program: r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0xc, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) r2 = socket(0x10, 0x3, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0xff, 0x0, 0x36, &(0x7f0000000080)="988b24392e8191fb12035352421dbcb21f0c444af55ce7cffde3762dc8d97bd3ec6c2dfd1ac6764c9f97ecdff676b0a3c250101fc7bd"}, {0x9, 0x4800, 0x6f, &(0x7f0000000140)="db533177f743e9569c9fc5234bb6d314b90391e38fabd0dcb1f677cb4365a1cb31950496396d3484562fa545b6f533b902a2d3eb289682b98da37853645c0e057707ade6345d8e91f276b757246153e5909bd21729ffa962d75d0d134503713957bea262b8f41fbcfbbf5dfdab3fdd"}], 0x2}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x8}, 0x10) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c000000220081239700004ab1b3a91c780000743788736302e00f80", 0x1c}], 0x1, 0x0, 0x0, 0x10}, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x17, 0x5, 0xc, 0x1, 0xa, "9591c289333bef7d35119544ed641462d4304c"}) (async) socket(0x10, 0x3, 0x0) (async) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0xff, 0x0, 0x36, &(0x7f0000000080)="988b24392e8191fb12035352421dbcb21f0c444af55ce7cffde3762dc8d97bd3ec6c2dfd1ac6764c9f97ecdff676b0a3c250101fc7bd"}, {0x9, 0x4800, 0x6f, &(0x7f0000000140)="db533177f743e9569c9fc5234bb6d314b90391e38fabd0dcb1f677cb4365a1cb31950496396d3484562fa545b6f533b902a2d3eb289682b98da37853645c0e057707ade6345d8e91f276b757246153e5909bd21729ffa962d75d0d134503713957bea262b8f41fbcfbbf5dfdab3fdd"}], 0x2}) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff, 0x0, 0x0, 0x8}, 0x10) (async) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) (async) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1c000000220081239700004ab1b3a91c780000743788736302e00f80", 0x1c}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) [ 123.069320][ T5282] Bluetooth: hci0: command tx timeout [ 123.389423][ T5063] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 123.542273][ T5063] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.546314][ T5063] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 123.550495][ T5063] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 123.554941][ T5063] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.566258][ T5063] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 123.588792][ T5063] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 123.920118][ T5320] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 123.923144][ T5320] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 123.927336][ T5320] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.017752][ T5320] SPCP8x5 ttyUSB0: Set UART format 0x4 failed (error = -32) [ 124.026079][ T5320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.030742][ T5321] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 124.035823][ T5321] ------------[ cut here ]------------ [ 124.038037][ T5321] do not call blocking ops when !TASK_RUNNING; state=1 set at [] prepare_to_wait+0x174/0x210 [ 124.043028][ T5321] WARNING: kernel/sched/core.c:9124 at __might_sleep+0x92/0xf0, CPU#0: syz.0.0/5321 [ 124.047011][ T5321] Modules linked in: [ 124.048906][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 124.052907][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.057264][ T5321] RIP: 0010:__might_sleep+0xac/0xf0 [ 124.059776][ T5321] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e ae c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 8f 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 124.068167][ T5321] RSP: 0018:ffffc9000fce74f0 EFLAGS: 00010246 [ 124.072051][ T5321] RAX: 0000000000000000 RBX: ffff888000fc3db0 RCX: ffffffff819fa6a4 [ 124.075405][ T5321] RDX: ffffffff819fa6a4 RSI: 0000000000000001 RDI: ffffffff905abdf0 [ 124.078817][ T5321] RBP: 0000000000000001 R08: ffffc9000fce72f8 R09: 0000000000000020 [ 124.082647][ T5321] R10: 0000000000000000 R11: ffffffff81a324e0 R12: 1ffff110001f87b6 [ 124.085984][ T5321] R13: 0000000000000143 R14: ffffffff905abdf0 R15: dffffc0000000000 [ 124.090114][ T5321] FS: 00007f2228bd46c0(0000) GS:ffff88808c54a000(0000) knlGS:0000000000000000 [ 124.093732][ T5321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.096429][ T5321] CR2: 