program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_disconnect(r0)
[ 94.589390][ T44] Bluetooth: hci0: command tx timeout
[ 94.928065][ T5310] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 95.081811][ T5310] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 95.085678][ T5310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 95.089391][ T5310] usb 5-1: Product: syz
[ 95.092190][ T5310] usb 5-1: Manufacturer: syz
[ 95.094261][ T5310] usb 5-1: SerialNumber: syz
[ 95.515696][ T5310] ------------[ cut here ]------------
[ 95.519131][ T5310] URB ffff888032c20800 submitted while active
[ 95.522038][ T5310] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:5/5310
[ 95.526026][ T5310] Modules linked in:
[ 95.528199][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 95.532182][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.536178][ T5310] Workqueue: usb_hub_wq hub_event
[ 95.538753][ T5310] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 95.540920][ T5310] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 95.548961][ T5310] RSP: 0018:ffffc9000f626b80 EFLAGS: 00010293
[ 95.551280][ T5310] RAX: ffffffff876314f2 RBX: ffff888032c20800 RCX: ffff888000b98000
[ 95.554733][ T5310] RDX: 0000000000000000 RSI: ffff888032c20800 RDI: ffffffff9065b500
[ 95.558398][ T5310] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 95.561525][ T5310] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803f661858
[ 95.564460][ T5310] R13: 1ffff11007ecc30b R14: ffff888032c20808 R15: 0000000000000cc0
[ 95.567811][ T5310] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 95.571293][ T5310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 95.573805][ T5310] CR2: 000055a08ce710b8 CR3: 00000000449a9000 CR4: 0000000000352ef0
[ 95.577227][ T5310] Call Trace:
[ 95.578547][ T5310]
[ 95.579684][ T5310] ? __kmalloc_cache_noprof+0x150/0x660
[ 95.581709][ T5310] ? port100_send_cmd_async+0xbd/0xcc0
[ 95.583703][ T5310] ? skb_put+0x112/0x210
[ 95.585372][ T5310] port100_send_cmd_async+0x84f/0xcc0
[ 95.587571][ T5310] port100_set_command_type+0x1c8/0x390
[ 95.589750][ T5310] ? pcpu_alloc+0x10/0x310
[ 95.591506][ T5310] ? __pfx_port100_set_command_type+0x10/0x10
[ 95.593824][ T5310] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 95.596114][ T5310] port100_probe+0x7b2/0xba0
[ 95.597928][ T5310] ? __pfx_port100_probe+0x10/0x10
[ 95.599907][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.602021][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.604878][ T5310] ? __pm_runtime_set_status+0x994/0xc80
[ 95.607675][ T5310] usb_probe_interface+0x653/0xc60
[ 95.609835][ T5310] ? __pfx_usb_probe_interface+0x10/0x10
[ 95.612774][ T5310] really_probe+0x254/0xae0
[ 95.615298][ T5310] __driver_probe_device+0x1e8/0x360
[ 95.617611][ T5310] driver_probe_device+0x4f/0x240
[ 95.619869][ T5310] __device_attach_driver+0x270/0x410
[ 95.622354][ T5310] bus_for_each_drv+0x258/0x2f0
[ 95.624772][ T5310] ? __pfx___device_attach_driver+0x10/0x10
[ 95.627427][ T5310] ? __pfx_bus_for_each_drv+0x10/0x10
