program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
[ 84.778514][ T4648] Bluetooth: hci0: command tx timeout
[ 85.135333][ T804] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 85.297546][ T804] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 85.303537][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.314003][ T804] usb 5-1: Product: syz
[ 85.315932][ T804] usb 5-1: Manufacturer: syz
[ 85.318676][ T804] usb 5-1: SerialNumber: syz
[ 85.800400][ T804] ------------[ cut here ]------------
[ 85.802638][ T804] URB ffff888051578d00 submitted while active
[ 85.805045][ T804] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:2/804
[ 85.809093][ T804] Modules linked in:
[ 85.810710][ T804] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 85.814099][ T804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.817600][ T804] Workqueue: usb_hub_wq hub_event
[ 85.819508][ T804] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 85.821648][ T804] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 85.828532][ T804] RSP: 0018:ffffc900042beb80 EFLAGS: 00010293
[ 85.830991][ T804] RAX: ffffffff876314f2 RBX: ffff888051578d00 RCX: ffff88801afb0000
[ 85.833993][ T804] RDX: 0000000000000000 RSI: ffff888051578d00 RDI: ffffffff9065b500
[ 85.837000][ T804] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 85.840103][ T804] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801222c458
[ 85.843186][ T804] R13: 1ffff1100244588b R14: ffff888051578d08 R15: 0000000000000cc0
[ 85.846329][ T804] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 85.849714][ T804] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.852228][ T804] CR2: 00007f8e76893f98 CR3: 0000000043997000 CR4: 0000000000352ef0
[ 85.857372][ T804] Call Trace:
[ 85.859022][ T804]
[ 85.860212][ T804] ? __kmalloc_cache_noprof+0x150/0x660
[ 85.862369][ T804] ? port100_send_cmd_async+0xbd/0xcc0
[ 85.864437][ T804] ? skb_put+0x112/0x210
[ 85.866221][ T804] port100_send_cmd_async+0x84f/0xcc0
[ 85.868359][ T804] port100_set_command_type+0x1c8/0x390
[ 85.870499][ T804] ? pcpu_alloc+0x10/0x310
[ 85.872221][ T804] ? __pfx_port100_set_command_type+0x10/0x10
[ 85.874559][ T804] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 85.876870][ T804] port100_probe+0x7b2/0xba0
[ 85.878715][ T804] ? __pfx_port100_probe+0x10/0x10
[ 85.880728][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.882802][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.885050][ T804] ? __pm_runtime_set_status+0x994/0xc80
[ 85.887380][ T804] usb_probe_interface+0x653/0xc60
[ 85.889394][ T804] ? __pfx_usb_probe_interface+0x10/0x10
[ 85.891622][ T804] really_probe+0x254/0xae0
[ 85.893449][ T804] __driver_probe_device+0x1e8/0x360
[ 85.895470][ T804] driver_probe_device+0x4f/0x240
[ 85.897451][ T804] __device_attach_driver+0x270/0x410
[ 85.899551][ T804] bus_for_each_drv+0x258/0x2f0
[ 85.901479][ T804] ? __pfx___device_attach_driver+0x10/0x10
[ 85.903725][ T804] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.905905][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.907978][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.910220][ T804] __device_attach+0x2c4/0x450
[ 85.912111][ T804] ? __pfx___device_attach+0x10/0x10
[ 85.914209][ T804] ? do_raw_spin_unlock+0x4d/0x210
[ 85.916174][ T804] ? _raw_spin_unlock+0x28/0x50
[ 85.918042][ T804] device_initial_probe+0xa1/0xd0
[ 85.920003][ T804] bus_probe_device+0x12a/0x220
[ 85.921924][ T804] device_add+0x7d7/0xb80
[ 85.923654][ T804] usb_set_configuration+0x1ad8/0x2180
[ 85.925678][ T804] usb_generic_driver_probe+0x8d/0x150
[ 85.927798][ T804] usb_probe_device+0x1c3/0x3b0
[ 85.929687][ T804] ? __pfx_usb_probe_device+0x10/0x10
[ 85.931788][ T804] really_probe+0x254/0xae0
[ 85.933740][ T804] __driver_probe_device+0x1e8/0x360
[ 85.936893][ T804] driver_probe_device+0x4f/0x240
