program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_disconnect(r0)
[ 86.963379][ T5290] Bluetooth: hci0: command tx timeout
[ 87.073343][ T5314] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 87.228196][ T5314] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 87.231626][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 87.234657][ T5314] usb 5-1: Product: syz
[ 87.236451][ T5314] usb 5-1: Manufacturer: syz
[ 87.238233][ T5314] usb 5-1: SerialNumber: syz
[ 87.648394][ T5314] ------------[ cut here ]------------
[ 87.650589][ T5314] URB ffff888042faf300 submitted while active
[ 87.652656][ T5314] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:5/5314
[ 87.656424][ T5314] Modules linked in:
[ 87.657838][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 87.660927][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.664324][ T5314] Workqueue: usb_hub_wq hub_event
[ 87.666509][ T5314] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 87.668837][ T5314] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 87.676823][ T5314] RSP: 0018:ffffc9000f66eb80 EFLAGS: 00010293
[ 87.679414][ T5314] RAX: ffffffff876314f2 RBX: ffff888042faf300 RCX: ffff888000e80000
[ 87.682752][ T5314] RDX: 0000000000000000 RSI: ffff888042faf300 RDI: ffffffff9065b500
[ 87.686345][ T5314] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 87.689679][ T5314] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880408c8858
[ 87.693030][ T5314] R13: 1ffff1100811910b R14: ffff888042faf308 R15: 0000000000000cc0
[ 87.696342][ T5314] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 87.700020][ T5314] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.703302][ T5314] CR2: 00007ff204232b50 CR3: 0000000042ea7000 CR4: 0000000000352ef0
[ 87.706753][ T5314] Call Trace:
[ 87.708299][ T5314]
[ 87.709513][ T5314] ? __kmalloc_cache_noprof+0x150/0x660
[ 87.711578][ T5314] ? port100_send_cmd_async+0xbd/0xcc0
[ 87.713582][ T5314] ? skb_put+0x112/0x210
[ 87.715248][ T5314] port100_send_cmd_async+0x84f/0xcc0
[ 87.717209][ T5314] port100_set_command_type+0x1c8/0x390
[ 87.719172][ T5314] ? pcpu_alloc+0x10/0x310
[ 87.720785][ T5314] ? __pfx_port100_set_command_type+0x10/0x10
[ 87.722924][ T5314] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.724975][ T5314] port100_probe+0x7b2/0xba0
[ 87.726583][ T5314] ? __pfx_port100_probe+0x10/0x10
[ 87.728421][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.730275][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.732301][ T5314] ? __pm_runtime_set_status+0x994/0xc80
[ 87.734248][ T5314] usb_probe_interface+0x653/0xc60
[ 87.736149][ T5314] ? __pfx_usb_probe_interface+0x10/0x10
[ 87.738035][ T5314] really_probe+0x254/0xae0
[ 87.739596][ T5314] __driver_probe_device+0x1e8/0x360
[ 87.741435][ T5314] driver_probe_device+0x4f/0x240
[ 87.743209][ T5314] __device_attach_driver+0x270/0x410
[ 87.745030][ T5314] bus_for_each_drv+0x258/0x2f0
[ 87.746779][ T5314] ? __pfx___device_attach_driver+0x10/0x10
[ 87.748849][ T5314] ? __pfx_bus_for_each_drv+0x10/0x10
[ 87.750788][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.752681][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.754768][ T5314] __device_attach+0x2c4/0x450
[ 87.756534][ T5314] ? __pfx___device_attach+0x10/0x10
[ 87.758489][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 87.760249][ T5314] ? _raw_spin_unlock+0x28/0x50
[ 87.761931][ T5314] device_initial_probe+0xa1/0xd0
[ 87.763873][ T5314] bus_probe_device+0x12a/0x220
[ 87.765821][ T5314] device_add+0x7d7/0xb80
[ 87.767462][ T5314] usb_set_configuration+0x1ad8/0x2180
[ 87.769329][ T5314] usb_generic_driver_probe+0x8d/0x150
[ 87.771294][ T5314] usb_probe_device+0x1c3/0x3b0
[ 87.773308][ T5314] ? __pfx_usb_probe_device+0x10/0x10
[ 87.775383][ T5314] really_probe+0x254/0xae0
[ 87.777240][ T5314] __driver_probe_device+0x1e8/0x360
[ 87.779456][ T5314] driver_probe_device+0x4f/0x240
[ 87.781210][ T5314] __device_attach_driver+0x270/0x410
[ 87.783037][ T5314] bus_for_each_drv+0x258/0x2f0
[ 87.784838][ T5314] ? __pfx___device_attach_driver+0x10/0x10
