program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000500)=""/256)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000600)=""/256)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_ep_read(r0, 0x2, 0x100, &(0x7f0000000700)=""/256)
[ 86.413476][ T4650] Bluetooth: hci0: command tx timeout
[ 86.480861][ T1378] cfg80211: failed to load regulatory.db
[ 86.768341][ T1378] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 86.924500][ T1378] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 86.928343][ T1378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 86.931660][ T1378] usb 5-1: Product: syz
[ 86.933319][ T1378] usb 5-1: Manufacturer: syz
[ 86.935191][ T1378] usb 5-1: SerialNumber: syz
[ 88.006327][ T1378] ------------[ cut here ]------------
[ 88.009032][ T1378] URB ffff888033303e00 submitted while active
[ 88.011687][ T1378] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:3/1378
[ 88.016080][ T1378] Modules linked in:
[ 88.018514][ T1378] CPU: 0 UID: 0 PID: 1378 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 88.022881][ T1378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.027150][ T1378] Workqueue: usb_hub_wq hub_event
[ 88.029196][ T1378] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 88.031314][ T1378] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 88.038608][ T1378] RSP: 0018:ffffc9000250eb80 EFLAGS: 00010293
[ 88.041076][ T1378] RAX: ffffffff876314f2 RBX: ffff888033303e00 RCX: ffff88801d2e0000
[ 88.044136][ T1378] RDX: 0000000000000000 RSI: ffff888033303e00 RDI: ffffffff9065b500
[ 88.046963][ T1378] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 88.049875][ T1378] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888040756858
[ 88.052679][ T1378] R13: 1ffff110080ead0b R14: ffff888033303e08 R15: 0000000000000cc0
[ 88.055470][ T1378] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 88.058949][ T1378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.061443][ T1378] CR2: 00007f795a466f68 CR3: 000000001fd37000 CR4: 0000000000352ef0
[ 88.064428][ T1378] Call Trace:
[ 88.065762][ T1378]
[ 88.066965][ T1378] ? __kmalloc_cache_noprof+0x150/0x660
[ 88.069304][ T1378] ? port100_send_cmd_async+0xbd/0xcc0
[ 88.071604][ T1378] ? skb_put+0x112/0x210
[ 88.073427][ T1378] port100_send_cmd_async+0x84f/0xcc0
[ 88.075730][ T1378] port100_get_firmware_version+0x1a1/0x360
[ 88.078426][ T1378] ? pcpu_alloc+0x10/0x310
[ 88.080378][ T1378] ? __pfx_port100_get_firmware_version+0x10/0x10
[ 88.083233][ T1378] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.085823][ T1378] port100_probe+0x7cb/0xba0
[ 88.087858][ T1378] ? __pfx_port100_probe+0x10/0x10
[ 88.090152][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.092294][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.094835][ T1378] ? __pm_runtime_set_status+0x994/0xc80
[ 88.097222][ T1378] usb_probe_interface+0x653/0xc60
[ 88.099111][ T1378] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.101075][ T1378] really_probe+0x254/0xae0
[ 88.102816][ T1378] __driver_probe_device+0x1e8/0x360
[ 88.104755][ T1378] driver_probe_device+0x4f/0x240
[ 88.106642][ T1378] __device_attach_driver+0x270/0x410
