program:
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000300)={0x2}, 0x0)
[ 76.453150][ T5284] Bluetooth: hci0: command tx timeout
[ 76.457257][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.460092][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.772184][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 76.927428][ T9] usb 5-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice= 0.00
[ 76.931260][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 76.935008][ T9] usb 5-1: Product: syz
[ 76.937227][ T9] usb 5-1: Manufacturer: syz
[ 76.939215][ T9] usb 5-1: SerialNumber: syz
[ 76.970416][ T9] smsusb:smsusb_probe: board id=3, interface number 0
[ 76.993347][ T9] smsusb:siano_media_device_register: media controller created
[ 78.013139][ T9] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110
[ 78.017854][ T9] smsmdtv:smscore_set_device_mode: mode detect failed -110
[ 78.021016][ T9] smsmdtv:smscore_start_device: set device mode failed , rc -110
[ 78.025146][ T9] smsusb:smsusb_init_device: smscore_start_device(...) failed
[ 78.028520][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.035171][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.038459][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.041692][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.045630][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.049656][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.052915][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.056148][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.059334][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.063361][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes
[ 78.068461][ T9] ------------[ cut here ]------------
[ 78.071170][ T9] !PageLargeKmalloc(page)
[ 78.071181][ T9] WARNING: mm/slub.c:6602 at free_large_kmalloc+0x97/0x110, CPU#0: kworker/0:0/9
[ 78.076875][ T9] Modules linked in:
[ 78.078641][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 78.082426][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.086630][ T9] Workqueue: usb_hub_wq hub_event
[ 78.089262][ T9] RIP: 0010:free_large_kmalloc+0x97/0x110
[ 78.093020][ T9] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ea be fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 9f df 24 8e 5b 41 5e 5d e9 83 42 fd fe
[ 78.100706][ T9] RSP: 0018:ffffc9000022ebc8 EFLAGS: 00010206
[ 78.103699][ T9] RAX: 00000000ff000000 RBX: ffffea00014a9880 RCX: 0000000000000001
[ 78.106929][ T9] RDX: 0000000000000000 RSI: ffff888052a62000 RDI: ffffea00014a9880
[ 78.110161][ T9] RBP: 0000000000000000 R08: ffff888043018003 R09: 1ffff11008603000
[ 78.113632][ T9] R10: dffffc0000000000 R11: ffffed1008603001 R12: 1ffff1100842aa82
[ 78.116868][ T9] R13: ffff888012928d00 R14: ffff888043018060 R15: dffffc0000000000
[ 78.120188][ T9] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 78.123878][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 78.126603][ T9] CR2: 00007f39ca8157f0 CR3: 00000000120bb000 CR4: 0000000000352ef0
[ 78.129968][ T9] Call Trace:
[ 78.131369][ T9]
[ 78.132727][ T9] usb_free_urb+0xd0/0x120
[ 78.134647][ T9] smsusb_term_device+0x1d0/0x3d0
[ 78.136890][ T9] smsusb_probe+0x1aba/0x2280
[ 78.138882][ T9] ? rcu_is_watching+0x15/0xb0
[ 78.140884][ T9] ? __pfx_smsusb_probe+0x10/0x10
[ 78.143105][ T9] ? do_raw_spin_lock+0x12b/0x2f0
[ 78.145147][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 78.147453][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 78.149804][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.152314][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 78.154761][ T9] usb_probe_interface+0x653/0xc60
[ 78.157011][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 78.159462][ T9] really_probe+0x254/0xae0
[ 78.161349][ T9] __driver_probe_device+0x1e8/0x360
[ 78.163655][ T9] driver_probe_device+0x4f/0x240
[ 78.165763][ T9] __device_attach_driver+0x270/0x410
[ 78.168195][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.170409][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.173459][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.175810][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.178053][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.180467][ T9] __device_attach+0x2c4/0x450
[ 78.182593][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.184764][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.187047][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.189102][ T9] device_initial_probe+0xa1/0xd0