[ 87.786909][ T5314] ? __pfx_bus_for_each_drv+0x10/0x10
[ 87.788758][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.790610][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.792651][ T5314] __device_attach+0x2c4/0x450
[ 87.794497][ T5314] ? __pfx___device_attach+0x10/0x10
[ 87.796564][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 87.798458][ T5314] ? _raw_spin_unlock+0x28/0x50
[ 87.800183][ T5314] device_initial_probe+0xa1/0xd0
[ 87.801950][ T5314] bus_probe_device+0x12a/0x220
[ 87.803870][ T5314] device_add+0x7d7/0xb80
[ 87.805382][ T5314] usb_new_device+0x99d/0x1620
[ 87.807087][ T5314] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 87.809460][ T5314] ? __pfx_usb_new_device+0x10/0x10
[ 87.811280][ T5314] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.813057][ T5314] hub_event+0x28e8/0x4d30
[ 87.814907][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 87.816696][ T5314] ? __pfx_hub_event+0x10/0x10
[ 87.818444][ T5314] ? process_scheduled_works+0xa20/0x14e0
[ 87.820408][ T5314] ? rcu_is_watching+0x15/0xb0
[ 87.822010][ T5314] ? process_scheduled_works+0xa20/0x14e0
[ 87.824035][ T5314] process_scheduled_works+0xa8e/0x14e0
[ 87.825964][ T5314] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.827971][ T5314] ? assign_work+0x3cf/0x5d0
[ 87.829607][ T5314] worker_thread+0xa47/0xfb0
[ 87.831336][ T5314] ? __kthread_parkme+0x71/0x1f0
[ 87.833022][ T5314] kthread+0x388/0x470
[ 87.834468][ T5314] ? __pfx_worker_thread+0x10/0x10
[ 87.836251][ T5314] ? __pfx_kthread+0x10/0x10
[ 87.837945][ T5314] ret_from_fork+0x514/0xb70
[ 87.839651][ T5314] ? __pfx_ret_from_fork+0x10/0x10
[ 87.841523][ T5314] ? __switch_to+0xc89/0x1420
[ 87.845823][ T5314] ? __pfx_kthread+0x10/0x10
[ 87.847509][ T5314] ret_from_fork_asm+0x1a/0x30
[ 87.849127][ T5314]
[ 87.850219][ T5314] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.852551][ T5314] CPU: 0 UID: 0 PID: 5314 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 87.855466][ T5314] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.858708][ T5314] Workqueue: usb_hub_wq hub_event
[ 87.860398][ T5314] Call Trace:
[ 87.861636][ T5314]
[ 87.862810][ T5314] vpanic+0x56c/0xa60
[ 87.864118][ T5314] ? __pfx__printk+0x10/0x10
[ 87.865607][ T5314] ? __pfx_vpanic+0x10/0x10
[ 87.867071][ T5314] ? is_bpf_text_address+0x292/0x2b0
[ 87.868817][ T5314] ? is_bpf_text_address+0x26/0x2b0
[ 87.870705][ T5314] panic+0xc5/0xd0
[ 87.871973][ T5314] ? __pfx_panic+0x10/0x10
[ 87.873499][ T5314] ? ret_from_fork_asm+0x1a/0x30
[ 87.875106][ T5314] __warn+0x315/0x4c0
[ 87.876395][ T5314] ? usb_submit_urb+0x79/0x18b0
[ 87.878017][ T5314] ? usb_submit_urb+0x79/0x18b0
[ 87.879600][ T5314] __report_bug+0x276/0x570
[ 87.881113][ T5314] ? kasan_save_track+0x4f/0x80
[ 87.882713][ T5314] ? kasan_save_track+0x3e/0x80
[ 87.884288][ T5314] ? usb_submit_urb+0x79/0x18b0
[ 87.885854][ T5314] ? __pfx___report_bug+0x10/0x10
[ 87.887522][ T5314] ? __pfx___mutex_trylock_common+0x10/0x10
[ 87.889436][ T5314] ? rcu_is_watching+0x15/0xb0
[ 87.891012][ T5314] ? trace_contention_end+0x3d/0x140
[ 87.892819][ T5314] report_bug_entry+0x19a/0x290
[ 87.894447][ T5314] ? usb_submit_urb+0x7c/0x18b0
[ 87.896082][ T5314] ? usb_submit_urb+0x81/0x18b0
[ 87.897696][ T5314] handle_bug+0xce/0x200
[ 87.899137][ T5314] exc_invalid_op+0x1a/0x50
[ 87.900663][ T5314] asm_exc_invalid_op+0x1a/0x20
[ 87.902296][ T5314] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 87.904144][ T5314] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 87.910310][ T5314] RSP: 0018:ffffc9000f66eb80 EFLAGS: 00010293
[ 87.912283][ T5314] RAX: ffffffff876314f2 RBX: ffff888042faf300 RCX: ffff888000e80000
[ 87.914863][ T5314] RDX: 0000000000000000 RSI: ffff888042faf300 RDI: ffffffff9065b500
[ 87.917381][ T5314] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 87.920600][ T5314] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880408c8858
[ 87.923410][ T5314] R13: 1ffff1100811910b R14: ffff888042faf308 R15: 0000000000000cc0
[ 87.925990][ T5314] ? usb_submit_urb+0x72/0x18b0
[ 87.927798][ T5314] ? __kmalloc_cache_noprof+0x150/0x660