0000000000000000 CR3: 0000000042e66000 CR4: 0000000000352ef0 [ 124.099645][ T5321] Call Trace: [ 124.101070][ T5321] [ 124.102331][ T5321] __kmalloc_cache_noprof+0x94/0x660 [ 124.104602][ T5321] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 124.106815][ T5321] ? spcp8x5_get_msr+0xd3/0x2d0 [ 124.109016][ T5321] ? spcp8x5_get_msr+0xd3/0x2d0 [ 124.111237][ T5321] spcp8x5_get_msr+0xd3/0x2d0 [ 124.113377][ T5321] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 124.116013][ T5321] spcp8x5_carrier_raised+0x30/0x80 [ 124.118374][ T5321] serial_port_carrier_raised+0x8c/0xc0 [ 124.121010][ T5321] tty_port_block_til_ready+0x449/0x8b0 [ 124.123464][ T5321] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 124.126289][ T5321] ? __pfx_autoremove_wake_function+0x10/0x10 [ 124.129228][ T5321] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 124.132006][ T5321] ? tty_port_open+0x237/0x2b0 [ 124.134346][ T5321] tty_open+0x48a/0xcc0 [ 124.136182][ T5321] ? __pfx_tty_open+0x10/0x10 [ 124.138378][ T5321] ? do_raw_spin_unlock+0x4d/0x210 [ 124.140752][ T5321] chrdev_open+0x4d9/0x600 [ 124.142895][ T5321] ? __pfx_chrdev_open+0x10/0x10 [ 124.145174][ T5321] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 124.148033][ T5321] ? __pfx_chrdev_open+0x10/0x10 [ 124.150404][ T5321] do_dentry_open+0x816/0x1380 [ 124.152616][ T5321] vfs_open+0x3b/0x340 [ 124.154458][ T5321] ? path_openat+0x2e2d/0x3830 [ 124.156530][ T5321] path_openat+0x2e44/0x3830 [ 124.158610][ T5321] ? kasan_save_track+0x3e/0x80 [ 124.160799][ T5321] ? do_sys_openat2+0xcc/0x200 [ 124.162874][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.165338][ T5321] do_file_open+0x23e/0x4a0 [ 124.167828][ T5321] ? __pfx_do_file_open+0x10/0x10 [ 124.172158][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 124.174370][ T5321] ? alloc_fd+0x651/0x6c0 [ 124.176185][ T5321] do_sys_openat2+0x115/0x200 [ 124.178055][ T5321] ? __se_sys_futex+0x3a8/0x450 [ 124.180006][ T5321] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.182084][ T5321] ? rcu_is_watching+0x15/0xb0 [ 124.184244][ T5321] __x64_sys_openat+0x138/0x170 [ 124.186478][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.189277][ T5321] do_syscall_64+0x174/0x580 [ 124.191345][ T5321] ? trace_irq_disable+0x3b/0x140 [ 124.193878][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 124.196558][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.199280][ T5321] RIP: 0033:0x7f222c79e0d9 [ 124.201484][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.211199][ T5321] RSP: 002b:00007f2228bd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.214676][ T5321] RAX: ffffffffffffffda RBX: 00007f222ca26090 RCX: 00007f222c79e0d9 [ 124.217925][ T5321] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 124.221361][ T5321] RBP: 00007f222c835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.224618][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.227881][ T5321] R13: 00007f222ca26128 R14: 00007f222ca26090 R15: 00007fff6a2d6e18 [ 124.231264][ T5321] [ 124.232742][ T5321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.236016][ T5321] CPU: 0 UID: 0 PID: 5321 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 124.239962][ T5321] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 124.244164][ T5321] Call Trace: [ 124.245650][ T5321] [ 124.247026][ T5321] vpanic+0x56c/0xa60 [ 124.248874][ T5321] ? __pfx__printk+0x10/0x10 [ 124.251033][ T5321] ? __pfx_vpanic+0x10/0x10 [ 124.253138][ T5321] ? is_bpf_text_address+0x292/0x2b0 [ 124.255260][ T5321] ? is_bpf_text_address+0x26/0x2b0 [ 124.257353][ T5321] panic+0xc5/0xd0 [ 124.258810][ T5321] ? __pfx_panic+0x10/0x10 [ 124.260753][ T5321] __warn+0x315/0x4c0 [ 124.262382][ T5321] ? __might_sleep+0x92/0xf0 [ 124.264153][ T5321] ? __might_sleep+0x92/0xf0 [ 124.265708][ T5321] __report_bug+0x276/0x570 [ 124.267310][ T5321] ? __might_sleep+0x92/0xf0 [ 124.268975][ T5321] ? __pfx___report_bug+0x10/0x10 [ 124.270933][ T5321] ? prepare_to_wait+0x174/0x210 [ 124.273071][ T5321] ? prepare_to_wait+0x174/0x210 [ 124.275354][ T5321] ? irqentry_exit+0x218/0x8f0 [ 124.277302][ T5321] report_bug_entry+0x19a/0x290 [ 124.279364][ T5321] ? __might_sleep+0xac/0xf0 [ 124.281876][ T5321] ? __might_sleep+0xb1/0xf0 [ 124.284247][ T5321] handle_bug+0xce/0x200 [ 124.286145][ T5321] exc_invalid_op+0x1a/0x50 [ 124.288147][ T5321] asm_exc_invalid_op+0x1a/0x20 [ 124.290337][ T5321] RIP: 0010:__might_sleep+0xac/0xf0 [ 124.292661][ T5321] Code: 00 00 48 89 3c 24 41 89 f5 4c 8d 35 7e ae c4 0e 43 80 3c 3c 00 74 08 48 89 df e8 8f 37 a0 00 48 8b 0b 4c 89 f7 89 ee 48 89 ca <67> 48 0f b9 3a 44 89 ee 48 8b 3c 24 eb b5 44 89 f1 80 e1 07 80 c1 [ 124.300458][ T5321] RSP: 0018:ffffc9000fce74f0 EFLAGS: 00010246 [ 124.302724][ T5321] RAX: 0000000000000000 RBX: ffff888000fc3db0 RCX: ffffffff819fa6a4 [ 124.305929][ T5321] RDX: ffffffff819fa6a4 RSI: 0000000000000001 RDI: ffffffff905abdf0 [ 124.309111][ T5321] RBP: 0000000000000001 R08: ffffc9000fce72f8 R09: 0000000000000020 [ 124.312018][ T5321] R10: 0000000000000000 R11: ffffffff81a324e0 R12: 1ffff110001f87b6 [ 124.315347][ T5321] R13: 0000000000000143 R14: ffffffff905abdf0 R15: dffffc0000000000 [ 124.318504][ T5321] ? __pfx_hlock_conflict+0x10/0x10 [ 124.320671][ T5321] ? prepare_to_wait+0x174/0x210 [ 124.322657][ T5321] ? prepare_to_wait+0x174/0x210 [ 124.324734][ T5321] __kmalloc_cache_noprof+0x94/0x660 [ 124.326702][ T5321] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 124.328802][ T5321] ? spcp8x5_get_msr+0xd3/0x2d0 [ 124.330761][ T5321] ? spcp8x5_get_msr+0xd3/0x2d0 [ 124.332672][ T5321] spcp8x5_get_msr+0xd3/0x2d0 [ 124.334683][ T5321] ? __pfx_spcp8x5_carrier_raised+0x10/0x10 [ 124.337194][ T5321] spcp8x5_carrier_raised+0x30/0x80 [ 124.339279][ T5321] serial_port_carrier_raised+0x8c/0xc0 [ 124.341254][ T5321] tty_port_block_til_ready+0x449/0x8b0 [ 124.343599][ T5321] ? __pfx_tty_port_block_til_ready+0x10/0x10 [ 124.346160][ T5321] ? __pfx_autoremove_wake_function+0x10/0x10 [ 124.348693][ T5321] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 124.350921][ T5321] ? tty_port_open+0x237/0x2b0 [ 124.352649][ T5321] tty_open+0x48a/0xcc0 [ 124.354125][ T5321] ? __pfx_tty_open+0x10/0x10 [ 124.355728][ T5321] ? do_raw_spin_unlock+0x4d/0x210 [ 124.357450][ T5321] chrdev_open+0x4d9/0x600 [ 124.359012][ T5321] ? __pfx_chrdev_open+0x10/0x10 [ 124.360934][ T5321] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 124.363605][ T5321] ? __pfx_chrdev_open+0x10/0x10 [ 124.365958][ T5321] do_dentry_open+0x816/0x1380 [ 124.368112][ T5321] vfs_open+0x3b/0x340 [ 124.369919][ T5321] ? path_openat+0x2e2d/0x3830 [ 124.372119][ T5321] path_openat+0x2e44/0x3830 [ 124.374182][ T5321] ? kasan_save_track+0x3e/0x80 [ 124.376314][ T5321] ? do_sys_openat2+0xcc/0x200 [ 124.378487][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.381245][ T5321] do_file_open+0x23e/0x4a0 [ 124.383116][ T5321] ? __pfx_do_file_open+0x10/0x10 [ 124.385363][ T5321] ? _raw_spin_unlock+0x28/0x50 [ 124.387543][ T5321] ? alloc_fd+0x651/0x6c0 [ 124.389528][ T5321] do_sys_openat2+0x115/0x200 [ 124.391619][ T5321] ? __se_sys_futex+0x3a8/0x450 [ 124.393822][ T5321] ? __pfx_do_sys_openat2+0x10/0x10 [ 124.396398][ T5321] ? rcu_is_watching+0x15/0xb0 [ 124.398879][ T5321] __x64_sys_openat+0x138/0x170 [ 124.401218][ T5321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.403771][ T5321] do_syscall_64+0x174/0x580 [ 124.405805][ T5321] ? trace_irq_disable+0x3b/0x140 [ 124.407943][ T5321] ? clear_bhb_loop+0x70/0xc0 [ 124.409697][ T5321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.411802][ T5321] RIP: 0033:0x7f222c79e0d9 [ 124.413555][ T5321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.421987][ T5321] RSP: 002b:00007f2228bd3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 124.426001][ T5321] RAX: ffffffffffffffda RBX: 00007f222ca26090 RCX: 00007f222c79e0d9 [ 124.430282][ T5321] RDX: 0000000000000000 RSI: 0000200000000700 RDI: ffffffffffffff9c [ 124.434204][ T5321] RBP: 00007f222c835024 R08: 0000000000000000 R09: 0000000000000000 [ 124.438187][ T5321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.441882][ T5321] R13: 00007f222ca26128 R14: 00007f222ca26090 R15: 00007fff6a2d6e18 [ 124.445478][ T5321] [ 124.447662][ T5321] Kernel Offset: disabled [ 124.450077][ T5321] Rebooting in 86400 seconds..