[ 95.630221][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.633018][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.635662][ T5310] __device_attach+0x2c4/0x450
[ 95.637792][ T5310] ? __pfx___device_attach+0x10/0x10
[ 95.640078][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.642089][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 95.644140][ T5310] device_initial_probe+0xa1/0xd0
[ 95.646208][ T5310] bus_probe_device+0x12a/0x220
[ 95.648264][ T5310] device_add+0x7d7/0xb80
[ 95.650102][ T5310] usb_set_configuration+0x1ad8/0x2180
[ 95.652437][ T5310] usb_generic_driver_probe+0x8d/0x150
[ 95.654791][ T5310] usb_probe_device+0x1c3/0x3b0
[ 95.658202][ T5310] ? __pfx_usb_probe_device+0x10/0x10
[ 95.660315][ T5310] really_probe+0x254/0xae0
[ 95.662181][ T5310] __driver_probe_device+0x1e8/0x360
[ 95.664304][ T5310] driver_probe_device+0x4f/0x240
[ 95.666462][ T5310] __device_attach_driver+0x270/0x410
[ 95.668666][ T5310] bus_for_each_drv+0x258/0x2f0
[ 95.670626][ T5310] ? __pfx___device_attach_driver+0x10/0x10
[ 95.673126][ T5310] ? __pfx_bus_for_each_drv+0x10/0x10
[ 95.675343][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.677451][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.679800][ T5310] __device_attach+0x2c4/0x450
[ 95.681774][ T5310] ? __pfx___device_attach+0x10/0x10
[ 95.683870][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.685947][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 95.687909][ T5310] device_initial_probe+0xa1/0xd0
[ 95.689898][ T5310] bus_probe_device+0x12a/0x220
[ 95.691702][ T5310] device_add+0x7d7/0xb80
[ 95.693374][ T5310] usb_new_device+0x99d/0x1620
[ 95.695043][ T5310] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 95.697283][ T5310] ? __pfx_usb_new_device+0x10/0x10
[ 95.699270][ T5310] ? _raw_spin_unlock_irq+0x23/0x50
[ 95.701357][ T5310] hub_event+0x28e8/0x4d30
[ 95.703156][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.705103][ T5310] ? __pfx_hub_event+0x10/0x10
[ 95.707155][ T5310] ? process_scheduled_works+0xa20/0x14e0
[ 95.709080][ T5310] ? rcu_is_watching+0x15/0xb0
[ 95.710677][ T5310] ? process_scheduled_works+0xa20/0x14e0
[ 95.712546][ T5310] process_scheduled_works+0xa8e/0x14e0
[ 95.714765][ T5310] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.716926][ T5310] ? assign_work+0x3cf/0x5d0
[ 95.718692][ T5310] worker_thread+0xa47/0xfb0
[ 95.720446][ T5310] ? __kthread_parkme+0x71/0x1f0
[ 95.722301][ T5310] kthread+0x388/0x470
[ 95.723886][ T5310] ? __pfx_worker_thread+0x10/0x10
[ 95.725697][ T5310] ? __pfx_kthread+0x10/0x10
[ 95.727321][ T5310] ret_from_fork+0x514/0xb70
[ 95.728965][ T5310] ? __pfx_ret_from_fork+0x10/0x10
[ 95.730955][ T5310] ? __switch_to+0xc89/0x1420
[ 95.732915][ T5310] ? __pfx_kthread+0x10/0x10
[ 95.734779][ T5310] ret_from_fork_asm+0x1a/0x30
[ 95.736746][ T5310]
[ 95.738049][ T5310] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 95.740852][ T5310] CPU: 0 UID: 0 PID: 5310 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 95.744606][ T5310] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 95.748828][ T5310] Workqueue: usb_hub_wq hub_event
