program:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_disconnect(r0)
[ 84.982447][ T4649] Bluetooth: hci0: command tx timeout
[ 85.269133][ T5306] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 85.423886][ T5306] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 85.427489][ T5306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.430999][ T5306] usb 5-1: Product: syz
[ 85.432688][ T5306] usb 5-1: Manufacturer: syz
[ 85.434514][ T5306] usb 5-1: SerialNumber: syz
[ 85.857978][ T5306] ------------[ cut here ]------------
[ 85.859930][ T5306] URB ffff8880447e6d00 submitted while active
[ 85.861937][ T5306] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:5/5306
[ 85.865213][ T5306] Modules linked in:
[ 85.866611][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 85.869650][ T5306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.873039][ T5306] Workqueue: usb_hub_wq hub_event
[ 85.874805][ T5306] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 85.876777][ T5306] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 85.883104][ T5306] RSP: 0018:ffffc9000e116b80 EFLAGS: 00010293
[ 85.885187][ T5306] RAX: ffffffff876314f2 RBX: ffff8880447e6d00 RCX: ffff888012a78000
[ 85.887831][ T5306] RDX: 0000000000000000 RSI: ffff8880447e6d00 RDI: ffffffff9065b500
[ 85.890552][ T5306] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 85.893228][ T5306] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801f646058
[ 85.895865][ T5306] R13: 1ffff11003ec8c0b R14: ffff8880447e6d08 R15: 0000000000000cc0
[ 85.898621][ T5306] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 85.901826][ T5306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.904025][ T5306] CR2: 00007fe106e157f0 CR3: 0000000044631000 CR4: 0000000000352ef0
[ 85.906699][ T5306] Call Trace:
[ 85.907838][ T5306]
[ 85.908888][ T5306] ? __kmalloc_cache_noprof+0x150/0x660
[ 85.910751][ T5306] ? port100_send_cmd_async+0xbd/0xcc0
[ 85.912612][ T5306] ? skb_put+0x112/0x210
[ 85.914166][ T5306] port100_send_cmd_async+0x84f/0xcc0
[ 85.915984][ T5306] port100_set_command_type+0x1c8/0x390
[ 85.917902][ T5306] ? pcpu_alloc+0x10/0x310
[ 85.919491][ T5306] ? __pfx_port100_set_command_type+0x10/0x10
[ 85.921597][ T5306] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 85.923630][ T5306] port100_probe+0x7b2/0xba0
[ 85.925292][ T5306] ? __pfx_port100_probe+0x10/0x10
[ 85.927050][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.928919][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.930916][ T5306] ? __pm_runtime_set_status+0x994/0xc80
[ 85.932853][ T5306] usb_probe_interface+0x653/0xc60
[ 85.934646][ T5306] ? __pfx_usb_probe_interface+0x10/0x10
[ 85.936570][ T5306] really_probe+0x254/0xae0
[ 85.938119][ T5306] __driver_probe_device+0x1e8/0x360
[ 85.939941][ T5306] driver_probe_device+0x4f/0x240
[ 85.941750][ T5306] __device_attach_driver+0x270/0x410
[ 85.943628][ T5306] bus_for_each_drv+0x258/0x2f0
[ 85.945297][ T5306] ? __pfx___device_attach_driver+0x10/0x10
[ 85.947306][ T5306] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.949216][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.951021][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.953078][ T5306] __device_attach+0x2c4/0x450
[ 85.954694][ T5306] ? __pfx___device_attach+0x10/0x10
[ 85.956552][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 85.958476][ T5306] ? _raw_spin_unlock+0x28/0x50
[ 85.960555][ T5306] device_initial_probe+0xa1/0xd0
[ 85.962542][ T5306] bus_probe_device+0x12a/0x220
[ 85.964292][ T5306] device_add+0x7d7/0xb80
[ 85.965865][ T5306] usb_set_configuration+0x1ad8/0x2180
[ 85.967865][ T5306] usb_generic_driver_probe+0x8d/0x150
[ 85.969849][ T5306] usb_probe_device+0x1c3/0x3b0
[ 85.971652][ T5306] ? __pfx_usb_probe_device+0x10/0x10
[ 85.973638][ T5306] really_probe+0x254/0xae0
[ 85.975379][ T5306] __driver_probe_device+0x1e8/0x360
[ 85.977336][ T5306] driver_probe_device+0x4f/0x240
[ 85.979649][ T5306] __device_attach_driver+0x270/0x410
[ 85.981742][ T5306] bus_for_each_drv+0x258/0x2f0
[ 85.983519][ T5306] ? __pfx___device_attach_driver+0x10/0x10