[ 78.191598][ T9] bus_probe_device+0x12a/0x220
[ 78.194050][ T9] device_add+0x7d7/0xb80
[ 78.195897][ T9] usb_set_configuration+0x1ad8/0x2180
[ 78.198240][ T9] usb_generic_driver_probe+0x8d/0x150
[ 78.200520][ T9] usb_probe_device+0x1c3/0x3b0
[ 78.202642][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 78.204963][ T9] really_probe+0x254/0xae0
[ 78.206941][ T9] __driver_probe_device+0x1e8/0x360
[ 78.209139][ T9] driver_probe_device+0x4f/0x240
[ 78.211270][ T9] __device_attach_driver+0x270/0x410
[ 78.213622][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.215740][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.218346][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.220694][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.222999][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.225432][ T9] __device_attach+0x2c4/0x450
[ 78.227484][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.229795][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.232251][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.234364][ T9] device_initial_probe+0xa1/0xd0
[ 78.236556][ T9] bus_probe_device+0x12a/0x220
[ 78.238664][ T9] device_add+0x7d7/0xb80
[ 78.240446][ T9] usb_new_device+0x99d/0x1620
[ 78.242493][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 78.244963][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 78.247112][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.249257][ T9] hub_event+0x28e8/0x4d30
[ 78.251132][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.253862][ T9] ? __pfx_hub_event+0x10/0x10
[ 78.255909][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.258357][ T9] ? rcu_is_watching+0x15/0xb0
[ 78.260334][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.262776][ T9] process_scheduled_works+0xa8e/0x14e0
[ 78.265095][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.267582][ T9] ? assign_work+0x3cf/0x5d0
[ 78.269523][ T9] worker_thread+0xa47/0xfb0
[ 78.271603][ T9] kthread+0x388/0x470
[ 78.273366][ T9] ? __pfx_worker_thread+0x10/0x10
[ 78.275483][ T9] ? __pfx_kthread+0x10/0x10
[ 78.277426][ T9] ret_from_fork+0x514/0xb70
[ 78.279383][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 78.281511][ T9] ? __switch_to+0xc89/0x1420
[ 78.283554][ T9] ? __pfx_kthread+0x10/0x10
[ 78.285610][ T9] ret_from_fork_asm+0x1a/0x30
[ 78.288091][ T9]
[ 78.289740][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 78.293518][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 78.298185][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 78.302791][ T9] Workqueue: usb_hub_wq hub_event
[ 78.304866][ T9] Call Trace:
[ 78.306343][ T9]
[ 78.307885][ T9] vpanic+0x56c/0xa60
[ 78.309958][ T9] ? __pfx__printk+0x10/0x10
[ 78.312135][ T9] ? __pfx_vpanic+0x10/0x10
[ 78.314110][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 78.316740][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 78.319130][ T9] panic+0xc5/0xd0
[ 78.320733][ T9] ? __pfx_panic+0x10/0x10
[ 78.322626][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 78.324732][ T9] __warn+0x315/0x4c0
[ 78.326453][ T9] ? free_large_kmalloc+0x97/0x110
[ 78.328712][ T9] ? free_large_kmalloc+0x97/0x110
[ 78.331210][ T9] __report_bug+0x276/0x570
[ 78.333430][ T9] ? bus_for_each_drv+0x258/0x2f0
[ 78.335683][ T9] ? __device_attach+0x2c4/0x450
[ 78.337751][ T9] ? device_initial_probe+0xa1/0xd0
[ 78.339957][ T9] ? free_large_kmalloc+0x97/0x110
[ 78.342088][ T9] ? __pfx___report_bug+0x10/0x10
[ 78.343873][ T9] ? bus_probe_device+0x12a/0x220
[ 78.345897][ T9] ? device_add+0x7d7/0xb80
[ 78.347820][ T9] ? usb_new_device+0x99d/0x1620
[ 78.349892][ T9] ? hub_event+0x28e8/0x4d30
[ 78.351806][ T9] ? process_scheduled_works+0xa8e/0x14e0
[ 78.354126][ T9] ? worker_thread+0xa47/0xfb0
[ 78.356143][ T9] ? kthread+0x388/0x470
[ 78.357933][ T9] ? smscore_unregister_device+0x651/0x780
[ 78.360729][ T9] ? free_large_kmalloc+0x97/0x110
[ 78.363363][ T9] report_bug+0x16a/0x220
[ 78.365660][ T9] ? free_large_kmalloc+0x97/0x110
[ 78.367844][ T9] ? free_large_kmalloc+0x99/0x110
[ 78.370038][ T9] handle_bug+0x9c/0x200
[ 78.371782][ T9] exc_invalid_op+0x1a/0x50
[ 78.373632][ T9] asm_exc_invalid_op+0x1a/0x20
[ 78.375675][ T9] RIP: 0010:free_large_kmalloc+0x97/0x110
[ 78.378067][ T9] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 ea be fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 9f df 24 8e 5b 41 5e 5d e9 83 42 fd fe