[ 95.750949][ T5310] Call Trace:
[ 95.752390][ T5310]
[ 95.753673][ T5310] vpanic+0x56c/0xa60
[ 95.755360][ T5310] ? __pfx__printk+0x10/0x10
[ 95.757304][ T5310] ? __pfx_vpanic+0x10/0x10
[ 95.759198][ T5310] ? is_bpf_text_address+0x292/0x2b0
[ 95.761378][ T5310] ? is_bpf_text_address+0x26/0x2b0
[ 95.763520][ T5310] panic+0xc5/0xd0
[ 95.765112][ T5310] ? __pfx_panic+0x10/0x10
[ 95.767003][ T5310] ? ret_from_fork_asm+0x1a/0x30
[ 95.769068][ T5310] __warn+0x315/0x4c0
[ 95.770735][ T5310] ? usb_submit_urb+0x79/0x18b0
[ 95.772769][ T5310] ? usb_submit_urb+0x79/0x18b0
[ 95.774773][ T5310] __report_bug+0x276/0x570
[ 95.776768][ T5310] ? kasan_save_track+0x4f/0x80
[ 95.778951][ T5310] ? kasan_save_track+0x3e/0x80
[ 95.781052][ T5310] ? usb_submit_urb+0x79/0x18b0
[ 95.783081][ T5310] ? __pfx___report_bug+0x10/0x10
[ 95.785155][ T5310] ? __pfx___mutex_trylock_common+0x10/0x10
[ 95.787526][ T5310] ? rcu_is_watching+0x15/0xb0
[ 95.789499][ T5310] ? trace_contention_end+0x3d/0x140
[ 95.791635][ T5310] report_bug_entry+0x19a/0x290
[ 95.793699][ T5310] ? usb_submit_urb+0x7c/0x18b0
[ 95.795729][ T5310] ? usb_submit_urb+0x81/0x18b0
[ 95.797628][ T5310] handle_bug+0xce/0x200
[ 95.799250][ T5310] exc_invalid_op+0x1a/0x50
[ 95.800990][ T5310] asm_exc_invalid_op+0x1a/0x20
[ 95.802904][ T5310] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 95.805084][ T5310] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 95.812366][ T5310] RSP: 0018:ffffc9000f626b80 EFLAGS: 00010293
[ 95.814711][ T5310] RAX: ffffffff876314f2 RBX: ffff888032c20800 RCX: ffff888000b98000
[ 95.817749][ T5310] RDX: 0000000000000000 RSI: ffff888032c20800 RDI: ffffffff9065b500
[ 95.820596][ T5310] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 95.823584][ T5310] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803f661858
[ 95.826504][ T5310] R13: 1ffff11007ecc30b R14: ffff888032c20808 R15: 0000000000000cc0
[ 95.829760][ T5310] ? usb_submit_urb+0x72/0x18b0
[ 95.831794][ T5310] ? __kmalloc_cache_noprof+0x150/0x660
[ 95.834053][ T5310] ? port100_send_cmd_async+0xbd/0xcc0
[ 95.836302][ T5310] ? skb_put+0x112/0x210
[ 95.837793][ T5310] port100_send_cmd_async+0x84f/0xcc0
[ 95.839561][ T5310] port100_set_command_type+0x1c8/0x390
[ 95.841468][ T5310] ? pcpu_alloc+0x10/0x310
[ 95.843107][ T5310] ? __pfx_port100_set_command_type+0x10/0x10
[ 95.845376][ T5310] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 95.847598][ T5310] port100_probe+0x7b2/0xba0
[ 95.849384][ T5310] ? __pfx_port100_probe+0x10/0x10
[ 95.851080][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.852872][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.854850][ T5310] ? __pm_runtime_set_status+0x994/0xc80
[ 95.856879][ T5310] usb_probe_interface+0x653/0xc60
[ 95.858839][ T5310] ? __pfx_usb_probe_interface+0x10/0x10
[ 95.860791][ T5310] really_probe+0x254/0xae0
[ 95.862312][ T5310] __driver_probe_device+0x1e8/0x360
[ 95.864090][ T5310] driver_probe_device+0x4f/0x240
[ 95.865752][ T5310] __device_attach_driver+0x270/0x410