[ 85.985623][ T5306] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.987515][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.989444][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.991575][ T5306] __device_attach+0x2c4/0x450
[ 85.993296][ T5306] ? __pfx___device_attach+0x10/0x10
[ 85.995274][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 85.997165][ T5306] ? _raw_spin_unlock+0x28/0x50
[ 85.999042][ T5306] device_initial_probe+0xa1/0xd0
[ 86.000938][ T5306] bus_probe_device+0x12a/0x220
[ 86.002675][ T5306] device_add+0x7d7/0xb80
[ 86.004251][ T5306] usb_new_device+0x99d/0x1620
[ 86.006037][ T5306] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.008326][ T5306] ? __pfx_usb_new_device+0x10/0x10
[ 86.010309][ T5306] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.012212][ T5306] hub_event+0x28e8/0x4d30
[ 86.013907][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 86.015757][ T5306] ? __pfx_hub_event+0x10/0x10
[ 86.017580][ T5306] ? process_scheduled_works+0xa20/0x14e0
[ 86.019724][ T5306] ? rcu_is_watching+0x15/0xb0
[ 86.021529][ T5306] ? process_scheduled_works+0xa20/0x14e0
[ 86.023651][ T5306] process_scheduled_works+0xa8e/0x14e0
[ 86.025654][ T5306] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.027857][ T5306] ? assign_work+0x3cf/0x5d0
[ 86.029692][ T5306] worker_thread+0xa47/0xfb0
[ 86.031397][ T5306] ? __kthread_parkme+0x71/0x1f0
[ 86.033211][ T5306] kthread+0x388/0x470
[ 86.034745][ T5306] ? __pfx_worker_thread+0x10/0x10
[ 86.036636][ T5306] ? __pfx_kthread+0x10/0x10
[ 86.038338][ T5306] ret_from_fork+0x514/0xb70
[ 86.040054][ T5306] ? __pfx_ret_from_fork+0x10/0x10
[ 86.041980][ T5306] ? __switch_to+0xc89/0x1420
[ 86.043726][ T5306] ? __pfx_kthread+0x10/0x10
[ 86.045398][ T5306] ret_from_fork_asm+0x1a/0x30
[ 86.047205][ T5306]
[ 86.048407][ T5306] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.051077][ T5306] CPU: 0 UID: 0 PID: 5306 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 86.054322][ T5306] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.057744][ T5306] Workqueue: usb_hub_wq hub_event
[ 86.059518][ T5306] Call Trace:
[ 86.060713][ T5306]
[ 86.061797][ T5306] vpanic+0x56c/0xa60
[ 86.063293][ T5306] ? __pfx__printk+0x10/0x10
[ 86.064970][ T5306] ? __pfx_vpanic+0x10/0x10
[ 86.066583][ T5306] ? is_bpf_text_address+0x292/0x2b0
[ 86.068478][ T5306] ? is_bpf_text_address+0x26/0x2b0
[ 86.070343][ T5306] panic+0xc5/0xd0
[ 86.071686][ T5306] ? __pfx_panic+0x10/0x10
[ 86.073292][ T5306] ? ret_from_fork_asm+0x1a/0x30
[ 86.075026][ T5306] __warn+0x315/0x4c0
[ 86.076468][ T5306] ? usb_submit_urb+0x79/0x18b0
[ 86.078241][ T5306] ? usb_submit_urb+0x79/0x18b0
[ 86.080004][ T5306] __report_bug+0x276/0x570
[ 86.081792][ T5306] ? kasan_save_track+0x4f/0x80
[ 86.083638][ T5306] ? kasan_save_track+0x3e/0x80
[ 86.085487][ T5306] ? usb_submit_urb+0x79/0x18b0
[ 86.087328][ T5306] ? __pfx___report_bug+0x10/0x10
[ 86.089297][ T5306] ? usb_submit_urb+0x81/0x18b0
[ 86.091176][ T5306] report_bug_entry+0x19a/0x290
[ 86.093104][ T5306] ? usb_submit_urb+0x7c/0x18b0
[ 86.094912][ T5306] ? usb_submit_urb+0x81/0x18b0
[ 86.096616][ T5306] handle_bug+0xce/0x200
[ 86.098234][ T5306] exc_invalid_op+0x1a/0x50
[ 86.099786][ T5306] asm_exc_invalid_op+0x1a/0x20
[ 86.101569][ T5306] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.103590][ T5306] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.110511][ T5306] RSP: 0018:ffffc9000e116b80 EFLAGS: 00010293
[ 86.112774][ T5306] RAX: ffffffff876314f2 RBX: ffff8880447e6d00 RCX: ffff888012a78000
[ 86.115713][ T5306] RDX: 0000000000000000 RSI: ffff8880447e6d00 RDI: ffffffff9065b500
[ 86.118622][ T5306] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.121528][ T5306] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801f646058
[ 86.124413][ T5306] R13: 1ffff11003ec8c0b R14: ffff8880447e6d08 R15: 0000000000000cc0
[ 86.127331][ T5306] ? usb_submit_urb+0x72/0x18b0
[ 86.129208][ T5306] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.131256][ T5306] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.133307][ T5306] ? skb_put+0x112/0x210