[ 87.929759][ T5314] ? port100_send_cmd_async+0xbd/0xcc0
[ 87.931665][ T5314] ? skb_put+0x112/0x210
[ 87.933219][ T5314] port100_send_cmd_async+0x84f/0xcc0
[ 87.935239][ T5314] port100_set_command_type+0x1c8/0x390
[ 87.937269][ T5314] ? pcpu_alloc+0x10/0x310
[ 87.938970][ T5314] ? __pfx_port100_set_command_type+0x10/0x10
[ 87.941139][ T5314] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.943380][ T5314] port100_probe+0x7b2/0xba0
[ 87.944983][ T5314] ? __pfx_port100_probe+0x10/0x10
[ 87.946843][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.948534][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.950481][ T5314] ? __pm_runtime_set_status+0x994/0xc80
[ 87.952375][ T5314] usb_probe_interface+0x653/0xc60
[ 87.954087][ T5314] ? __pfx_usb_probe_interface+0x10/0x10
[ 87.956039][ T5314] really_probe+0x254/0xae0
[ 87.957547][ T5314] __driver_probe_device+0x1e8/0x360
[ 87.959389][ T5314] driver_probe_device+0x4f/0x240
[ 87.961098][ T5314] __device_attach_driver+0x270/0x410
[ 87.962861][ T5314] bus_for_each_drv+0x258/0x2f0
[ 87.964396][ T5314] ? __pfx___device_attach_driver+0x10/0x10
[ 87.966361][ T5314] ? __pfx_bus_for_each_drv+0x10/0x10
[ 87.968193][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.969905][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.971914][ T5314] __device_attach+0x2c4/0x450
[ 87.973523][ T5314] ? __pfx___device_attach+0x10/0x10
[ 87.975279][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 87.976928][ T5314] ? _raw_spin_unlock+0x28/0x50
[ 87.978535][ T5314] device_initial_probe+0xa1/0xd0
[ 87.980239][ T5314] bus_probe_device+0x12a/0x220
[ 87.981929][ T5314] device_add+0x7d7/0xb80
[ 87.983401][ T5314] usb_set_configuration+0x1ad8/0x2180
[ 87.985226][ T5314] usb_generic_driver_probe+0x8d/0x150
[ 87.987043][ T5314] usb_probe_device+0x1c3/0x3b0
[ 87.988681][ T5314] ? __pfx_usb_probe_device+0x10/0x10
[ 87.990522][ T5314] really_probe+0x254/0xae0
[ 87.992107][ T5314] __driver_probe_device+0x1e8/0x360
[ 87.994178][ T5314] driver_probe_device+0x4f/0x240
[ 87.996265][ T5314] __device_attach_driver+0x270/0x410
[ 87.998502][ T5314] bus_for_each_drv+0x258/0x2f0
[ 88.000577][ T5314] ? __pfx___device_attach_driver+0x10/0x10
[ 88.003047][ T5314] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.005286][ T5314] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.007460][ T5314] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.009933][ T5314] __device_attach+0x2c4/0x450
[ 88.012010][ T5314] ? __pfx___device_attach+0x10/0x10
[ 88.014203][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 88.016369][ T5314] ? _raw_spin_unlock+0x28/0x50
[ 88.018489][ T5314] device_initial_probe+0xa1/0xd0
[ 88.020602][ T5314] bus_probe_device+0x12a/0x220
[ 88.022657][ T5314] device_add+0x7d7/0xb80
[ 88.024511][ T5314] usb_new_device+0x99d/0x1620
[ 88.026597][ T5314] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.029087][ T5314] ? __pfx_usb_new_device+0x10/0x10
[ 88.031312][ T5314] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.032981][ T5314] hub_event+0x28e8/0x4d30
[ 88.034385][ T5314] ? do_raw_spin_unlock+0x4d/0x210
[ 88.036258][ T5314] ? __pfx_hub_event+0x10/0x10
[ 88.038164][ T5314] ? process_scheduled_works+0xa20/0x14e0
[ 88.040501][ T5314] ? rcu_is_watching+0x15/0xb0
[ 88.042460][ T5314] ? process_scheduled_works+0xa20/0x14e0
[ 88.044697][ T5314] process_scheduled_works+0xa8e/0x14e0
[ 88.046890][ T5314] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.049375][ T5314] ? assign_work+0x3cf/0x5d0
[ 88.051363][ T5314] worker_thread+0xa47/0xfb0
[ 88.053367][ T5314] ? __kthread_parkme+0x71/0x1f0
[ 88.055471][ T5314] kthread+0x388/0x470
[ 88.057186][ T5314] ? __pfx_worker_thread+0x10/0x10
[ 88.059097][ T5314] ? __pfx_kthread+0x10/0x10
[ 88.060993][ T5314] ret_from_fork+0x514/0xb70
[ 88.062939][ T5314] ? __pfx_ret_from_fork+0x10/0x10
[ 88.065065][ T5314] ? __switch_to+0xc89/0x1420
[ 88.066978][ T5314] ? __pfx_kthread+0x10/0x10
[ 88.068914][ T5314] ret_from_fork_asm+0x1a/0x30
[ 88.071110][ T5314]
[ 88.073020][ T5314] Kernel Offset: disabled
[ 88.074974][ T5314] Rebooting in 86400 seconds..