last executing test programs: 1m16.055824041s ago: executing program 0 (id=15): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x1, 0x0) write(r0, &(0x7f0000000080), 0x0) 1m0.990921045s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a5a400010102030109022000010100c0000904000002080650000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x3}, 0x0) syz_usb_ep_read(r0, 0x2, 0x20, &(0x7f0000000100)=""/32) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000200)='6\x00'/36) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 58.597105599s ago: executing program 1 (id=17): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404433221100010102030109023700010100803f0904000002ff00000007050102000200070581020002000904000102ff0000000705010200020007058102000200"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x409}}, {0x6, &(0x7f0000000200)=@string={0x6, 0x3, 'syz'}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, 'G\x00\x00\x00'}}]}) syz_usb_control_io(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x6, @string={0x6, 0x3, 'G\x00\x00\x00'}}, 0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_usb_ep_write(r0, 0x1, 0x4, &(0x7f0000000500)='\x00\x00\x00\x00') 38.792288169s ago: executing program 0 (id=18): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004040200193000001020301090212000101008050090400000000000000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 38.315458475s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/usbcore/parameters/quirks\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='9710:7830:b', 0xb) close(r0) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040109730780001000000010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000003c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000400)={0x84, &(0x7f00000004c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000500)={0x84, &(0x7f00000005c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000006c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000007c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000008c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000009c0)={0x0, 0x0, 0x6, '\x00@\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000a00)={0x0, 0x2faf080}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000a40), 0x19, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r3, &(0x7f0000000ac0)='0', 0x1) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r4, &(0x7f0000000b40)='auto', 0x4) close(r4) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5520) nanosleep(&(0x7f0000000b80)={0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000c00)='on', 0x2) close(r5) ioctl$USBDEVFS_FORBID_SUSPEND(r2, 0x5521) 13.012512977s ago: executing program 1 (id=20): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x64, &(0x7f0000000200)=""/100, 0x64, &(0x7f0000000300)=""/100, 0x64, &(0x7f0000000400)=""/100}) 11.609627588s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_config\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000480)='./my_config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x2, 0x0) 7.55949785s ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='md0\n\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r0, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000") ioctl(r0, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r0, 0x40140921, &(0x7f0000000440)="020000000100000002000000ffffffff00000000") r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='3\n\x00', 0x2) close(r1) pwrite64(r0, &(0x7f0000001000), 0x1000, 0x0) 5.61890626s ago: executing program 0 (id=23): mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a00000000040000020000000200000000000000010000000000000000000000000000000000000000000000000000000201000000000100") ioctl(r1, 0x40140921, &(0x7f0000000400)="0000000001000000000000000000000006000000") ioctl(r1, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006000000") ioctl(r1, 0x400c0930, &(0x7f0000000500)='\x00'/12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='3\n\x00', 0x2) close(r2) pwrite64(r1, &(0x7f0000001000), 0x1000, 0x0) 4.197400127s ago: executing program 1 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./my_config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./my_config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./my_config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f00000002c0)='0x0104\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./my_config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./my_config/usb_gadget/g1/os_desc/qw_sign\x00', 0x2, 0x0) 1.881910602s ago: executing program 0 (id=25): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000300)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000500)="0100000000000000", 0x8) read(r1, &(0x7f0000000000), 0x10) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0800000000002a0011223344", 0xc, 0x0, &(0x7f0000000200)={0x2, 0x12b5, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500002c000000004011fa94ac141402ac141401303912b5001800000800000000002a001122334455667788"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000000004001fa91ac141402ac1414010303b1d40000000045000024000000004011fa9dac141401ac141402303912b5001000000800000000002a0000"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:31567' (ED25519) to the list of known hosts. syzkaller login: [ 574.190141][ T3231] cgroup: Unknown subsys name 'net' [ 574.949842][ T3231] cgroup: Unknown subsys name 'cpuset' [ 575.112575][ T3231] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 658.633653][ T3231] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 834.660098][ T3243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 835.183728][ T3243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 836.469246][ T3247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 836.964153][ T3247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.022403][ T3243] hsr_slave_0: entered promiscuous mode [ 848.099971][ T3243] hsr_slave_1: entered promiscuous mode [ 851.822214][ T3247] hsr_slave_0: entered promiscuous mode [ 851.873837][ T3247] hsr_slave_1: entered promiscuous mode [ 851.895498][ T3247] debugfs: 'hsr0' already exists in 'hsr' [ 851.900188][ T3247] Cannot create hsr debugfs directory [ 862.993229][ T3243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 863.140722][ T3243] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 863.179214][ T3243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 863.281671][ T3243] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 863.325081][ T3243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 863.431892][ T3243] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 863.744781][ T3243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 864.135993][ T3243] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.101248][ T3247] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 867.339853][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.441825][ T3247] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.606622][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.836290][ T3247] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.962286][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 868.284492][ T3247] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.509398][ T3247] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 895.223221][ T3243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.466473][ T3247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.986227][ T3243] veth0_vlan: entered promiscuous mode [ 978.299204][ T3247] veth0_vlan: entered promiscuous mode [ 979.103745][ T3243] veth1_vlan: entered promiscuous mode [ 979.939390][ T3247] veth1_vlan: entered promiscuous mode [ 984.848882][ T3243] veth0_macvtap: entered promiscuous mode [ 985.432902][ T3247] veth0_macvtap: entered promiscuous mode [ 986.451398][ T3243] veth1_macvtap: entered promiscuous mode [ 987.003456][ T3247] veth1_macvtap: entered promiscuous mode [ 991.694684][ T3456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.743371][ T3245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.151582][ T3456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.392497][ T3335] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.344143][ T3456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.415733][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.891331][ T3335] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.958523][ T3245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.881035][ T3247] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1026.634808][ T3858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1033.226073][ T3858] usb 1-1: string descriptor 0 read error: -32 [ 1033.273594][ T3858] usb 1-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1033.293788][ T3858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.939084][ T3858] usb 1-1: can't set config #1, error -71 [ 1035.148694][ T3858] usb 1-1: USB disconnect, device number 2 [ 1038.822714][ T3856] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1040.206547][ T3856] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 1040.240889][ T3856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.744256][ T3856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1052.490452][ T3856] usb 2-1: Using ep0 maxpacket: 8 [ 1052.858907][ T3856] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1052.861489][ T3856] usb 2-1: config 0 has no interface number 0 [ 1052.863793][ T3856] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1052.865047][ T3856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.583889][ T3856] usb 2-1: config 0 descriptor?? [ 1054.636372][ T3856] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 1056.710080][ T3856] viperboard-i2c viperboard-i2c.1.