[ 88.108631][ T1378] bus_for_each_drv+0x258/0x2f0
[ 88.110514][ T1378] ? __pfx___device_attach_driver+0x10/0x10
[ 88.112743][ T1378] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.115071][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.117356][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.120288][ T1378] __device_attach+0x2c4/0x450
[ 88.122055][ T1378] ? __pfx___device_attach+0x10/0x10
[ 88.123944][ T1378] ? do_raw_spin_unlock+0x4d/0x210
[ 88.125755][ T1378] ? _raw_spin_unlock+0x28/0x50
[ 88.127452][ T1378] device_initial_probe+0xa1/0xd0
[ 88.129611][ T1378] bus_probe_device+0x12a/0x220
[ 88.131383][ T1378] device_add+0x7d7/0xb80
[ 88.133153][ T1378] usb_set_configuration+0x1ad8/0x2180
[ 88.135502][ T1378] usb_generic_driver_probe+0x8d/0x150
[ 88.137606][ T1378] usb_probe_device+0x1c3/0x3b0
[ 88.139781][ T1378] ? __pfx_usb_probe_device+0x10/0x10
[ 88.142052][ T1378] really_probe+0x254/0xae0
[ 88.144018][ T1378] __driver_probe_device+0x1e8/0x360
[ 88.146326][ T1378] driver_probe_device+0x4f/0x240
[ 88.148521][ T1378] __device_attach_driver+0x270/0x410
[ 88.150961][ T1378] bus_for_each_drv+0x258/0x2f0
[ 88.153196][ T1378] ? __pfx___device_attach_driver+0x10/0x10
[ 88.155812][ T1378] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.158182][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.160427][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.162960][ T1378] __device_attach+0x2c4/0x450
[ 88.165052][ T1378] ? __pfx___device_attach+0x10/0x10
[ 88.167402][ T1378] ? do_raw_spin_unlock+0x4d/0x210
[ 88.169728][ T1378] ? _raw_spin_unlock+0x28/0x50
[ 88.171923][ T1378] device_initial_probe+0xa1/0xd0
[ 88.174233][ T1378] bus_probe_device+0x12a/0x220
[ 88.176398][ T1378] device_add+0x7d7/0xb80
[ 88.178340][ T1378] usb_new_device+0x99d/0x1620
[ 88.180425][ T1378] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.182987][ T1378] ? __pfx_usb_new_device+0x10/0x10
[ 88.185243][ T1378] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.187153][ T1378] hub_event+0x28e8/0x4d30
[ 88.188911][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.191244][ T1378] ? __pfx_hub_event+0x10/0x10
[ 88.193191][ T1378] ? process_scheduled_works+0xa20/0x14e0
[ 88.195408][ T1378] ? rcu_is_watching+0x15/0xb0
[ 88.197311][ T1378] ? process_scheduled_works+0xa20/0x14e0
[ 88.199578][ T1378] process_scheduled_works+0xa8e/0x14e0
[ 88.201967][ T1378] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.204608][ T1378] ? assign_work+0x3cf/0x5d0
[ 88.206658][ T1378] worker_thread+0xa47/0xfb0
[ 88.208727][ T1378] ? __kthread_parkme+0x71/0x1f0
[ 88.210882][ T1378] kthread+0x388/0x470
[ 88.212688][ T1378] ? __pfx_worker_thread+0x10/0x10
[ 88.214684][ T1378] ? __pfx_kthread+0x10/0x10
[ 88.216711][ T1378] ret_from_fork+0x514/0xb70
[ 88.219602][ T1378] ? __pfx_ret_from_fork+0x10/0x10
[ 88.221780][ T1378] ? __switch_to+0xc89/0x1420
[ 88.223811][ T1378] ? __pfx_kthread+0x10/0x10
[ 88.225655][ T1378] ret_from_fork_asm+0x1a/0x30
[ 88.227800][ T1378]
[ 88.229466][ T1378] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.232286][ T1378] CPU: 0 UID: 0 PID: 1378 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full)
