group_exit+0x21b/0x2d0 [ 93.018535][ C0] __x64_sys_exit_group+0x3f/0x40 [ 93.025718][ C0] do_syscall_64+0x55/0xb0 [ 93.032326][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.037354][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.043167][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.050365][ C0] RIP: 0033:0x7f12bdf7c849 [ 93.057418][ C0] Code: Unable to access opcode bytes at 0x7f12bdf7c81f. [ 93.064979][ C0] RSP: 002b:00007ffc4967b368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 93.074055][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12bdf7c849 [ 93.082553][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 93.091440][ C0] RBP: 00007f12bdff8390 R08: ffffffffffffffb8 R09: 0000000000000006 [ 93.099819][ C0] R10: 00007ffc4967b0d7 R11: 0000000000000246 R12: 00007f12bdff8390 [ 93.108521][ C0] R13: 0000000000000000 R14: 00007f12bdffc0a0 R15: 00007f12bdf4aae0 [ 93.117073][ C0] [ 93.120581][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 93.130469][ C0] CPU: 0 PID: 5769 Comm: syz-executor184 Not tainted 6.6.94-syzkaller #0 [ 93.140315][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 93.152049][ C0] Call Trace: [ 93.155623][ C0] [ 93.159077][ C0] dump_stack_lvl+0x16c/0x230 [ 93.166002][ C0] ? show_regs_print_info+0x20/0x20 [ 93.172156][ C0] ? load_image+0x3b0/0x3b0 [ 93.177116][ C0] panic+0x2c0/0x710 [ 93.182377][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 93.187551][ C0] __warn+0x2e0/0x470 [ 93.192023][ C0] ? usb_submit_urb+0xf95/0x1850 [ 93.198167][ C0] ? usb_submit_urb+0xf95/0x1850 [ 93.203881][ C0] report_bug+0x2be/0x4f0 [ 93.208786][ C0] ? usb_submit_urb+0xf95/0x1850 [ 93.214082][ C0] ? usb_submit_urb+0xf95/0x1850 [ 93.219183][ C0] ? usb_submit_urb+0xf97/0x1850 [ 93.224470][ C0] handle_bug+0xcf/0x120 [ 93.229387][ C0] exc_invalid_op+0x1a/0x50 [ 93.234298][ C0] asm_exc_invalid_op+0x1a/0x20 [ 93.240142][ C0] RIP: 0010:usb_submit_urb+0xf95/0x1850 [ 93.246574][ C0] Code: 04 00 00 eb 58 e8 7b fa 35 fb e9 1a f1 ff ff e8 71 fa 35 fb c6 05 9f c0 e4 07 01 48 c7 c7 80 b3 4a 8b 48 89 de e8 5b 5f 00 fb <0f> 0b e9 e5 f0 ff ff e8 4f fa 35 fb eb 11 e8 48 fa 35 fb bd 80 00 [ 93.269788][ C0] RSP: 0018:ffffc90000007860 EFLAGS: 00010046 [ 93.277474][ C0] RAX: 7a9d450822291100 RBX: ffff88801abe5600 RCX: ffff88802705da00 [ 93.286299][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 93.295380][ C0] RBP: 000000000000000f R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 93.304516][ C0] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 1ffff110046bd10a [ 93.313408][ C0] R13: dffffc0000000000 R14: ffff88801abe5608 R15: 0000000000000820 [ 93.321886][ C0] ? _raw_spin_lock+0x40/0x40 [ 93.327077][ C0] ? kcov_remote_start+0x8f/0x7f0 [ 93.332680][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 93.338202][ C0] cm109_urb_irq_callback+0x72c/0xc90 [ 93.344218][ C0] __usb_hcd_giveback_urb+0x35f/0x520 [ 93.349910][ C0] dummy_timer+0x8a3/0x31b0 [ 93.354475][ C0] ? mark_lock+0x94/0x320 [ 93.359014][ C0] ? lock_chain_count+0x20/0x20 [ 93.363886][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 93.370797][ C0] ? dummy_free_streams+0x530/0x530 [ 93.376478][ C0] ? debug_object_deactivate+0x67/0x350 [ 93.382340][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 93.388724][ C0] ? dummy_free_streams+0x530/0x530 [ 93.394604][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 93.400202][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 93.406950][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 93.412468][ C0] handle_softirqs+0x280/0x820 [ 93.418063][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 