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 1056.712943][ T3856] viperboard-i2c viperboard-i2c.1.auto: probe with driver viperboard-i2c failed with error -5 [ 1058.805742][ T3890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1059.194828][ T3890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.070766][ T24] usb 1-1: USB disconnect, device number 3 [ 1067.670032][ T3860] usb 2-1: USB disconnect, device number 2 [ 1077.825532][ T3938] process 'syz.1.7' launched './mnt/file0' with NULL argv: empty string added [ 1104.715835][ T3946] dummy_hcd dummy_hcd.0: remove, state 4 [ 1104.735697][ T3946] usb usb1: USB disconnect, device number 1 [ 1110.840294][ T3946] dummy_hcd dummy_hcd.0: stopped [ 1110.866668][ T3946] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1114.900555][ T3948] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 1114.986450][ T3948] dummy_hcd dummy_hcd.0: Dummy host controller [ 1118.244960][ T3948] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 1121.313517][ T3948] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 1121.315798][ T3948] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 1121.399473][ T3948] usb usb1: Product: Dummy host controller [ 1121.460525][ T3948] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 1121.486694][ T3948] usb usb1: SerialNumber: dummy_hcd.0 [ 1123.058735][ T3948] hub 1-0:1.0: USB hub found [ 1123.168723][ T3948] hub 1-0:1.0: 1 port detected [ 1142.568613][ T3970] netlink: 'syz.0.13': attribute type 5 has an invalid length. [ 1148.295630][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.331352][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.370957][ T3335] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.402979][ T3335] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1163.103394][ T3857] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1163.135967][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 1163.430209][ T3857] usb 2-1: device descriptor read/64, error -32 [ 1163.960866][ T3857] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1165.605525][ T3857] usb 2-1: Using ep0 maxpacket: 16 [ 1166.484528][ T3857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1166.506336][ T3857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1166.559784][ T3857] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1166.562066][ T3857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.095177][ T3857] usb 2-1: config 0 descriptor?? [ 1172.225614][ T3857] usb 2-1: can't set config #0, error -110 [ 1175.330091][ T3858] usb 2-1: USB disconnect, device number 4 [ 1178.640291][ T3857] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1179.643433][ T3857] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 1179.647676][ T3857] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1179.649083][ T3857] usb 1-1: Product: syz [ 1179.652090][ T3857] usb 1-1: Manufacturer: syz [ 1179.660884][ T3857] usb 1-1: SerialNumber: syz [ 1180.601092][ T3857] usb-storage 1-1:1.0: USB Mass Storage device detected [ 1181.394530][ T3857] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1181.553817][ T3857] scsi host0: usb-storage 1-1:1.0 [ 1182.521936][ T3859] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1183.908363][ T3859] usb 2-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 1.00 [ 1183.920122][ T3859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.945440][ T3859] usb 2-1: Product: G [ 1183.960074][ T3859] usb 2-1: Manufacturer: 祳z [ 1183.994655][ T3859] usb 2-1: SerialNumber: syz [ 1193.950987][ T3234] usb 2-1: USB disconnect, device number 5 [ 1194.461726][ T3859] usb 1-1: USB disconnect, device number 2 [ 1203.270520][ T3234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1203.806636][ T3860] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1205.593496][ T3860] usb 1-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice= 0.00 [ 1205.652958][ T3860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.665095][ T3860] usb 1-1: Product: syz [ 1205.678238][ T3860] usb 1-1: Manufacturer: syz [ 1205.679228][ T3860] usb 1-1: SerialNumber: syz [ 1205.898169][ T3234] usb 2-1: New USB device found, idVendor=9710, idProduct=7830, bcdDevice= 1.00 [ 1205.899448][ T3234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.318270][ T3866] usb 1-1: USB disconnect, device number 3 [ 1220.622340][ T3234] usb 2-1: Cannot set autoneg [ 1220.723746][ T3234] MOSCHIP usb-ethernet driver 2-1:1.