[ 88.235843][ T1378] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.239872][ T1378] Workqueue: usb_hub_wq hub_event
[ 88.242011][ T1378] Call Trace:
[ 88.243477][ T1378]
[ 88.244743][ T1378] vpanic+0x56c/0xa60
[ 88.246554][ T1378] ? __pfx__printk+0x10/0x10
[ 88.248488][ T1378] ? __pfx_vpanic+0x10/0x10
[ 88.250377][ T1378] ? is_bpf_text_address+0x292/0x2b0
[ 88.252576][ T1378] ? is_bpf_text_address+0x26/0x2b0
[ 88.254741][ T1378] panic+0xc5/0xd0
[ 88.256319][ T1378] ? __pfx_panic+0x10/0x10
[ 88.258114][ T1378] ? ret_from_fork_asm+0x1a/0x30
[ 88.260079][ T1378] __warn+0x315/0x4c0
[ 88.261757][ T1378] ? usb_submit_urb+0x79/0x18b0
[ 88.263802][ T1378] ? usb_submit_urb+0x79/0x18b0
[ 88.265794][ T1378] __report_bug+0x276/0x570
[ 88.267595][ T1378] ? kasan_save_track+0x4f/0x80
[ 88.269406][ T1378] ? kasan_save_track+0x3e/0x80
[ 88.271450][ T1378] ? usb_submit_urb+0x79/0x18b0
[ 88.273474][ T1378] ? __pfx___report_bug+0x10/0x10
[ 88.275506][ T1378] ? __pfx___mutex_trylock_common+0x10/0x10
[ 88.277707][ T1378] ? rcu_is_watching+0x15/0xb0
[ 88.279665][ T1378] ? trace_contention_end+0x3d/0x140
[ 88.281796][ T1378] report_bug_entry+0x19a/0x290
[ 88.283655][ T1378] ? usb_submit_urb+0x7c/0x18b0
[ 88.285545][ T1378] ? usb_submit_urb+0x81/0x18b0
[ 88.287521][ T1378] handle_bug+0xce/0x200
[ 88.289173][ T1378] exc_invalid_op+0x1a/0x50
[ 88.290994][ T1378] asm_exc_invalid_op+0x1a/0x20
[ 88.292897][ T1378] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 88.295265][ T1378] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 88.303315][ T1378] RSP: 0018:ffffc9000250eb80 EFLAGS: 00010293
[ 88.306591][ T1378] RAX: ffffffff876314f2 RBX: ffff888033303e00 RCX: ffff88801d2e0000
[ 88.310377][ T1378] RDX: 0000000000000000 RSI: ffff888033303e00 RDI: ffffffff9065b500
[ 88.313857][ T1378] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 88.317350][ T1378] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888040756858
[ 88.321609][ T1378] R13: 1ffff110080ead0b R14: ffff888033303e08 R15: 0000000000000cc0
[ 88.325834][ T1378] ? usb_submit_urb+0x72/0x18b0
[ 88.328089][ T1378] ? __kmalloc_cache_noprof+0x150/0x660
[ 88.330358][ T1378] ? port100_send_cmd_async+0xbd/0xcc0
[ 88.332471][ T1378] ? skb_put+0x112/0x210
[ 88.334199][ T1378] port100_send_cmd_async+0x84f/0xcc0
[ 88.336283][ T1378] port100_get_firmware_version+0x1a1/0x360
[ 88.338742][ T1378] ? pcpu_alloc+0x10/0x310
[ 88.340537][ T1378] ? __pfx_port100_get_firmware_version+0x10/0x10
[ 88.343086][ T1378] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.345389][ T1378] port100_probe+0x7cb/0xba0
[ 88.347464][ T1378] ? __pfx_port100_probe+0x10/0x10
[ 88.349715][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.351904][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.354389][ T1378] ? __pm_runtime_set_status+0x994/0xc80
[ 88.356783][ T1378] usb_probe_interface+0x653/0xc60
[ 88.358959][ T1378] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.361330][ T1378] really_probe+0x254/0xae0
[ 88.363334][ T1378] __driver_probe_device+0x1e8/0x360
[ 88.365549][ T1378] driver_probe_device+0x4f/0x240
