program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
[ 85.653805][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 85.733597][ T4649] Bluetooth: hci0: command tx timeout
[ 85.808561][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 85.812409][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.816795][ T9] usb 5-1: Product: syz
[ 85.818659][ T9] usb 5-1: Manufacturer: syz
[ 85.820653][ T9] usb 5-1: SerialNumber: syz
[ 86.299048][ T9] ------------[ cut here ]------------
[ 86.301185][ T9] URB ffff8880378d2f00 submitted while active
[ 86.303301][ T9] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:0/9
[ 86.306600][ T9] Modules linked in:
[ 86.308806][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.311860][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.315529][ T9] Workqueue: usb_hub_wq hub_event
[ 86.317260][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.319021][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.325034][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 86.327008][ T9] RAX: ffffffff876314f2 RBX: ffff8880378d2f00 RCX: ffff88801bf0ca80
[ 86.329563][ T9] RDX: 0000000000000000 RSI: ffff8880378d2f00 RDI: ffffffff9065b500
[ 86.332158][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.334728][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803fc00458
[ 86.337298][ T9] R13: 1ffff11007f8008b R14: ffff8880378d2f08 R15: 0000000000000cc0
[ 86.339855][ T9] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 86.342715][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.345097][ T9] CR2: 00007fd5c9801f98 CR3: 0000000012a37000 CR4: 0000000000352ef0
[ 86.347661][ T9] Call Trace:
[ 86.348845][ T9]
[ 86.349896][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.351784][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.353703][ T9] ? skb_put+0x112/0x210
[ 86.355162][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 86.356950][ T9] port100_set_command_type+0x1c8/0x390
[ 86.358791][ T9] ? pcpu_alloc+0x10/0x310
[ 86.360273][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.362281][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.364283][ T9] port100_probe+0x7b2/0xba0
[ 86.365802][ T9] ? __pfx_port100_probe+0x10/0x10
[ 86.367487][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.369236][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.371225][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 86.373042][ T9] usb_probe_interface+0x653/0xc60
[ 86.375184][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.377037][ T9] really_probe+0x254/0xae0
[ 86.378544][ T9] __driver_probe_device+0x1e8/0x360
[ 86.380292][ T9] driver_probe_device+0x4f/0x240
[ 86.382019][ T9] __device_attach_driver+0x270/0x410
[ 86.384395][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.386202][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.388142][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.389880][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.391598][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.393540][ T9] __device_attach+0x2c4/0x450
[ 86.395123][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.396859][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.398559][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.400206][ T9] device_initial_probe+0xa1/0xd0
[ 86.401905][ T9] bus_probe_device+0x12a/0x220
[ 86.403670][ T9] device_add+0x7d7/0xb80
[ 86.405148][ T9] usb_set_configuration+0x1ad8/0x2180
[ 86.406947][ T9] usb_generic_driver_probe+0x8d/0x150
[ 86.408765][ T9] usb_probe_device+0x1c3/0x3b0
[ 86.410341][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 86.412144][ T9] really_probe+0x254/0xae0
[ 86.413682][ T9] __driver_probe_device+0x1e8/0x360
[ 86.415403][ T9] driver_probe_device+0x4f/0x240
[ 86.417092][ T9] __device_attach_driver+0x270/0x410
[ 86.418866][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.420485][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.422395][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.424163][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.425860][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.427750][ T9] __device_attach+0x2c4/0x450
[ 86.429360][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.431097][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.432819][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.434434][ T9] device_initial_probe+0xa1/0xd0
[ 86.436129][ T9] bus_probe_device+0x12a/0x220
[ 86.437725][ T9] device_add+0x7d7/0xb80
[ 86.439176][ T9] usb_new_device+0x99d/0x1620
[ 86.440805][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.442740][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 86.444447][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.446143][ T9] hub_event+0x28e8/0x4d30
[ 86.447627][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.449527][ T9] ? __pfx_hub_event+0x10/0x10
[ 86.451279][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.455067][ T9] ? rcu_is_watching+0x15/0xb0
[ 86.456677][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.458547][ T9] process_scheduled_works+0xa8e/0x14e0
[ 86.460384][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.462361][ T9] ? assign_work+0x3cf/0x5d0
[ 86.463924][ T9] worker_thread+0xa47/0xfb0
[ 86.465479][ T9] kthread+0x388/0x470
[ 86.466842][ T9] ? __pfx_worker_thread+0x10/0x10
[ 86.468541][ T9] ? __pfx_kthread+0x10/0x10
[ 86.470071][ T9] ret_from_fork+0x514/0xb70
[ 86.471617][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 86.473359][ T9] ? __switch_to+0xc89/0x1420
[ 86.474927][ T9] ? __pfx_kthread+0x10/0x10
[ 86.476492][ T9] ret_from_fork_asm+0x1a/0x30
[ 86.478056][ T9]
[ 86.479125][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.481439][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.484271][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.487398][ T9] Workqueue: usb_hub_wq hub_event
[ 86.488954][ T9] Call Trace:
