program: r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = getpid() syz_pidfd_open(r2, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x2, 0x2001) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) getpid() (async) syz_pidfd_open(r2, 0x0) (async) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x2, 0x2001) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0x8, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) (async) [ 86.517064][ T5277] Bluetooth: hci0: command tx timeout [ 86.845490][ T1364] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.997682][ T1364] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 87.004213][ T1364] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 87.008635][ T1364] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 87.012759][ T1364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.033370][ T1364] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 87.070451][ T1364] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 87.397514][ T5312] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 87.403401][ T5312] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 87.409481][ T5312] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 87.487860][ T5312] SPCP8x5 ttyUSB0: Set UART format 0xb failed (error = -32) [ 87.494988][ T5313] ------------[ cut here ]------------ [ 87.498282][ T5313] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x174/0x210 [ 87.503150][ T5313] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5313 [ 87.507050][ T5313] Modules linked in: [ 87.508983][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.513280][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.517678][ T5313] RIP: 0010:__might_sleep+0xac/0xf0 [ 87.519851][ T5313] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e f8 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 87.528082][ T5313] RSP: 0018:ffffc9000f42f4f0 EFLAGS: 00010246 [ 87.530813][ T5313] RAX: 0000000000000000 RBX: ffff888032f962f0 RCX: ffffffff819fa6d4 [ 87.534244][ T5313] RDX: ffffffff819fa6d4 RSI: 0000000000000001 RDI: ffffffff905b0810 [ 87.537898][ T5313] RBP: 0000000000000001 R08: ffffc9000f42f2f8 R09: 0000000000000020 [ 87.541242][ T5313] R10: 0000000000000000 R11: ffffffff81a32510 R12: 1ffff110065f2c5e [ 87.544597][ T5313] R13: 0000000000000143 R14: ffffffff905b0810 R15: dffffc0000000000 [ 87.547938][ T5313] FS: 00007fdc904136c0(0000) GS:ffff88808c53e000(0000) knlGS:0000000000000000 [ 87.551629][ T5313] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.554409][ T5313] CR2: 0000200000000700 CR3: 00000000122b8000 CR4: 0000000000352ef0 [ 87.557939][ T5313] Call Trace: [ 87.559454][ T5313] [ 87.560739][ T5313] __kmalloc_cache_noprof+0x94/0x660 [ 87.562947][ T5313] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.565367][ T5313] ? spcp8x5_get_msr+0xd3/0x2d0 [ 87.567502][ T5313] ? spcp8x5_get_msr+0xd3/0x2d0 [ 87.569523][ T5313] spcp8x5_get_msr+0xd3/0x2d0 [ 87.571521][ T5313] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 87.573967][ T5313] spcp8x5_carrier_raised+0x30/0x80 [ 87.576166][ T5313] serial_port_carrier_raised+0x8c/0xc0 [ 87.578503][ T5313] tty_port_block_til_ready+0x449/0x8b0 [ 87.580906][ T5313] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 87.583413][ T5313] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.585926][ T5313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.588321][ T5313] ? tty_port_open+0x237/0x2b0 [ 87.590307][ T5313] tty_open+0x48a/0xcc0 [ 87.592248][ T5313] ? __pfx_tty_open+0x10/0x10 [ 87.594628][ T5313] ? do_raw_spin_unlock+0x4d/0x210 [ 87.596834][ T5313] chrdev_open+0x4d9/0x600 [ 87.598693][ T5313] ? __pfx_chrdev_open+0x10/0x10 [ 87.601131][ T5313] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 87.604380][ T5313] ? __pfx_chrdev_open+0x10/0x10 [ 87.606546][ T5313] do_dentry_open+0x816/0x1380 [ 87.608567][ T5313] vfs_open+0x3b/0x340 [ 87.610343][ T5313] ? path_openat+0x2e2d/0x3830 [ 87.612781][ T5313] path_openat+0x2e44/0x3830 [ 87.615707][ T5313] ? kasan_save_track+0x3e/0x80 [ 87.620018][ T5313] ? do_sys_openat2+0xcc/0x200 [ 87.622489][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.625605][ T5313] do_file_open+0x23e/0x4a0 [ 87.627600][ T5313] ? __pfx_do_file_open+0x10/0x10 [ 87.629725][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 87.631775][ T5313] ? alloc_fd+0x651/0x6c0 [ 87.633625][ T5313] do_sys_openat2+0x115/0x200 [ 87.635621][ T5313] ? __se_sys_futex+0x3a8/0x450 [ 87.637637][ T5313] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.639819][ T5313] ? rcu_is_watching+0x15/0xb0 [ 87.641942][ T5313] __x64_sys_openat+0x138/0x170 [ 87.644015][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.646711][ T5313] do_syscall_64+0x174/0x580 [ 87.648730][ T5313] ? trace_irq_disable+0x3b/0x140 [ 87.650863][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 87.652857][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.655698][ T5313] RIP: 0033:0x7fdc8f59e0d9 [ 87.657659][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.665084][ T5313] RSP: 002b:00007fdc90412fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.668387][ T5313] RAX: ffffffffffffffda RBX: 00007fdc8f826090 RCX: 00007fdc8f59e0d9 [ 87.671412][ T5313] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 87.674421][ T5313] RBP: 00007fdc8f635024 R08: 0000000000000000 R09: 0000000000000000 [ 87.678062][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.681347][ T5313] R13: 00007fdc8f826128 R14: 00007fdc8f826090 R15: 00007fff1a278b98 [ 87.684545][ T5313] [ 87.685978][ T5313] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.688871][ T5313] CPU: 0 UID: 0 PID: 5313 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 87.692351][ T5313] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.696342][ T5313] Call Trace: [ 87.697697][ T5313] [ 87.698922][ T5313] vpanic+0x56c/0xa60 [ 87.700565][ T5313] ? __pfx__printk+0x10/0x10 [ 87.702373][ T5313] ? __pfx_vpanic+0x10/0x10 [ 87.704109][ T5313] ? is_bpf_text_address+0x292/0x2b0 [ 87.706279][ T5313] ? is_bpf_text_address+0x26/0x2b0 [ 87.708325][ T5313] panic+0xc5/0xd0 [ 87.709820][ T5313] ? __pfx_panic+0x10/0x10 [ 87.711664][ T5313] __warn+0x315/0x4c0 [ 87.713289][ T5313] ? __might_sleep+0x92/0xf0 [ 87.715185][ T5313] ? __might_sleep+0x92/0xf0 [ 87.717110][ T5313] __report_bug+0x276/0x570 [ 87.719249][ T5313] ? __might_sleep+0x92/0xf0 [ 87.721013][ T5313] ? __pfx___report_bug+0x10/0x10 [ 87.722965][ T5313] ? prepare_to_wait+0x174/0x210 [ 87.724987][ T5313] ? prepare_to_wait+0x174/0x210 [ 87.726902][ T5313] ? irqentry_exit+0x218/0x8f0 [ 87.728843][ T5313] report_bug_entry+0x19a/0x290 [ 87.730795][ T5313] ? __might_sleep+0xac/0xf0 [ 87.732664][ T5313] ? __might_sleep+0xb1/0xf0 [ 87.734530][ T5313] handle_bug+0xce/0x200 [ 87.736322][ T5313] exc_invalid_op+0x1a/0x50 [ 87.738225][ T5313] asm_exc_invalid_op+0x1a/0x20 [ 87.740193][ T5313] RIP: 0010:__might_sleep+0xac/0xf0 [ 87.742354][ T5313] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 6e f8 c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 ff 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 87.750154][ T5313] RSP: 0018:ffffc9000f42f4f0 