program:
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000f80)=ANY=[@ANYBLOB="120100038ee3710889076001fe8201020301090212000107d1102d0904cc50f109"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002d00)={0x44, &(0x7f0000000000)={0x20, 0x16, 0x6, "99d9e9678b2c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000003140)={0x34, &(0x7f0000002ec0)={0x40, 0xe, 0x2, "68ae"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x3, 0x24, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x20, 0xad, 0x16, 0x20, 0x7c0, 0x158b, 0xd096, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x7f, 0x0, 0x4, [{{0x9, 0x4, 0xb3, 0x1, 0x0, 0x4f, 0x7e, 0xc2, 0x2}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
[ 75.726917][ T5317] Bluetooth: hci0: command tx timeout
[ 75.999171][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 76.150206][ T9] usb 5-1: Using ep0 maxpacket: 8
[ 76.156605][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 76.162662][ T9] usb 5-1: config 7 has an invalid interface number: 204 but max is 0
[ 76.166575][ T9] usb 5-1: config 7 has no interface number 0
[ 76.170441][ T9] usb 5-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30
[ 76.175176][ T9] usb 5-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241
[ 76.182444][ T9] usb 5-1: config 7 interface 204 has no altsetting 0
[ 76.191071][ T9] usb 5-1: string descriptor 0 read error: -22
[ 76.194975][ T9] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[ 76.200644][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 76.224342][ T9] hub 5-1:7.204: bad descriptor, ignoring hub
[ 76.227675][ T9] hub 5-1:7.204: probe with driver hub failed with error -5
[ 76.412861][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.415866][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.425147][ T9] asix 5-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 76.829194][ T9] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 76.833732][ T9] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 77.010131][ T9] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 77.014879][ T9] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[ 77.200005][ T9] asix 5-1:7.204 eth2: register 'asix' at usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet, 1a:86:52:bc:fe:b8
[ 77.390197][ T9] usb 5-1: reset high-speed USB device number 2 using dummy_hcd
[ 77.552900][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 77.769299][ T5317] Bluetooth: hci0: command tx timeout
[ 77.965168][ T5031] asix 5-1:7.204 eth2: Failed to read reg index 0x0000: -71
[ 77.972012][ T5315] usb 5-1: USB disconnect, device number 2
[ 77.990708][ T5315] asix 5-1:7.204 eth2: unregister 'asix' usb-dummy_hcd.0-1, ASIX AX88178 USB 2.0 Ethernet
[ 78.020055][ T5315] ------------[ cut here ]------------
[ 78.022560][ T5315] WARNING: CPU: 0 PID: 5315 at net/sched/sch_generic.c:1498 dev_shutdown+0x3e1/0x440
[ 78.026572][ T5315] Modules linked in:
[ 78.028426][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full)
[ 78.032802][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 78.037098][ T5315] Workqueue: usb_hub_wq hub_event
[ 78.039509][ T5315] RIP: 0010:dev_shutdown+0x3e1/0x440
[ 78.041895][ T5315] Code: 45 ad ab f8 49 83 7d 00 00 75 19 e8 89 2a 48 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 2a 48 f8 90 <0f> 0b 90 eb e1 e8 65 2a 48 f8 4c 89 e7 be 03 00 00 00 e8 38 b0 49
[ 78.050530][ T5315] RSP: 0018:ffffc9000d33f120 EFLAGS: 00010293
[ 78.053204][ T5315] RAX: ffffffff8977fc00 RBX: ffff888052bac4c8 RCX: ffff888000704880
[ 78.056842][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 78.060916][ T5315] RBP: 0000000000000001 R08: ffff8880007348ab R09: 1ffff110000e6915
[ 78.064351][ T5315] R10: dffffc0000000000 R11: ffffed10000e6916 R12: ffffffff8f565490