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1221.586011][ T3234] usb 2-1: USB disconnect, device number 6 [ 1232.819275][ T31] audit: type=1800 audit(1231.320:2): pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="idVendor" dev="configfs" ino=3703 res=0 errno=0 [ 1232.930567][ T31] audit: type=1800 audit(1231.430:3): pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="idProduct" dev="configfs" ino=3704 res=0 errno=0 [ 1233.055283][ T31] audit: type=1800 audit(1231.530:4): pid=4068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.24" name="qw_sign" dev="configfs" ino=3705 res=0 errno=0 [ 1234.357747][ T4070] ------------[ cut here ]------------ [ 1234.360559][ T4070] skb_assert_len [ 1234.372435][ C0] WARNING: [] ./include/linux/skbuff.h:2753 at __dev_queue_xmit+0x36da/0x4d46, CPU#0: syz.0.25/4070 [ 1234.374053][ C0] Modules linked in: [ 1234.374832][ C0] CPU: 0 UID: 0 PID: 4070 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT [ 1234.375343][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1234.375710][ C0] epc : __dev_queue_xmit+0x36da/0x4d46 [ 1234.376109][ C0] ra : __dev_queue_xmit+0x36da/0x4d46 [ 1234.376458][ C0] epc : ffffffff852a5e78 ra : ffffffff852a5e78 sp : ffff8f800b517300 [ 1234.376677][ C0] gp : ffffffff8a4a7c60 tp : ffffaf801f700000 t0 : 0000000000000000 [ 1234.376895][ C0] t1 : fffff5ef03ef5b80 t2 : ffffffff9187f620 s0 : ffff8f800b5175f0 [ 1234.377109][ C0] s1 : 1ffff5f0045d8e52 a0 : ffffaf801f700008 a1 : ffffffff86e06ce0 [ 1234.377322][ C0] a2 : 0000000000080000 a3 : ffffffff80150b94 a4 : 0000000000000000 [ 1234.377556][ C0] a5 : 0000000000000000 a6 : fffff5ef03ef5b81 a7 : ffffaf801f7adc03 [ 1234.377802][ C0] s2 : ffffffff8a389aa7 s3 : 0000000000000000 s4 : 0000000000010000 [ 1234.378011][ C0] s5 : ffffaf8022ec7290 s6 : 0000000000000000 s7 : 1ffff5f0045d8e6b [ 1234.378219][ C0] s8 : dfffffff00000000 s9 : ffffaf8022ec7280 s10: ffff8f800b517580 [ 1234.378429][ C0] s11: ffffaf801f6a4000 t3 : ffffffff8809bec8 t4 : fffff5ef03ef5b80 [ 1234.378640][ C0] t5 : fffff5ef03ef5b81 t6 : 0000000000000002 ssp : 0000000000000000 [ 1234.378856][ C0] status: 0000000200000120 badaddr: ffffffff852a5e78 cause: 0000000000000003 [ 1234.379174][ C0] [] __dev_queue_xmit+0x36da/0x4d46 [ 1234.379621][ C0] [] packet_xmit+0x230/0x334 [ 1234.379999][ C0] [] packet_sendmsg+0x2704/0x4d00 [ 1234.380374][ C0] [] __sock_sendmsg+0xce/0x1ce [ 1234.380693][ C0] [] ____sys_sendmsg+0x656/0x7fc [ 1234.381031][ C0] [] ___sys_sendmsg+0x1a4/0x1e6 [ 1234.381352][ C0] [] __sys_sendmsg+0x178/0x214 [ 1234.381725][ C0] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1234.382072][ C0] [] syscall_handler+0x92/0x114 [ 1234.382419][ C0] [] do_trap_ecall_u+0x3e4/0x636 [ 1234.382726][ C0] [] handle_exception+0x168/0x174 [ 1234.383694][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1234.384196][ C0] CPU: 0 UID: 0 PID: 4070 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT [ 1234.384494][ C0] Hardware name: riscv-virtio,qemu (DT) [ 1234.384664][ C0] Call Trace: [ 1234.384787][ C0] [] dump_backtrace+0x2e/0x3c [ 1234.385150][ C0] [] show_stack+0x30/0x3c [ 1234.385452][ C0] [] dump_stack_lvl+0x114/0x1aa [ 1234.385906][ C0] [] dump_stack+0x1c/0x24 [ 1234.386314][ C0] [] vpanic+0x32e/0x75a [ 1234.386592][ C0] [] panic+0xa0/0xa2 [ 1234.386872][ C0] [] check_panic_on_warn+0xc0/0xe4 [ 1234.387224][ C0] [] __warn+0x218/0x61a [ 1234.387514][ C0] [] __report_bug+0x166/0x302 [ 1234.387898][ C0] [] report_bug+0xd8/0x28c [ 1234.388268][ C0] [] handle_break+0x13a/0x30c [ 1234.388610][ C0] [] do_trap_break+0x22e/0x458 [ 1234.388916][ C0] [] handle_exception+0x168/0x174 [ 1234.389212][ C0] [] __dev_queue_xmit+0x36da/0x4d46 [ 1234.389523][ C0] [] packet_xmit+0x230/0x334 [ 1234.389915][ C0] [] packet_sendmsg+0x2704/0x4d00 [ 1234.390287][ C0] [] __sock_sendmsg+0xce/0x1ce [ 1234.390594][ C0] [] ____sys_sendmsg+0x656/0x7fc [ 1234.390910][ C0] [] ___sys_sendmsg+0x1a4/0x1e6 [ 1234.391430][ C0] [] __sys_sendmsg+0x178/0x214 [ 1234.392037][ C0] [] __riscv_sys_sendmsg+0x70/0xa2 [ 1234.392661][ C0] [] syscall_handler+0x92/0x114 [ 1234.393276][ C0] [] do_trap_ecall_u+0x3e4/0x636 [ 1234.393842][ C0] [] handle_exception+0x168/0x174 [ 1234.394856][ C0] SMP: stopping secondary CPUs