EFLAGS: 00010246 [ 87.752625][ T5313] RAX: 0000000000000000 RBX: ffff888032f962f0 RCX: ffffffff819fa6d4 [ 87.755892][ T5313] RDX: ffffffff819fa6d4 RSI: 0000000000000001 RDI: ffffffff905b0810 [ 87.759063][ T5313] RBP: 0000000000000001 R08: ffffc9000f42f2f8 R09: 0000000000000020 [ 87.762255][ T5313] R10: 0000000000000000 R11: ffffffff81a32510 R12: 1ffff110065f2c5e [ 87.765245][ T5313] R13: 0000000000000143 R14: ffffffff905b0810 R15: dffffc0000000000 [ 87.768485][ T5313] ? __pfx_hlock_conflict+0x10/0x10 [ 87.770578][ T5313] ? prepare_to_wait+0x174/0x210 [ 87.772767][ T5313] ? prepare_to_wait+0x174/0x210 [ 87.774980][ T5313] __kmalloc_cache_noprof+0x94/0x660 [ 87.777268][ T5313] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 87.779500][ T5313] ? spcp8x5_get_msr+0xd3/0x2d0 [ 87.781456][ T5313] ? spcp8x5_get_msr+0xd3/0x2d0 [ 87.783394][ T5313] spcp8x5_get_msr+0xd3/0x2d0 [ 87.785188][ T5313] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 87.787287][ T5313] spcp8x5_carrier_raised+0x30/0x80 [ 87.789103][ T5313] serial_port_carrier_raised+0x8c/0xc0 [ 87.791026][ T5313] tty_port_block_til_ready+0x449/0x8b0 [ 87.793052][ T5313] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 87.795630][ T5313] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.798108][ T5313] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 87.800491][ T5313] ? tty_port_open+0x237/0x2b0 [ 87.802514][ T5313] tty_open+0x48a/0xcc0 [ 87.804353][ T5313] ? __pfx_tty_open+0x10/0x10 [ 87.806291][ T5313] ? do_raw_spin_unlock+0x4d/0x210 [ 87.808346][ T5313] chrdev_open+0x4d9/0x600 [ 87.810151][ T5313] ? __pfx_chrdev_open+0x10/0x10 [ 87.812234][ T5313] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 87.814677][ T5313] ? __pfx_chrdev_open+0x10/0x10 [ 87.816810][ T5313] do_dentry_open+0x816/0x1380 [ 87.818926][ T5313] vfs_open+0x3b/0x340 [ 87.820612][ T5313] ? path_openat+0x2e2d/0x3830 [ 87.822668][ T5313] path_openat+0x2e44/0x3830 [ 87.824635][ T5313] ? kasan_save_track+0x3e/0x80 [ 87.826648][ T5313] ? do_sys_openat2+0xcc/0x200 [ 87.828635][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.831164][ T5313] do_file_open+0x23e/0x4a0 [ 87.833077][ T5313] ? __pfx_do_file_open+0x10/0x10 [ 87.835230][ T5313] ? _raw_spin_unlock+0x28/0x50 [ 87.837330][ T5313] ? alloc_fd+0x651/0x6c0 [ 87.839122][ T5313] do_sys_openat2+0x115/0x200 [ 87.841000][ T5313] ? __se_sys_futex+0x3a8/0x450 [ 87.842825][ T5313] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.844893][ T5313] ? rcu_is_watching+0x15/0xb0 [ 87.846869][ T5313] __x64_sys_openat+0x138/0x170 [ 87.848868][ T5313] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.851426][ T5313] do_syscall_64+0x174/0x580 [ 87.853356][ T5313] ? trace_irq_disable+0x3b/0x140 [ 87.855461][ T5313] ? clear_bhb_loop+0x70/0xc0 [ 87.857343][ T5313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.859642][ T5313] RIP: 0033:0x7fdc8f59e0d9 [ 87.861463][ T5313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.869565][ T5313] RSP: 002b:00007fdc90412fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.872981][ T5313] RAX: ffffffffffffffda RBX: 00007fdc8f826090 RCX: 00007fdc8f59e0d9 [ 87.876182][ T5313] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 87.879291][ T5313] RBP: 00007fdc8f635024 R08: 0000000000000000 R09: 0000000000000000 [ 87.882482][ T5313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.885764][ T5313] R13: 00007fdc8f826128 R14: 00007fdc8f826090 R15: 00007fff1a278b98 [ 87.889023][ T5313] [ 87.890745][ T5313] Kernel Offset: disabled [ 87.892985][ T5313] Rebooting in 86400 seconds..