93.423440][ C0] ? do_softirq+0x180/0x180 [ 93.428246][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 93.433881][ C0] __irq_exit_rcu+0xc7/0x190 [ 93.439327][ C0] ? irq_exit_rcu+0x20/0x20 [ 93.444065][ C0] irq_exit_rcu+0x9/0x20 [ 93.448627][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 93.454419][ C0] [ 93.457456][ C0] [ 93.460487][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 93.466490][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 93.474618][ C0] Code: 74 05 e8 7a 26 1c f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 82 91 eb f6 65 8b 05 93 e7 93 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 93.495129][ C0] RSP: 0018:ffffc900044bf880 EFLAGS: 00000206 [ 93.501329][ C0] RAX: 7a9d450822291100 RBX: 0000000000000a02 RCX: 7a9d450822291100 [ 93.509348][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaab2c0 RDI: 0000000000000001 [ 93.517779][ C0] RBP: ffffc900044bf910 R08: ffffffff90d855ef R09: 1ffffffff21b0abd [ 93.525954][ C0] R10: dffffc0000000000 R11: fffffbfff21b0abe R12: dffffc0000000000 [ 93.534208][ C0] R13: ffff8881427d2d00 R14: ffffffff8d8c4b40 R15: 1ffff92000897f10 [ 93.542392][ C0] ? _raw_spin_unlock+0x40/0x40 [ 93.547426][ C0] ? usb_hcd_giveback_urb+0x328/0x420 [ 93.552918][ C0] usb_hcd_poll_rh_status+0x3fd/0x600 [ 93.559194][ C0] ? hub_hc_release_resources+0x2c0/0x2c0 [ 93.564940][ C0] ? set_link_state+0xc79/0x1200 [ 93.570094][ C0] dummy_pullup+0x198/0x200 [ 93.574700][ C0] ? dummy_set_selfpowered+0x150/0x150 [ 93.580450][ C0] usb_gadget_disconnect_locked+0x13d/0x470 [ 93.586455][ C0] gadget_unbind_driver+0xc4/0x420 [ 93.592197][ C0] ? gadget_bind_driver+0x750/0x750 [ 93.597600][ C0] device_release_driver_internal+0x468/0x7a0 [ 93.604226][ C0] driver_detach+0x1f3/0x2d0 [ 93.609348][ C0] bus_remove_driver+0x221/0x2f0 [ 93.614579][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 93.620602][ C0] raw_release+0xda/0x260 [ 93.624954][ C0] ? raw_open+0x520/0x520 [ 93.630077][ C0] __fput+0x234/0x970 [ 93.634297][ C0] task_work_run+0x1ce/0x250 [ 93.639183][ C0] ? task_work_cancel+0x240/0x240 [ 93.644252][ C0] do_exit+0x903/0x23c0 [ 93.648525][ C0] ? put_task_struct+0xc0/0xc0 [ 93.653571][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 93.659950][ C0] ? lock_chain_count+0x20/0x20 [ 93.665187][ C0] ? _raw_spin_lock_irq+0xaf/0xe0 [ 93.670624][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 93.676018][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 93.682455][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.688292][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 93.693659][ C0] do_group_exit+0x21b/0x2d0 [ 93.698406][ C0] __x64_sys_exit_group+0x3f/0x40 [ 93.703724][ C0] do_syscall_64+0x55/0xb0 [ 93.708325][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.713500][ C0] ? clear_bhb_loop+0x40/0x90 [ 93.718473][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.724686][ C0] RIP: 0033:0x7f12bdf7c849 [ 93.729654][ C0] Code: Unable to access opcode bytes at 0x7f12bdf7c81f. [ 93.737063][ C0] RSP: 002b:00007ffc4967b368 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 93.746289][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f12bdf7c849 [ 93.755015][ C0] RDX: 000000000000003c RSI: 00000000000000e7 RDI: 0000000000000000 [ 93.763898][ C0] RBP: 00007f12bdff8390 R08: ffffffffffffffb8 R09: 0000000000000006 [ 93.772732][ C0] R10: 00007ffc4967b0d7 R11: 0000000000000246 R12: 00007f12bdff8390 [ 93.781313][ C0] R13: 0000000000000000 R14: 00007f12bdffc0a0 R15: 00007f12bdf4aae0 [ 93.789775][ C0] [ 93.793464][ C0] Kernel Offset: disabled [ 93.798427][ C0] Rebooting in 86400 seconds..