program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
[ 106.338136][ T5286] Bluetooth: hci0: command tx timeout
[ 106.640906][ T5309] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 106.796745][ T5309] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 106.800202][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 106.803277][ T5309] usb 5-1: Product: syz
[ 106.805010][ T5309] usb 5-1: Manufacturer: syz
[ 106.806640][ T5309] usb 5-1: SerialNumber: syz
[ 107.217794][ T5309] ------------[ cut here ]------------
[ 107.219816][ T5309] URB ffff88801fcd2e00 submitted while active
[ 107.221918][ T5309] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/5309
[ 107.225219][ T5309] Modules linked in:
[ 107.226592][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 107.229583][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 107.233305][ T5309] Workqueue: usb_hub_wq hub_event
[ 107.235226][ T5309] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 107.237330][ T5309] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 107.243848][ T5309] RSP: 0018:ffffc9000e1feb80 EFLAGS: 00010293
[ 107.245845][ T5309] RAX: ffffffff876314f2 RBX: ffff88801fcd2e00 RCX: ffff888011cb8000
[ 107.248432][ T5309] RDX: 0000000000000000 RSI: ffff88801fcd2e00 RDI: ffffffff9065b500
[ 107.251089][ T5309] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 107.253878][ T5309] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888012051858
[ 107.256594][ T5309] R13: 1ffff1100240a30b R14: ffff88801fcd2e08 R15: 0000000000000cc0
[ 107.259150][ T5309] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 107.262119][ T5309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 107.264265][ T5309] CR2: 00007f79d64157f0 CR3: 0000000043d85000 CR4: 0000000000352ef0
[ 107.266871][ T5309] Call Trace:
[ 107.268135][ T5309]
[ 107.269192][ T5309] ? __kmalloc_cache_noprof+0x150/0x660
[ 107.271162][ T5309] ? port100_send_cmd_async+0xbd/0xcc0
[ 107.273191][ T5309] ? skb_put+0x112/0x210
[ 107.274690][ T5309] port100_send_cmd_async+0x84f/0xcc0
[ 107.276580][ T5309] port100_set_command_type+0x1c8/0x390
[ 107.278419][ T5309] ? pcpu_alloc+0x10/0x310
[ 107.280135][ T5309] ? __pfx_port100_set_command_type+0x10/0x10
[ 107.282178][ T5309] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 107.284124][ T5309] port100_probe+0x7b2/0xba0
[ 107.285738][ T5309] ? __pfx_port100_probe+0x10/0x10
[ 107.287487][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.289300][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.291532][ T5309] ? __pm_runtime_set_status+0x994/0xc80
[ 107.293522][ T5309] usb_probe_interface+0x653/0xc60
[ 107.295301][ T5309] ? __pfx_usb_probe_interface+0x10/0x10
[ 107.297210][ T5309] really_probe+0x254/0xae0
[ 107.298749][ T5309] __driver_probe_device+0x1e8/0x360
[ 107.300546][ T5309] driver_probe_device+0x4f/0x240
[ 107.302293][ T5309] __device_attach_driver+0x270/0x410
[ 107.304123][ T5309] bus_for_each_drv+0x258/0x2f0
[ 107.305906][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 107.307988][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 107.309807][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.311621][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.313663][ T5309] __device_attach+0x2c4/0x450
[ 107.315371][ T5309] ? __pfx___device_attach+0x10/0x10
[ 107.317222][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.319037][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 107.320906][ T5309] device_initial_probe+0xa1/0xd0
[ 107.322706][ T5309] bus_probe_device+0x12a/0x220
[ 107.324500][ T5309] device_add+0x7d7/0xb80
[ 107.326054][ T5309] usb_set_configuration+0x1ad8/0x2180
[ 107.327966][ T5309] usb_generic_driver_probe+0x8d/0x150
[ 107.329920][ T5309] usb_probe_device+0x1c3/0x3b0
[ 107.331681][ T5309] ? __pfx_usb_probe_device+0x10/0x10
[ 107.333590][ T5309] really_probe+0x254/0xae0
[ 107.335266][ T5309] __driver_probe_device+0x1e8/0x360
[ 107.337133][ T5309] driver_probe_device+0x4f/0x240
[ 107.338888][ T5309] __device_attach_driver+0x270/0x410
[ 107.340909][ T5309] bus_for_each_drv+0x258/0x2f0