[ 78.386459][ T9] RSP: 0018:ffffc9000022ebc8 EFLAGS: 00010206
[ 78.389144][ T9] RAX: 00000000ff000000 RBX: ffffea00014a9880 RCX: 0000000000000001
[ 78.392427][ T9] RDX: 0000000000000000 RSI: ffff888052a62000 RDI: ffffea00014a9880
[ 78.395815][ T9] RBP: 0000000000000000 R08: ffff888043018003 R09: 1ffff11008603000
[ 78.399104][ T9] R10: dffffc0000000000 R11: ffffed1008603001 R12: 1ffff1100842aa82
[ 78.402386][ T9] R13: ffff888012928d00 R14: ffff888043018060 R15: dffffc0000000000
[ 78.405350][ T9] usb_free_urb+0xd0/0x120
[ 78.407043][ T9] smsusb_term_device+0x1d0/0x3d0
[ 78.409135][ T9] smsusb_probe+0x1aba/0x2280
[ 78.411149][ T9] ? rcu_is_watching+0x15/0xb0
[ 78.413131][ T9] ? __pfx_smsusb_probe+0x10/0x10
[ 78.415181][ T9] ? do_raw_spin_lock+0x12b/0x2f0
[ 78.417327][ T9] ? __pfx_smsusb_sendrequest+0x10/0x10
[ 78.419460][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 78.421484][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.423660][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 78.425768][ T9] usb_probe_interface+0x653/0xc60
[ 78.427464][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 78.429331][ T9] really_probe+0x254/0xae0
[ 78.430849][ T9] __driver_probe_device+0x1e8/0x360
[ 78.432592][ T9] driver_probe_device+0x4f/0x240
[ 78.434404][ T9] __device_attach_driver+0x270/0x410
[ 78.436292][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.438127][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.440308][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.442331][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.444292][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.446565][ T9] __device_attach+0x2c4/0x450
[ 78.448389][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.450405][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.452327][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.454083][ T9] device_initial_probe+0xa1/0xd0
[ 78.455912][ T9] bus_probe_device+0x12a/0x220
[ 78.457778][ T9] device_add+0x7d7/0xb80
[ 78.459470][ T9] usb_set_configuration+0x1ad8/0x2180
[ 78.461475][ T9] usb_generic_driver_probe+0x8d/0x150
[ 78.463480][ T9] usb_probe_device+0x1c3/0x3b0
[ 78.465335][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 78.467324][ T9] really_probe+0x254/0xae0
[ 78.468993][ T9] __driver_probe_device+0x1e8/0x360
[ 78.470960][ T9] driver_probe_device+0x4f/0x240
[ 78.472724][ T9] __device_attach_driver+0x270/0x410
[ 78.474493][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.476116][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.478201][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.480120][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.482079][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.484254][ T9] __device_attach+0x2c4/0x450
[ 78.486143][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.488128][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.489772][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.491421][ T9] device_initial_probe+0xa1/0xd0
[ 78.493127][ T9] bus_probe_device+0x12a/0x220
[ 78.494736][ T9] device_add+0x7d7/0xb80
[ 78.496204][ T9] usb_new_device+0x99d/0x1620
[ 78.497829][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 78.499890][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 78.501634][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.503438][ T9] hub_event+0x28e8/0x4d30
[ 78.505106][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.507086][ T9] ? __pfx_hub_event+0x10/0x10
[ 78.508868][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.510977][ T9] ? rcu_is_watching+0x15/0xb0
[ 78.512759][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.515004][ T9] process_scheduled_works+0xa8e/0x14e0
[ 78.517140][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.519431][ T9] ? assign_work+0x3cf/0x5d0
[ 78.521239][ T9] worker_thread+0xa47/0xfb0
[ 78.523061][ T9] kthread+0x388/0x470
[ 78.524632][ T9] ? __pfx_worker_thread+0x10/0x10
[ 78.526647][ T9] ? __pfx_kthread+0x10/0x10
[ 78.528429][ T9] ret_from_fork+0x514/0xb70
[ 78.530204][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 78.532134][ T9] ? __switch_to+0xc89/0x1420
[ 78.533902][ T9] ? __pfx_kthread+0x10/0x10
[ 78.535736][ T9] ret_from_fork_asm+0x1a/0x30
[ 78.537604][ T9]
[ 78.539198][ T9] Kernel Offset: disabled
[ 78.540810][ T9] Rebooting in 86400 seconds..