[ 85.939147][ T804] __device_attach_driver+0x270/0x410
[ 85.941474][ T804] bus_for_each_drv+0x258/0x2f0
[ 85.943662][ T804] ? __pfx___device_attach_driver+0x10/0x10
[ 85.946230][ T804] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.948622][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.950951][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.953494][ T804] __device_attach+0x2c4/0x450
[ 85.955697][ T804] ? __pfx___device_attach+0x10/0x10
[ 85.958587][ T804] ? do_raw_spin_unlock+0x4d/0x210
[ 85.961157][ T804] ? _raw_spin_unlock+0x28/0x50
[ 85.963367][ T804] device_initial_probe+0xa1/0xd0
[ 85.965702][ T804] bus_probe_device+0x12a/0x220
[ 85.967995][ T804] device_add+0x7d7/0xb80
[ 85.969962][ T804] usb_new_device+0x99d/0x1620
[ 85.972145][ T804] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 85.974847][ T804] ? __pfx_usb_new_device+0x10/0x10
[ 85.977195][ T804] ? _raw_spin_unlock_irq+0x23/0x50
[ 85.979528][ T804] hub_event+0x28e8/0x4d30
[ 85.981562][ T804] ? __pfx_hub_event+0x10/0x10
[ 85.983729][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 85.986244][ T804] ? rcu_is_watching+0x15/0xb0
[ 85.988419][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 85.990919][ T804] process_scheduled_works+0xa8e/0x14e0
[ 85.993369][ T804] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.995799][ T804] ? assign_work+0x3cf/0x5d0
[ 85.997450][ T804] worker_thread+0xa47/0xfb0
[ 85.999142][ T804] kthread+0x388/0x470
[ 86.000601][ T804] ? __pfx_worker_thread+0x10/0x10
[ 86.002383][ T804] ? __pfx_kthread+0x10/0x10
[ 86.004070][ T804] ret_from_fork+0x514/0xb70
[ 86.005709][ T804] ? __pfx_ret_from_fork+0x10/0x10
[ 86.007508][ T804] ? __switch_to+0xc89/0x1420
[ 86.009173][ T804] ? __pfx_kthread+0x10/0x10
[ 86.010744][ T804] ret_from_fork_asm+0x1a/0x30
[ 86.012418][ T804]
[ 86.013489][ T804] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.015846][ T804] CPU: 0 UID: 0 PID: 804 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 86.018829][ T804] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.022015][ T804] Workqueue: usb_hub_wq hub_event
[ 86.023685][ T804] Call Trace:
[ 86.024785][ T804]
[ 86.025789][ T804] vpanic+0x56c/0xa60
[ 86.027132][ T804] ? __pfx__printk+0x10/0x10
[ 86.028659][ T804] ? __pfx_vpanic+0x10/0x10
[ 86.030169][ T804] ? is_bpf_text_address+0x292/0x2b0
[ 86.031912][ T804] ? is_bpf_text_address+0x26/0x2b0
[ 86.033609][ T804] panic+0xc5/0xd0
[ 86.034929][ T804] ? __pfx_panic+0x10/0x10
[ 86.036397][ T804] ? ret_from_fork_asm+0x1a/0x30
[ 86.038063][ T804] __warn+0x315/0x4c0
[ 86.039394][ T804] ? usb_submit_urb+0x79/0x18b0
[ 86.041051][ T804] ? usb_submit_urb+0x79/0x18b0
[ 86.042648][ T804] __report_bug+0x276/0x570
[ 86.044196][ T804] ? usb_submit_urb+0x79/0x18b0
[ 86.045858][ T804] ? __pfx___report_bug+0x10/0x10
[ 86.047612][ T804] report_bug_entry+0x19a/0x290
[ 86.049202][ T804] ? usb_submit_urb+0x7c/0x18b0
[ 86.050824][ T804] ? usb_submit_urb+0x81/0x18b0
[ 86.052387][ T804] handle_bug+0xce/0x200
[ 86.053787][ T804] exc_invalid_op+0x1a/0x50
[ 86.055427][ T804] asm_exc_invalid_op+0x1a/0x20
[ 86.057221][ T804] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.059536][ T804] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.067295][ T804] RSP: 0018:ffffc900042beb80 EFLAGS: 00010293
[ 86.069377][ T804] RAX: ffffffff876314f2 RBX: ffff888051578d00 RCX: ffff88801afb0000
[ 86.072080][ T804] RDX: 0000000000000000 RSI: ffff888051578d00 RDI: ffffffff9065b500
[ 86.074944][ T804] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.078232][ T804] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801222c458
[ 86.081803][ T804] R13: 1ffff1100244588b R14: ffff888051578d08 R15: 0000000000000cc0
[ 86.085505][ T804] ? usb_submit_urb+0x72/0x18b0
[ 86.087602][ T804] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.089883][ T804] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.092174][ T804] ? skb_put+0x112/0x210
