usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 usb 1-1: SerialNumber: syz Kernel panic - not syncing: corrupted stack end detected inside scheduler CPU: 1 PID: 4808 Comm: kworker/1:3 Not tainted 5.17.0-rc1-syzkaller-00002-g0966d385830d #0 Hardware name: riscv-virtio,qemu (DT) Workqueue: usb_hub_wq hub_event Call Trace: [] dump_backtrace+0x2e/0x3c arch/riscv/kernel/stacktrace.c:113 [] show_stack+0x34/0x40 arch/riscv/kernel/stacktrace.c:119 [] __dump_stack lib/dump_stack.c:88 [inline] [] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:106 [] dump_stack+0x1c/0x24 lib/dump_stack.c:113 [] panic+0x24a/0x634 kernel/panic.c:233 [] schedule_debug kernel/sched/core.c:5541 [inline] [] schedule+0x0/0x14c kernel/sched/core.c:6187 [] preempt_schedule_common+0x4e/0xde kernel/sched/core.c:6462 [] preempt_schedule+0x34/0x36 kernel/sched/core.c:6487 [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] [] _raw_spin_unlock_irqrestore+0x8c/0x98 kernel/locking/spinlock.c:194 [] __debug_check_no_obj_freed lib/debugobjects.c:1002 [inline] [] debug_check_no_obj_freed+0x14c/0x24a lib/debugobjects.c:1023 [] slab_free_hook mm/slub.c:1703 [inline] [] slab_free_freelist_hook+0xe4/0x1cc mm/slub.c:1754 [] slab_free mm/slub.c:3509 [inline] [] kfree+0xe0/0x3e4 mm/slub.c:4562 [] memcg_free_slab_cgroups mm/slab.h:458 [inline] [] unaccount_slab mm/slab.h:646 [inline] [] __free_slab+0x84/0x27c mm/slub.c:2027 [] free_slab mm/slub.c:2043 [inline] [] discard_slab+0x4c/0x7a mm/slub.c:2049 [] __unfreeze_partials+0x16a/0x18e mm/slub.c:2536 [] put_cpu_partial+0xf6/0x162 mm/slub.c:2612 [] __slab_free+0x166/0x29c mm/slub.c:3378 [] do_slab_free mm/slub.c:3497 [inline] [] ___cache_free+0x17c/0x354 mm/slub.c:3516 [] qlink_free mm/kasan/quarantine.c:157 [inline] [] qlist_free_all+0x7c/0x132 mm/kasan/quarantine.c:176 [] kasan_quarantine_reduce+0x14c/0x1c8 mm/kasan/quarantine.c:283 [] __kasan_slab_alloc+0x5c/0x98 mm/kasan/common.c:446 [] kasan_slab_alloc include/linux/kasan.h:260 [inline] [] slab_post_alloc_hook mm/slab.h:732 [inline] [] slab_alloc_node mm/slub.c:3230 [inline] [] slab_alloc mm/slub.c:3238 [inline] [] kmem_cache_alloc+0x338/0x3de mm/slub.c:3243 [] kmem_cache_zalloc include/linux/slab.h:705 [inline] [] __kernfs_new_node+0xfc/0x5f2 fs/kernfs/dir.c:585 [] kernfs_new_node+0x66/0xbe fs/kernfs/dir.c:647 [] __kernfs_create_file+0x4e/0x1e8 fs/kernfs/file.c:987 [] sysfs_add_file_mode_ns+0x138/0x254 fs/sysfs/file.c:294 [] create_files fs/sysfs/group.c:64 [inline] [] internal_create_group+0x274/0x722 fs/sysfs/group.c:148 [] internal_create_groups.part.0+0x64/0xe8 fs/sysfs/group.c:188 [] internal_create_groups fs/sysfs/group.c:184 [inline] [] sysfs_create_groups+0x2c/0x48 fs/sysfs/group.c:214 [] device_add_groups drivers/base/core.c:2471 [inline] [] device_add_attrs drivers/base/core.c:2630 [inline] [] device_add+0x6d6/0x129e drivers/base/core.c:3356 [] device_register+0x20/0x2a drivers/base/core.c:3486 [] usb_create_ep_devs+0xe2/0x186 drivers/usb/core/endpoint.c:169 [] create_intf_ep_devs.isra.0+0xc6/0x120 drivers/usb/core/message.c:1253 [] usb_set_interface+0x5b4/0x700 drivers/usb/core/message.c:1661 [] usbnet_get_endpoints+0x3aa/0x3f0 drivers/net/usb/usbnet.c:151 [] usbnet_generic_cdc_bind+0x5da/0xf9c drivers/net/usb/cdc_ether.c:293 [] usbnet_ether_cdc_bind drivers/net/usb/cdc_ether.c:344 [inline] [] usbnet_cdc_bind+0x24/0xe2 drivers/net/usb/cdc_ether.c:450 [] usbnet_probe+0x6a2/0x14c8 drivers/net/usb/usbnet.c:1747 [] usb_probe_interface+0x21c/0x57a drivers/usb/core/driver.c:396 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe+0x1a6/0x89e drivers/base/dd.c:596 [] __driver_probe_device+0x24a/0x2d4 drivers/base/dd.c:752 [] driver_probe_device+0x60/0x1a4 drivers/base/dd.c:782 [] __device_attach_driver+0x17c/0x224 drivers/base/dd.c:899 [] bus_for_each_drv+0x132/0x1a6 drivers/base/bus.c:427 [] __device_attach+0x1e0/0x372 drivers/base/dd.c:970 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1017 [] bus_probe_device+0x144/0x154 drivers/base/bus.c:487 [] device_add+0x91e/0x129e drivers/base/core.c:3405 [] usb_set_configuration+0xafe/0xf6a drivers/usb/core/message.c:2170 [] usb_generic_driver_probe+0xb2/0x122 drivers/usb/core/generic.c:238 [] usb_probe_device+0xa8/0x204 drivers/usb/core/driver.c:293 [] call_driver_probe drivers/base/dd.c:517 [inline] [] really_probe+0x1a6/0x89e drivers/base/dd.c:596 [] __driver_probe_device+0x24a/0x2d4 drivers/base/dd.c:752 [] driver_probe_device+0x60/0x1a4 drivers/base/dd.c:782 [] __device_attach_driver+0x17c/0x224 drivers/base/dd.c:899 [] bus_for_each_drv+0x132/0x1a6 drivers/base/bus.c:427 [] __device_attach+0x1e0/0x372 drivers/base/dd.c:970 [] device_initial_probe+0x1c/0x26 drivers/base/dd.c:1017 [] bus_probe_device+0x144/0x154 drivers/base/bus.c:487 [] device_add+0x91e/0x129e drivers/base/core.c:3405 [] usb_new_device+0x5c8/0xd78 drivers/usb/core/hub.c:2566 [] hub_port_connect drivers/usb/core/hub.c:5358 [inline] [] hub_port_connect_change drivers/usb/core/hub.c:5502 [inline] [] port_event drivers/usb/core/hub.c:5660 [inline] [] hub_event+0x1b3e/0x3364 drivers/usb/core/hub.c:5742 [] process_one_work+0x654/0xffe kernel/workqueue.c:2307 [] worker_thread+0x360/0x8fa kernel/workqueue.c:2454 [] kthread+0x19e/0x1fa kernel/kthread.c:377 [] ret_from_exception+0x0/0x10 SMP: stopping secondary CPUs Rebooting in 86400 seconds..