[ 86.134951][ T5306] port100_send_cmd_async+0x84f/0xcc0
[ 86.137517][ T5306] port100_set_command_type+0x1c8/0x390
[ 86.139673][ T5306] ? pcpu_alloc+0x10/0x310
[ 86.141452][ T5306] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.143857][ T5306] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.146209][ T5306] port100_probe+0x7b2/0xba0
[ 86.147959][ T5306] ? __pfx_port100_probe+0x10/0x10
[ 86.149929][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.151926][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.154128][ T5306] ? __pm_runtime_set_status+0x994/0xc80
[ 86.156272][ T5306] usb_probe_interface+0x653/0xc60
[ 86.158328][ T5306] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.160487][ T5306] really_probe+0x254/0xae0
[ 86.162265][ T5306] __driver_probe_device+0x1e8/0x360
[ 86.164233][ T5306] driver_probe_device+0x4f/0x240
[ 86.166181][ T5306] __device_attach_driver+0x270/0x410
[ 86.168249][ T5306] bus_for_each_drv+0x258/0x2f0
[ 86.170194][ T5306] ? __pfx___device_attach_driver+0x10/0x10
[ 86.172492][ T5306] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.174537][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.176537][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.178771][ T5306] __device_attach+0x2c4/0x450
[ 86.180597][ T5306] ? __pfx___device_attach+0x10/0x10
[ 86.182728][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 86.184740][ T5306] ? _raw_spin_unlock+0x28/0x50
[ 86.186591][ T5306] device_initial_probe+0xa1/0xd0
[ 86.188534][ T5306] bus_probe_device+0x12a/0x220
[ 86.190424][ T5306] device_add+0x7d7/0xb80
[ 86.192071][ T5306] usb_set_configuration+0x1ad8/0x2180
[ 86.194149][ T5306] usb_generic_driver_probe+0x8d/0x150
[ 86.196178][ T5306] usb_probe_device+0x1c3/0x3b0
[ 86.198029][ T5306] ? __pfx_usb_probe_device+0x10/0x10
[ 86.200016][ T5306] really_probe+0x254/0xae0
[ 86.201769][ T5306] __driver_probe_device+0x1e8/0x360
[ 86.203740][ T5306] driver_probe_device+0x4f/0x240
[ 86.205662][ T5306] __device_attach_driver+0x270/0x410
[ 86.207761][ T5306] bus_for_each_drv+0x258/0x2f0
[ 86.209647][ T5306] ? __pfx___device_attach_driver+0x10/0x10
[ 86.211883][ T5306] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.213953][ T5306] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.215961][ T5306] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.218203][ T5306] __device_attach+0x2c4/0x450
[ 86.220050][ T5306] ? __pfx___device_attach+0x10/0x10
[ 86.222137][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 86.224128][ T5306] ? _raw_spin_unlock+0x28/0x50
[ 86.225990][ T5306] device_initial_probe+0xa1/0xd0
[ 86.227924][ T5306] bus_probe_device+0x12a/0x220
[ 86.229846][ T5306] device_add+0x7d7/0xb80
[ 86.231538][ T5306] usb_new_device+0x99d/0x1620
[ 86.233420][ T5306] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.235690][ T5306] ? __pfx_usb_new_device+0x10/0x10
[ 86.237768][ T5306] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.239833][ T5306] hub_event+0x28e8/0x4d30
[ 86.241641][ T5306] ? do_raw_spin_unlock+0x4d/0x210
[ 86.243590][ T5306] ? __pfx_hub_event+0x10/0x10
[ 86.245441][ T5306] ? process_scheduled_works+0xa20/0x14e0
[ 86.247674][ T5306] ? rcu_is_watching+0x15/0xb0
[ 86.249512][ T5306] ? process_scheduled_works+0xa20/0x14e0
[ 86.251718][ T5306] process_scheduled_works+0xa8e/0x14e0
[ 86.253826][ T5306] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.256102][ T5306] ? assign_work+0x3cf/0x5d0
[ 86.257622][ T5306] worker_thread+0xa47/0xfb0
[ 86.259145][ T5306] ? __kthread_parkme+0x71/0x1f0
[ 86.260763][ T5306] kthread+0x388/0x470
[ 86.262110][ T5306] ? __pfx_worker_thread+0x10/0x10
[ 86.263809][ T5306] ? __pfx_kthread+0x10/0x10
[ 86.265373][ T5306] ret_from_fork+0x514/0xb70
[ 86.266848][ T5306] ? __pfx_ret_from_fork+0x10/0x10
[ 86.268502][ T5306] ? __switch_to+0xc89/0x1420
[ 86.270012][ T5306] ? __pfx_kthread+0x10/0x10
[ 86.271605][ T5306] ret_from_fork_asm+0x1a/0x30
[ 86.273347][ T5306]
[ 86.274910][ T5306] Kernel Offset: disabled
[ 86.276569][ T5306] Rebooting in 86400 seconds..