[ 78.068466][ T5315] R13: ffff888052bac5a8 R14: 1ffff1100a575899 R15: ffffffff8f565480
[ 78.072312][ T5315] FS: 0000000000000000(0000) GS:ffff88808d21b000(0000) knlGS:0000000000000000
[ 78.076037][ T5315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.078804][ T5315] CR2: 000055a3b918b024 CR3: 0000000051b15000 CR4: 0000000000352ef0
[ 78.082481][ T5315] Call Trace:
[ 78.084198][ T5315]
[ 78.085784][ T5315] unregister_netdevice_many_notify+0xea7/0x2320
[ 78.088747][ T5315] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 78.093373][ T5315] ? trace_contention_end+0x39/0x120
[ 78.095692][ T5315] ? __mutex_lock+0x330/0xe80
[ 78.097721][ T5315] ? rcu_is_watching+0x15/0xb0
[ 78.100311][ T5315] ? rtnl_net_dev_lock+0x257/0x2f0
[ 78.102479][ T5315] ? __pfx___mutex_lock+0x10/0x10
[ 78.105252][ T5315] unregister_netdevice_queue+0x33c/0x380
[ 78.108032][ T5315] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 78.110769][ T5315] ? rtnl_net_dev_lock+0x2de/0x2f0
[ 78.112881][ T5315] unregister_netdev+0x1f/0x60
[ 78.114909][ T5315] usbnet_disconnect+0xcd/0x380
[ 78.116926][ T5315] usb_unbind_interface+0x26b/0x8f0
[ 78.119313][ T5315] ? __pfx_usb_unbind_interface+0x10/0x10
[ 78.121422][ T5315] device_release_driver_internal+0x4d9/0x7c0
[ 78.123829][ T5315] bus_remove_device+0x34d/0x410
[ 78.125860][ T5315] device_del+0x511/0x8e0
[ 78.127781][ T5315] ? __pm_runtime_barrier+0x376/0x460
[ 78.130251][ T5315] ? __pfx_device_del+0x10/0x10
[ 78.132320][ T5315] ? __pfx___mutex_lock+0x10/0x10
[ 78.134488][ T5315] usb_disable_device+0x3e9/0x8a0
[ 78.136761][ T5315] usb_disconnect+0x330/0x950
[ 78.138916][ T5315] hub_event+0x1cdb/0x4a00
[ 78.141018][ T5315] ? do_raw_spin_lock+0x121/0x290
[ 78.143268][ T5315] ? register_lock_class+0x51/0x320
[ 78.145573][ T5315] ? __pfx_hub_event+0x10/0x10
[ 78.147676][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.150394][ T5315] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.152701][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.155184][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.157685][ T5315] process_scheduled_works+0xae1/0x17b0
[ 78.160110][ T5315] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.162811][ T5315] worker_thread+0x8a0/0xda0
[ 78.165055][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 78.167857][ T5315] ? __kthread_parkme+0x7b/0x200
[ 78.171716][ T5315] kthread+0x70e/0x8a0
[ 78.173423][ T5315] ? __pfx_worker_thread+0x10/0x10
[ 78.175501][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.177414][ T5315] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.179939][ T5315] ? lockdep_hardirqs_on+0x9c/0x150
[ 78.182167][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.184209][ T5315] ret_from_fork+0x3f9/0x770
[ 78.186272][ T5315] ? __pfx_ret_from_fork+0x10/0x10
[ 78.188616][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.190886][ T5315] ret_from_fork_asm+0x1a/0x30
[ 78.192942][ T5315]
[ 78.194284][ T5315] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 78.197449][ T5315] CPU: 0 UID: 0 PID: 5315 Comm: kworker/0:3 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full)
[ 78.202564][ T5315] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 78.207199][ T5315] Workqueue: usb_hub_wq hub_event
[ 78.209410][ T5315] Call Trace:
[ 78.210901][ T5315]
[ 78.212292][ T5315] dump_stack_lvl+0x99/0x250
[ 78.214506][ T5315] ? __asan_memcpy+0x40/0x70
[ 78.216663][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10
[ 78.219014][ T5315] ? __pfx__printk+0x10/0x10
[ 78.221027][ T5315] panic+0x2db/0x790
[ 78.222719][ T5315] ? __pfx_panic+0x10/0x10
[ 78.224555][ T5315] ? show_trace_log_lvl+0x4fb/0x550
[ 78.226804][ T5315] ? ret_from_fork_asm+0x1a/0x30
[ 78.228964][ T5315] __warn+0x31b/0x4b0
[ 78.230695][ T5315] ? dev_shutdown+0x3e1/0x440