[ 86.489991][ T9]
[ 86.490928][ T9] vpanic+0x56c/0xa60
[ 86.492162][ T9] ? __pfx__printk+0x10/0x10
[ 86.493584][ T9] ? __pfx_vpanic+0x10/0x10
[ 86.494967][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 86.496580][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 86.498159][ T9] panic+0xc5/0xd0
[ 86.499333][ T9] ? __pfx_panic+0x10/0x10
[ 86.500750][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 86.502332][ T9] __warn+0x315/0x4c0
[ 86.503612][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.505182][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.506740][ T9] __report_bug+0x276/0x570
[ 86.508213][ T9] ? kasan_save_track+0x4f/0x80
[ 86.509763][ T9] ? kasan_save_track+0x3e/0x80
[ 86.511338][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.512898][ T9] ? __pfx___report_bug+0x10/0x10
[ 86.514485][ T9] ? __pfx___mutex_trylock_common+0x10/0x10
[ 86.516381][ T9] ? rcu_is_watching+0x15/0xb0
[ 86.518091][ T9] ? trace_contention_end+0x3d/0x140
[ 86.519902][ T9] report_bug_entry+0x19a/0x290
[ 86.521493][ T9] ? usb_submit_urb+0x7c/0x18b0
[ 86.523072][ T9] ? usb_submit_urb+0x81/0x18b0
[ 86.524630][ T9] handle_bug+0xce/0x200
[ 86.525973][ T9] exc_invalid_op+0x1a/0x50
[ 86.527420][ T9] asm_exc_invalid_op+0x1a/0x20
[ 86.528979][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.530699][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.536654][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 86.538562][ T9] RAX: ffffffff876314f2 RBX: ffff8880378d2f00 RCX: ffff88801bf0ca80
[ 86.541083][ T9] RDX: 0000000000000000 RSI: ffff8880378d2f00 RDI: ffffffff9065b500
[ 86.543569][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.546025][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803fc00458
[ 86.548503][ T9] R13: 1ffff11007f8008b R14: ffff8880378d2f08 R15: 0000000000000cc0
[ 86.550990][ T9] ? usb_submit_urb+0x72/0x18b0
[ 86.552549][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.554368][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.556124][ T9] ? skb_put+0x112/0x210
[ 86.557486][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 86.559199][ T9] port100_set_command_type+0x1c8/0x390
[ 86.560950][ T9] ? pcpu_alloc+0x10/0x310
[ 86.562355][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.564244][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.566074][ T9] port100_probe+0x7b2/0xba0
[ 86.567554][ T9] ? __pfx_port100_probe+0x10/0x10
[ 86.569232][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.570895][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.572727][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 86.574505][ T9] usb_probe_interface+0x653/0xc60
[ 86.576139][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.577900][ T9] really_probe+0x254/0xae0
[ 86.579339][ T9] __driver_probe_device+0x1e8/0x360
[ 86.581015][ T9] driver_probe_device+0x4f/0x240
[ 86.582603][ T9] __device_attach_driver+0x270/0x410
[ 86.584299][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.585814][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.587676][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.589379][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.591021][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.592840][ T9] __device_attach+0x2c4/0x450
[ 86.594344][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.596051][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.597691][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.599263][ T9] device_initial_probe+0xa1/0xd0
[ 86.601352][ T9] bus_probe_device+0x12a/0x220
[ 86.602970][ T9] device_add+0x7d7/0xb80
[ 86.604348][ T9] usb_set_configuration+0x1ad8/0x2180
[ 86.606099][ T9] usb_generic_driver_probe+0x8d/0x150
[ 86.607828][ T9] usb_probe_device+0x1c3/0x3b0
[ 86.609422][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 86.611161][ T9] really_probe+0x254/0xae0
[ 86.612603][ T9] __driver_probe_device+0x1e8/0x360
[ 86.614256][ T9] driver_probe_device+0x4f/0x240
[ 86.615878][ T9] __device_attach_driver+0x270/0x410
[ 86.617573][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.619133][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.621025][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.622715][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.624364][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.626197][ T9] __device_attach+0x2c4/0x450
[ 86.627735][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.629390][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.631027][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.632581][ T9] device_initial_probe+0xa1/0xd0
[ 86.634178][ T9] bus_probe_device+0x12a/0x220
[ 86.635706][ T9] device_add+0x7d7/0xb80
[ 86.637092][ T9] usb_new_device+0x99d/0x1620
[ 86.638591][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.640527][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 86.642176][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.643810][ T9] hub_event+0x28e8/0x4d30
[ 86.645227][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.646853][ T9] ? __pfx_hub_event+0x10/0x10
[ 86.648399][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.650185][ T9] ? rcu_is_watching+0x15/0xb0
[ 86.651696][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.653469][ T9] process_scheduled_works+0xa8e/0x14e0
[ 86.655210][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.657130][ T9] ? assign_work+0x3cf/0x5d0
[ 86.658600][ T9] worker_thread+0xa47/0xfb0
[ 86.660117][ T9] kthread+0x388/0x470
[ 86.661459][ T9] ? __pfx_worker_thread+0x10/0x10
[ 86.663063][ T9] ? __pfx_kthread+0x10/0x10
[ 86.664551][ T9] ret_from_fork+0x514/0xb70
[ 86.665997][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 86.667594][ T9] ? __switch_to+0xc89/0x1420
[ 86.669111][ T9] ? __pfx_kthread+0x10/0x10
[ 86.670608][ T9] ret_from_fork_asm+0x1a/0x30
[ 86.672189][ T9]
[ 86.673544][ T9] Kernel Offset: disabled
[ 86.674984][ T9] Rebooting in 86400 seconds..