program: socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='1', 0x1) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) (async) write(r5, &(0x7f0000000280)='0', 0x1) write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb) (async) write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) (async) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket(0x2, 0x80805, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r10 = dup2(r7, r6) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f00000003c0)={r9, @in={{0x2, 0x0, @private=0xa010101}}}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) [ 88.196168][ T5311] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 88.241278][ T5273] Bluetooth: hci0: command tx timeout [ 88.309343][ T5309] pthread_create failed [ 88.309369][ T5309] (errno 12) [ 88.333865][ T5310] udc dummy_udc.0: failed to start g1: -105 [ 88.336957][ T5310] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -105 [ 88.345964][ T5310] UDC core: g1: couldn't find an available UDC or it's busy [ 88.355254][ T5311] ------------[ cut here ]------------ [ 88.357703][ T5311] kernel BUG at net/core/dev.c:11340! [ 88.359986][ T5311] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 88.362683][ T5311] CPU: 0 UID: 0 PID: 5311 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full) [ 88.366465][ T5311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.370682][ T5311] RIP: 0010:register_netdevice+0x1e94/0x1eb0 [ 88.373246][ T5311] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 7f c8 91 f8 e9 b1 fb ff ff e8 55 93 22 f8 90 0f 0b e8 4d 93 22 f8 90 <0f> 0b e8 45 93 22 f8 90 0f 0b e8 3d 93 22 f8 41 be 42 00 00 00 e9 [ 88.381245][ T5311] RSP: 0018:ffffc9000e227560 EFLAGS: 00010293 [ 88.383859][ T5311] RAX: ffffffff89a47e63 RBX: 1ffff92001c44ec0 RCX: ffff888000bfa540 [ 88.387140][ T5311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 88.390456][ T5311] RBP: ffffc9000e2276e0 R08: ffffffff9002a2a7 R09: 1ffffffff2005454 [ 88.393838][ T5311] R10: dffffc0000000000 R11: fffffbfff2005455 R12: ffff888038cd0f10 [ 88.397119][ T5311] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888038cd0000 [ 88.400523][ T5311] FS: 00007fa35222b6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 88.404257][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.406769][ T5311] CR2: 00007f47dd7004c6 CR3: 000000004382e000 CR4: 0000000000352ef0 [ 88.409749][ T5311] Call Trace: [ 88.411106][ T5311] [ 88.412306][ T5311] ? trace_contention_end+0x3d/0x140 [ 88.414377][ T5311] ? __mutex_lock+0x30d/0x1550 [ 88.416246][ T5311] ? register_netdev+0x18/0x60 [ 88.418135][ T5311] ? __pfx___mutex_lock+0x10/0x10 [ 88.420241][ T5311] ? __pfx_register_netdevice+0x10/0x10 [ 88.422582][ T5311] ? __hw_addr_insert+0x1f8/0x220 [ 88.424772][ T5311] ? dev_addr_mod+0x174/0x350 [ 88.426542][ T5311] ? dev_addr_mod+0x1ba/0x350 [ 88.428418][ T5311] register_netdev+0x40/0x60 [ 88.430285][ T5311] gether_register_netdev+0x84/0x180 [ 88.432342][ T5311] ncm_bind+0x717/0xdc0 [ 88.433970][ T5311] ? rcu_is_watching+0x15/0xb0 [ 88.435801][ T5311] usb_add_function+0x2e1/0x9f0 [ 88.437666][ T5311] ? check_remote_wakeup_config+0x58/0x1c0 [ 88.439984][ T5311] configfs_composite_bind+0xde0/0x1410 [ 88.442292][ T5311] ? __pfx_configfs_composite_bind+0x10/0x10 [ 88.444766][ T5311] gadget_bind_driver+0x2ca/0x9e0 [ 88.446960][ T5311] ? __pfx_gadget_bind_driver+0x10/0x10 [ 88.449375][ T5311] really_probe+0x254/0xae0 [ 88.451458][ T5311] __driver_probe_device+0x1e8/0x360 [ 88.453724][ T5311] driver_probe_device+0x4f/0x240 [ 88.455937][ T5311] __driver_attach+0x339/0x600 [ 88.458062][ T5311] bus_for_each_dev+0x23b/0x2c0 [ 88.460142][ T5311] ? __pfx___driver_attach+0x10/0x10 [ 88.462005][ T5311] ? __pfx_bus_for_each_dev+0x10/0x10 [ 88.463988][ T5311] ? do_raw_spin_unlock+0x4d/0x210 [ 88.465605][ T5311] bus_add_driver+0x345/0x670 [ 88.467118][ T5311] driver_register+0x23a/0x320 [ 88.468626][ T5311] usb_gadget_register_driver_owner+0xf9/0x270 [ 88.470668][ T5311] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 88.472742][ T5311] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 88.475212][ T5311] configfs_write_iter+0x337/0x430 [ 88.477397][ T5311] vfs_write+0x612/0xba0 [ 88.479214][ T5311] ? __pfx_vfs_write+0x10/0x10 [ 88.481257][ T5311] ? __fget_files+0x2a/0x420 [ 88.483252][ T5311] ksys_write+0x150/0x270 [ 88.485081][ T5311] ? __pfx_ksys_write+0x10/0x10 [ 88.487202][ T5311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.489734][ T5311] do_syscall_64+0x174/0x580 [ 88.491660][ T5311] ? trace_irq_disable+0x3b/0x140 [ 88.493643][ T5311] ? clear_bhb_loop+0x70/0xc0 [ 88.495820][ T5311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.498405][ T5311] RIP: 0033:0x7fa35139e0d9 [ 88.500425][ T5311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.508561][ T5311] RSP: 002b:00007fa35222afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 88.512106][ T5311] RAX: ffffffffffffffda RBX: 00007fa351626090 RCX: 00007fa35139e0d9 [ 88.515260][ T5311] RDX: 000000000000000b RSI: 0000200000001400 RDI: 0000000000000007 [ 88.518019][ T5311] RBP: 00007fa351435024 R08: 0000000000000000 R09: 0000000000000000 [ 88.521208][ T5311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.524342][ T5311] R13: 00007fa351626128 R14: 00007fa351626090 R15: 00007ffda04a8478 [ 88.527595][ T5311] [ 88.528948][ T5311] Modules linked in: [ 88.531909][ T5311] ---[ end trace 0000000000000000 ]--- [ 88.547896][ T5311] RIP: 0010:register_netdevice+0x1e94/0x1eb0 [ 88.552290][ T5311] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c be fb ff ff 4c 89 f7 e8 7f c8 91 f8 e9 b1 fb ff ff e8 55 93 22 f8 90 0f 0b e8 4d 93 22 f8 90 <0f> 0b e8 45 93 22 f8 90 0f 0b e8 3d 93 22 f8 41 be 42 00 00 00 e9 [ 88.560320][ T5311] RSP: 0018:ffffc9000e227560 EFLAGS: 00010293 [ 88.563288][ T5311] RAX: ffffffff89a47e63 RBX: 1ffff92001c44ec0 RCX: ffff888000bfa540 [ 88.566697][ T5311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 88.569936][ T5311] RBP: ffffc9000e2276e0 R08: ffffffff9002a2a7 R09: 1ffffffff2005454 [ 88.573750][ T5311] R10: dffffc0000000000 R11: fffffbfff2005455 R12: ffff888038cd0f10 [ 88.577128][ T5311] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff888038cd0000 [ 88.580462][ T5311] FS: 00007fa35222b6c0(0000) GS:ffff88808c549000(0000) knlGS:0000000000000000 [ 88.584353][ T5311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.587206][ T5311] CR2: 00007fd49abbb42c CR3: 000000004382e000 CR4: 0000000000352ef0 [ 88.590591][ T5311] Kernel panic - not syncing: Fatal exception [ 88.593500][ T5311] Kernel Offset: disabled [ 88.595389][ T5311] Rebooting in 86400 seconds..