[ 95.867515][ T5310] bus_for_each_drv+0x258/0x2f0
[ 95.869207][ T5310] ? __pfx___device_attach_driver+0x10/0x10
[ 95.871579][ T5310] ? __pfx_bus_for_each_drv+0x10/0x10
[ 95.873535][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.875249][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.877185][ T5310] __device_attach+0x2c4/0x450
[ 95.878761][ T5310] ? __pfx___device_attach+0x10/0x10
[ 95.880559][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.882234][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 95.884101][ T5310] device_initial_probe+0xa1/0xd0
[ 95.886044][ T5310] bus_probe_device+0x12a/0x220
[ 95.887655][ T5310] device_add+0x7d7/0xb80
[ 95.889077][ T5310] usb_set_configuration+0x1ad8/0x2180
[ 95.891015][ T5310] usb_generic_driver_probe+0x8d/0x150
[ 95.893107][ T5310] usb_probe_device+0x1c3/0x3b0
[ 95.894870][ T5310] ? __pfx_usb_probe_device+0x10/0x10
[ 95.896797][ T5310] really_probe+0x254/0xae0
[ 95.898517][ T5310] __driver_probe_device+0x1e8/0x360
[ 95.900456][ T5310] driver_probe_device+0x4f/0x240
[ 95.902314][ T5310] __device_attach_driver+0x270/0x410
[ 95.904373][ T5310] bus_for_each_drv+0x258/0x2f0
[ 95.906135][ T5310] ? __pfx___device_attach_driver+0x10/0x10
[ 95.908446][ T5310] ? __pfx_bus_for_each_drv+0x10/0x10
[ 95.910470][ T5310] ? lockdep_hardirqs_on+0x7a/0x110
[ 95.912489][ T5310] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 95.914886][ T5310] __device_attach+0x2c4/0x450
[ 95.916856][ T5310] ? __pfx___device_attach+0x10/0x10
[ 95.919006][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.921181][ T5310] ? _raw_spin_unlock+0x28/0x50
[ 95.923036][ T5310] device_initial_probe+0xa1/0xd0
[ 95.924755][ T5310] bus_probe_device+0x12a/0x220
[ 95.926535][ T5310] device_add+0x7d7/0xb80
[ 95.928328][ T5310] usb_new_device+0x99d/0x1620
[ 95.930329][ T5310] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 95.932830][ T5310] ? __pfx_usb_new_device+0x10/0x10
[ 95.935032][ T5310] ? _raw_spin_unlock_irq+0x23/0x50
[ 95.937314][ T5310] hub_event+0x28e8/0x4d30
[ 95.939212][ T5310] ? do_raw_spin_unlock+0x4d/0x210
[ 95.941370][ T5310] ? __pfx_hub_event+0x10/0x10
[ 95.943349][ T5310] ? process_scheduled_works+0xa20/0x14e0
[ 95.945670][ T5310] ? rcu_is_watching+0x15/0xb0
[ 95.947655][ T5310] ? process_scheduled_works+0xa20/0x14e0
[ 95.949996][ T5310] process_scheduled_works+0xa8e/0x14e0
[ 95.952338][ T5310] ? __pfx_process_scheduled_works+0x10/0x10
[ 95.954842][ T5310] ? assign_work+0x3cf/0x5d0
[ 95.957163][ T5310] worker_thread+0xa47/0xfb0
[ 95.959220][ T5310] ? __kthread_parkme+0x71/0x1f0
[ 95.961320][ T5310] kthread+0x388/0x470
[ 95.963060][ T5310] ? __pfx_worker_thread+0x10/0x10
[ 95.965235][ T5310] ? __pfx_kthread+0x10/0x10
[ 95.967464][ T5310] ret_from_fork+0x514/0xb70
[ 95.969647][ T5310] ? __pfx_ret_from_fork+0x10/0x10
[ 95.972001][ T5310] ? __switch_to+0xc89/0x1420
[ 95.973947][ T5310] ? __pfx_kthread+0x10/0x10
[ 95.975882][ T5310] ret_from_fork_asm+0x1a/0x30
[ 95.977890][ T5310]
[ 95.979564][ T5310] Kernel Offset: disabled
[ 95.981354][ T5310] Rebooting in 86400 seconds..