[ 86.093951][ T804] port100_send_cmd_async+0x84f/0xcc0
[ 86.096230][ T804] port100_set_command_type+0x1c8/0x390
[ 86.098554][ T804] ? pcpu_alloc+0x10/0x310
[ 86.100462][ T804] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.103013][ T804] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.105362][ T804] port100_probe+0x7b2/0xba0
[ 86.107279][ T804] ? __pfx_port100_probe+0x10/0x10
[ 86.109417][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.111519][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.113960][ T804] ? __pm_runtime_set_status+0x994/0xc80
[ 86.116397][ T804] usb_probe_interface+0x653/0xc60
[ 86.118561][ T804] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.121199][ T804] really_probe+0x254/0xae0
[ 86.123414][ T804] __driver_probe_device+0x1e8/0x360
[ 86.125677][ T804] driver_probe_device+0x4f/0x240
[ 86.127934][ T804] __device_attach_driver+0x270/0x410
[ 86.130282][ T804] bus_for_each_drv+0x258/0x2f0
[ 86.132402][ T804] ? __pfx___device_attach_driver+0x10/0x10
[ 86.135232][ T804] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.137849][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.139982][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.142343][ T804] __device_attach+0x2c4/0x450
[ 86.144375][ T804] ? __pfx___device_attach+0x10/0x10
[ 86.146577][ T804] ? do_raw_spin_unlock+0x4d/0x210
[ 86.148754][ T804] ? _raw_spin_unlock+0x28/0x50
[ 86.150812][ T804] device_initial_probe+0xa1/0xd0
[ 86.152939][ T804] bus_probe_device+0x12a/0x220
[ 86.154939][ T804] device_add+0x7d7/0xb80
[ 86.156844][ T804] usb_set_configuration+0x1ad8/0x2180
[ 86.159194][ T804] usb_generic_driver_probe+0x8d/0x150
[ 86.161723][ T804] usb_probe_device+0x1c3/0x3b0
[ 86.164124][ T804] ? __pfx_usb_probe_device+0x10/0x10
[ 86.166364][ T804] really_probe+0x254/0xae0
[ 86.168332][ T804] __driver_probe_device+0x1e8/0x360
[ 86.170679][ T804] driver_probe_device+0x4f/0x240
[ 86.172835][ T804] __device_attach_driver+0x270/0x410
[ 86.175109][ T804] bus_for_each_drv+0x258/0x2f0
[ 86.176985][ T804] ? __pfx___device_attach_driver+0x10/0x10
[ 86.179239][ T804] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.181270][ T804] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.183356][ T804] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.185590][ T804] __device_attach+0x2c4/0x450
[ 86.187503][ T804] ? __pfx___device_attach+0x10/0x10
[ 86.189678][ T804] ? do_raw_spin_unlock+0x4d/0x210
[ 86.191670][ T804] ? _raw_spin_unlock+0x28/0x50
[ 86.193589][ T804] device_initial_probe+0xa1/0xd0
[ 86.195529][ T804] bus_probe_device+0x12a/0x220
[ 86.197376][ T804] device_add+0x7d7/0xb80
[ 86.199212][ T804] usb_new_device+0x99d/0x1620
[ 86.201196][ T804] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.203683][ T804] ? __pfx_usb_new_device+0x10/0x10
[ 86.205842][ T804] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.208053][ T804] hub_event+0x28e8/0x4d30
[ 86.209929][ T804] ? __pfx_hub_event+0x10/0x10
[ 86.211989][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 86.214289][ T804] ? rcu_is_watching+0x15/0xb0
[ 86.216274][ T804] ? process_scheduled_works+0xa20/0x14e0
[ 86.218657][ T804] process_scheduled_works+0xa8e/0x14e0
[ 86.220978][ T804] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.223444][ T804] ? assign_work+0x3cf/0x5d0
[ 86.225400][ T804] worker_thread+0xa47/0xfb0
[ 86.227368][ T804] kthread+0x388/0x470
[ 86.229099][ T804] ? __pfx_worker_thread+0x10/0x10
[ 86.231118][ T804] ? __pfx_kthread+0x10/0x10
[ 86.233048][ T804] ret_from_fork+0x514/0xb70
[ 86.234968][ T804] ? __pfx_ret_from_fork+0x10/0x10
[ 86.237066][ T804] ? __switch_to+0xc89/0x1420
[ 86.239092][ T804] ? __pfx_kthread+0x10/0x10
[ 86.240972][ T804] ret_from_fork_asm+0x1a/0x30
[ 86.242960][ T804]
[ 86.244598][ T804] Kernel Offset: disabled
[ 86.246272][ T804] Rebooting in 86400 seconds..