[ 88.367710][ T1378] __device_attach_driver+0x270/0x410
[ 88.369927][ T1378] bus_for_each_drv+0x258/0x2f0
[ 88.371958][ T1378] ? __pfx___device_attach_driver+0x10/0x10
[ 88.374457][ T1378] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.376706][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.378946][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.381399][ T1378] __device_attach+0x2c4/0x450
[ 88.383436][ T1378] ? __pfx___device_attach+0x10/0x10
[ 88.385655][ T1378] ? do_raw_spin_unlock+0x4d/0x210
[ 88.387870][ T1378] ? _raw_spin_unlock+0x28/0x50
[ 88.389947][ T1378] device_initial_probe+0xa1/0xd0
[ 88.392032][ T1378] bus_probe_device+0x12a/0x220
[ 88.393861][ T1378] device_add+0x7d7/0xb80
[ 88.395485][ T1378] usb_set_configuration+0x1ad8/0x2180
[ 88.397534][ T1378] usb_generic_driver_probe+0x8d/0x150
[ 88.399843][ T1378] usb_probe_device+0x1c3/0x3b0
[ 88.401928][ T1378] ? __pfx_usb_probe_device+0x10/0x10
[ 88.404218][ T1378] really_probe+0x254/0xae0
[ 88.406145][ T1378] __driver_probe_device+0x1e8/0x360
[ 88.408350][ T1378] driver_probe_device+0x4f/0x240
[ 88.410399][ T1378] __device_attach_driver+0x270/0x410
[ 88.412633][ T1378] bus_for_each_drv+0x258/0x2f0
[ 88.414766][ T1378] ? __pfx___device_attach_driver+0x10/0x10
[ 88.417123][ T1378] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.419305][ T1378] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.421451][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.423879][ T1378] __device_attach+0x2c4/0x450
[ 88.425640][ T1378] ? __pfx___device_attach+0x10/0x10
[ 88.427540][ T1378] ? do_raw_spin_unlock+0x4d/0x210
[ 88.429440][ T1378] ? _raw_spin_unlock+0x28/0x50
[ 88.431468][ T1378] device_initial_probe+0xa1/0xd0
[ 88.433627][ T1378] bus_probe_device+0x12a/0x220
[ 88.435763][ T1378] device_add+0x7d7/0xb80
[ 88.437613][ T1378] usb_new_device+0x99d/0x1620
[ 88.439662][ T1378] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.442183][ T1378] ? __pfx_usb_new_device+0x10/0x10
[ 88.444455][ T1378] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.446678][ T1378] hub_event+0x28e8/0x4d30
[ 88.448592][ T1378] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.451102][ T1378] ? __pfx_hub_event+0x10/0x10
[ 88.453175][ T1378] ? process_scheduled_works+0xa20/0x14e0
[ 88.455610][ T1378] ? rcu_is_watching+0x15/0xb0
[ 88.457437][ T1378] ? process_scheduled_works+0xa20/0x14e0
[ 88.459512][ T1378] process_scheduled_works+0xa8e/0x14e0
[ 88.461422][ T1378] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.463542][ T1378] ? assign_work+0x3cf/0x5d0
[ 88.465258][ T1378] worker_thread+0xa47/0xfb0
[ 88.466997][ T1378] ? __kthread_parkme+0x71/0x1f0
[ 88.468848][ T1378] kthread+0x388/0x470
[ 88.470400][ T1378] ? __pfx_worker_thread+0x10/0x10
[ 88.472512][ T1378] ? __pfx_kthread+0x10/0x10
[ 88.474266][ T1378] ret_from_fork+0x514/0xb70
[ 88.476192][ T1378] ? __pfx_ret_from_fork+0x10/0x10
[ 88.478365][ T1378] ? __switch_to+0xc89/0x1420
[ 88.480324][ T1378] ? __pfx_kthread+0x10/0x10
[ 88.481973][ T1378] ret_from_fork_asm+0x1a/0x30
[ 88.483866][ T1378]
[ 88.485599][ T1378] Kernel Offset: disabled
[ 88.487499][ T1378] Rebooting in 86400 seconds..