[ 78.232710][ T5315] ? dev_shutdown+0x3e1/0x440
[ 78.234741][ T5315] report_bug+0x2be/0x4f0
[ 78.236675][ T5315] ? dev_shutdown+0x3e1/0x440
[ 78.238745][ T5315] ? dev_shutdown+0x3e1/0x440
[ 78.240806][ T5315] ? dev_shutdown+0x3e3/0x440
[ 78.242833][ T5315] handle_bug+0x84/0x160
[ 78.244673][ T5315] exc_invalid_op+0x1a/0x50
[ 78.246625][ T5315] asm_exc_invalid_op+0x1a/0x20
[ 78.248662][ T5315] RIP: 0010:dev_shutdown+0x3e1/0x440
[ 78.250954][ T5315] Code: 45 ad ab f8 49 83 7d 00 00 75 19 e8 89 2a 48 f8 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 70 2a 48 f8 90 <0f> 0b 90 eb e1 e8 65 2a 48 f8 4c 89 e7 be 03 00 00 00 e8 38 b0 49
[ 78.259319][ T5315] RSP: 0018:ffffc9000d33f120 EFLAGS: 00010293
[ 78.261877][ T5315] RAX: ffffffff8977fc00 RBX: ffff888052bac4c8 RCX: ffff888000704880
[ 78.265178][ T5315] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 78.268621][ T5315] RBP: 0000000000000001 R08: ffff8880007348ab R09: 1ffff110000e6915
[ 78.272001][ T5315] R10: dffffc0000000000 R11: ffffed10000e6916 R12: ffffffff8f565490
[ 78.275482][ T5315] R13: ffff888052bac5a8 R14: 1ffff1100a575899 R15: ffffffff8f565480
[ 78.278920][ T5315] ? dev_shutdown+0x3e0/0x440
[ 78.280889][ T5315] unregister_netdevice_many_notify+0xea7/0x2320
[ 78.283522][ T5315] ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[ 78.286343][ T5315] ? trace_contention_end+0x39/0x120
[ 78.288621][ T5315] ? __mutex_lock+0x330/0xe80
[ 78.290651][ T5315] ? rcu_is_watching+0x15/0xb0
[ 78.292623][ T5315] ? rtnl_net_dev_lock+0x257/0x2f0
[ 78.294793][ T5315] ? __pfx___mutex_lock+0x10/0x10
[ 78.296920][ T5315] unregister_netdevice_queue+0x33c/0x380
[ 78.299229][ T5315] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 78.301654][ T5315] ? rtnl_net_dev_lock+0x2de/0x2f0
[ 78.303633][ T5315] unregister_netdev+0x1f/0x60
[ 78.305504][ T5315] usbnet_disconnect+0xcd/0x380
[ 78.307417][ T5315] usb_unbind_interface+0x26b/0x8f0
[ 78.309487][ T5315] ? __pfx_usb_unbind_interface+0x10/0x10
[ 78.311742][ T5315] device_release_driver_internal+0x4d9/0x7c0
[ 78.314385][ T5315] bus_remove_device+0x34d/0x410
[ 78.316868][ T5315] device_del+0x511/0x8e0
[ 78.319100][ T5315] ? __pm_runtime_barrier+0x376/0x460
[ 78.321748][ T5315] ? __pfx_device_del+0x10/0x10
[ 78.323825][ T5315] ? __pfx___mutex_lock+0x10/0x10
[ 78.325932][ T5315] usb_disable_device+0x3e9/0x8a0
[ 78.328032][ T5315] usb_disconnect+0x330/0x950
[ 78.330053][ T5315] hub_event+0x1cdb/0x4a00
[ 78.331961][ T5315] ? do_raw_spin_lock+0x121/0x290
[ 78.334201][ T5315] ? register_lock_class+0x51/0x320
[ 78.336643][ T5315] ? __pfx_hub_event+0x10/0x10
[ 78.338817][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.341409][ T5315] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.343727][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.346224][ T5315] ? process_scheduled_works+0x9ef/0x17b0
[ 78.348502][ T5315] process_scheduled_works+0xae1/0x17b0
[ 78.350914][ T5315] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.353462][ T5315] worker_thread+0x8a0/0xda0
[ 78.355462][ T5315] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 78.358277][ T5315] ? __kthread_parkme+0x7b/0x200
[ 78.360379][ T5315] kthread+0x70e/0x8a0
[ 78.362384][ T5315] ? __pfx_worker_thread+0x10/0x10
[ 78.364755][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.367256][ T5315] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.370234][ T5315] ? lockdep_hardirqs_on+0x9c/0x150
[ 78.372633][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.374976][ T5315] ret_from_fork+0x3f9/0x770
[ 78.377173][ T5315] ? __pfx_ret_from_fork+0x10/0x10
[ 78.379518][ T5315] ? __pfx_kthread+0x10/0x10
[ 78.381460][ T5315] ret_from_fork_asm+0x1a/0x30
[ 78.383491][ T5315]
[ 78.385104][ T5315] Kernel Offset: disabled
[ 78.387132][ T5315] Rebooting in 86400 seconds..