[ 107.342654][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 107.344645][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 107.346482][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.348356][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.350356][ T5309] __device_attach+0x2c4/0x450
[ 107.352153][ T5309] ? __pfx___device_attach+0x10/0x10
[ 107.354188][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.355919][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 107.357562][ T5309] device_initial_probe+0xa1/0xd0
[ 107.359243][ T5309] bus_probe_device+0x12a/0x220
[ 107.361175][ T5309] device_add+0x7d7/0xb80
[ 107.362686][ T5309] usb_new_device+0x99d/0x1620
[ 107.364332][ T5309] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 107.366376][ T5309] ? __pfx_usb_new_device+0x10/0x10
[ 107.368201][ T5309] ? _raw_spin_unlock_irq+0x23/0x50
[ 107.370000][ T5309] hub_event+0x28e8/0x4d30
[ 107.371891][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.373632][ T5309] ? __pfx_hub_event+0x10/0x10
[ 107.375284][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 107.377196][ T5309] ? rcu_is_watching+0x15/0xb0
[ 107.378791][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 107.380817][ T5309] process_scheduled_works+0xa8e/0x14e0
[ 107.382684][ T5309] ? __pfx_process_scheduled_works+0x10/0x10
[ 107.384807][ T5309] ? assign_work+0x3cf/0x5d0
[ 107.386391][ T5309] worker_thread+0xa47/0xfb0
[ 107.387982][ T5309] ? __kthread_parkme+0x71/0x1f0
[ 107.389650][ T5309] kthread+0x388/0x470
[ 107.391108][ T5309] ? __pfx_worker_thread+0x10/0x10
[ 107.392939][ T5309] ? __pfx_kthread+0x10/0x10
[ 107.394531][ T5309] ret_from_fork+0x514/0xb70
[ 107.396090][ T5309] ? __pfx_ret_from_fork+0x10/0x10
[ 107.397792][ T5309] ? __switch_to+0xc89/0x1420
[ 107.399415][ T5309] ? __pfx_kthread+0x10/0x10
[ 107.401018][ T5309] ret_from_fork_asm+0x1a/0x30
[ 107.402653][ T5309]
[ 107.403770][ T5309] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 107.406135][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 107.409060][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 107.412311][ T5309] Workqueue: usb_hub_wq hub_event
[ 107.413942][ T5309] Call Trace:
[ 107.415037][ T5309]
[ 107.416009][ T5309] vpanic+0x56c/0xa60
[ 107.417337][ T5309] ? __pfx__printk+0x10/0x10
[ 107.418863][ T5309] ? __pfx_vpanic+0x10/0x10
[ 107.420619][ T5309] ? is_bpf_text_address+0x292/0x2b0
[ 107.422514][ T5309] ? is_bpf_text_address+0x26/0x2b0
[ 107.424605][ T5309] panic+0xc5/0xd0
[ 107.426169][ T5309] ? __pfx_panic+0x10/0x10
[ 107.428937][ T5309] ? ret_from_fork_asm+0x1a/0x30
[ 107.430978][ T5309] __warn+0x315/0x4c0
[ 107.432623][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 107.434650][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 107.436659][ T5309] __report_bug+0x276/0x570
[ 107.438541][ T5309] ? kasan_save_track+0x4f/0x80
[ 107.440574][ T5309] ? kasan_save_track+0x3e/0x80
[ 107.442564][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 107.444574][ T5309] ? __pfx___report_bug+0x10/0x10
[ 107.446675][ T5309] ? __pfx___mutex_trylock_common+0x10/0x10
[ 107.449056][ T5309] ? rcu_is_watching+0x15/0xb0
[ 107.450964][ T5309] ? trace_contention_end+0x3d/0x140
[ 107.453119][ T5309] report_bug_entry+0x19a/0x290
[ 107.455090][ T5309] ? usb_submit_urb+0x7c/0x18b0
[ 107.456931][ T5309] ? usb_submit_urb+0x81/0x18b0
[ 107.458734][ T5309] handle_bug+0xce/0x200
[ 107.460412][ T5309] exc_invalid_op+0x1a/0x50
[ 107.461971][ T5309] asm_exc_invalid_op+0x1a/0x20
[ 107.463596][ T5309] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 107.465400][ T5309] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 107.472515][ T5309] RSP: 0018:ffffc9000e1feb80 EFLAGS: 00010293
[ 107.474733][ T5309] RAX: ffffffff876314f2 RBX: ffff88801fcd2e00 RCX: ffff888011cb8000
[ 107.477720][ T5309] RDX: 0000000000000000 RSI: ffff88801fcd2e00 RDI: ffffffff9065b500
[ 107.480709][ T5309] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 107.483770][ T5309] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888012051858
[ 107.486814][ T5309] R13: 1ffff1100240a30b R14: ffff88801fcd2e08 R15: 0000000000000cc0
[ 107.489866][ T5309] ? usb_submit_urb+0x72/0x18b0
[ 107.491832][ T5309] ? __kmalloc_cache_noprof+0x150/0x660
[ 107.493849][ T5309] ? port100_send_cmd_async+0xbd/0xcc0
[ 107.495979][ T5309] ? skb_put+0x112/0x210
[ 107.497638][ T5309] port100_send_cmd_async+0x84f/0xcc0
[ 107.499731][ T5309] port100_set_command_type+0x1c8/0x390
[ 107.501863][ T5309] ? pcpu_alloc+0x10/0x310
[ 107.503550][ T5309] ? __pfx_port100_set_command_type+0x10/0x10
[ 107.505999][ T5309] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 107.508403][ T5309] port100_probe+0x7b2/0xba0
[ 107.510304][ T5309] ? __pfx_port100_probe+0x10/0x10
[ 107.512404][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.514530][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.516918][ T5309] ? __pm_runtime_set_status+0x994/0xc80
[ 107.519092][ T5309] usb_probe_interface+0x653/0xc60
[ 107.520850][ T5309] ? __pfx_usb_probe_interface+0x10/0x10
[ 107.522694][ T5309] really_probe+0x254/0xae0
[ 107.524179][ T5309] __driver_probe_device+0x1e8/0x360
[ 107.525865][ T5309] driver_probe_device+0x4f/0x240
[ 107.527499][ T5309] __device_attach_driver+0x270/0x410
[ 107.529270][ T5309] bus_for_each_drv+0x258/0x2f0
[ 107.530870][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 107.532829][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 107.534601][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.536378][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.538252][ T5309] __device_attach+0x2c4/0x450
[ 107.539819][ T5309] ? __pfx___device_attach+0x10/0x10
[ 107.541532][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.543179][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 107.544750][ T5309] device_initial_probe+0xa1/0xd0
[ 107.546370][ T5309] bus_probe_device+0x12a/0x220
[ 107.547940][ T5309] device_add+0x7d7/0xb80
[ 107.549359][ T5309] usb_set_configuration+0x1ad8/0x2180
[ 107.551113][ T5309] usb_generic_driver_probe+0x8d/0x150
[ 107.552885][ T5309] usb_probe_device+0x1c3/0x3b0
[ 107.554456][ T5309] ? __pfx_usb_probe_device+0x10/0x10
[ 107.556213][ T5309] really_probe+0x254/0xae0
[ 107.557733][ T5309] __driver_probe_device+0x1e8/0x360
[ 107.559525][ T5309] driver_probe_device+0x4f/0x240
[ 107.561220][ T5309] __device_attach_driver+0x270/0x410
[ 107.562998][ T5309] bus_for_each_drv+0x258/0x2f0
[ 107.564632][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 107.566577][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 107.568336][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 107.570061][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 107.572015][ T5309] __device_attach+0x2c4/0x450
[ 107.573731][ T5309] ? __pfx___device_attach+0x10/0x10
[ 107.575689][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.577614][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 107.579281][ T5309] device_initial_probe+0xa1/0xd0
[ 107.581021][ T5309] bus_probe_device+0x12a/0x220
[ 107.582667][ T5309] device_add+0x7d7/0xb80
[ 107.584134][ T5309] usb_new_device+0x99d/0x1620
[ 107.585786][ T5309] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 107.587926][ T5309] ? __pfx_usb_new_device+0x10/0x10
[ 107.589725][ T5309] ? _raw_spin_unlock_irq+0x23/0x50
[ 107.591536][ T5309] hub_event+0x28e8/0x4d30
[ 107.593087][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 107.594827][ T5309] ? __pfx_hub_event+0x10/0x10
[ 107.596486][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 107.598375][ T5309] ? rcu_is_watching+0x15/0xb0
[ 107.600085][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 107.602028][ T5309] process_scheduled_works+0xa8e/0x14e0
[ 107.603864][ T5309] ? __pfx_process_scheduled_works+0x10/0x10
[ 107.605854][ T5309] ? assign_work+0x3cf/0x5d0
[ 107.607414][ T5309] worker_thread+0xa47/0xfb0
[ 107.609001][ T5309] ? __kthread_parkme+0x71/0x1f0
[ 107.610678][ T5309] kthread+0x388/0x470
[ 107.612074][ T5309] ? __pfx_worker_thread+0x10/0x10
[ 107.613795][ T5309] ? __pfx_kthread+0x10/0x10
[ 107.615335][ T5309] ret_from_fork+0x514/0xb70
[ 107.616931][ T5309] ? __pfx_ret_from_fork+0x10/0x10
[ 107.618614][ T5309] ? __switch_to+0xc89/0x1420
[ 107.620174][ T5309] ? __pfx_kthread+0x10/0x10
[ 107.621700][ T5309] ret_from_fork_asm+0x1a/0x30
[ 107.623306][ T5309]
[ 107.624678][ T5309] Kernel Offset: disabled
[ 107.626176][ T5309] Rebooting in 86400 seconds..