program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
[ 76.825795][ T1331] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.829955][ T1331] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.121676][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 77.161734][ T5280] Bluetooth: hci0: command tx timeout
[ 77.278914][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 77.283134][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 77.286576][ T9] usb 5-1: Product: syz
[ 77.288483][ T9] usb 5-1: Manufacturer: syz
[ 77.290579][ T9] usb 5-1: SerialNumber: syz
[ 77.767323][ T9] ------------[ cut here ]------------
[ 77.769411][ T9] URB ffff888043a5de00 submitted while active
[ 77.771437][ T9] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:0/9
[ 77.774843][ T9] Modules linked in:
[ 77.776299][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.779298][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.782903][ T9] Workqueue: usb_hub_wq hub_event
[ 77.785312][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 77.787194][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 77.793473][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 77.795500][ T9] RAX: ffffffff876314f2 RBX: ffff888043a5de00 RCX: ffff88801bf0ca80
[ 77.798135][ T9] RDX: 0000000000000000 RSI: ffff888043a5de00 RDI: ffffffff9065b500
[ 77.800792][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 77.803512][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803fc2f458
[ 77.806165][ T9] R13: 1ffff11007f85e8b R14: ffff888043a5de08 R15: 0000000000000cc0
[ 77.808848][ T9] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 77.811818][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.814050][ T9] CR2: 00007f12655c8f98 CR3: 000000003f544000 CR4: 0000000000352ef0
[ 77.816747][ T9] Call Trace:
[ 77.817947][ T9]
[ 77.818999][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 77.820883][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 77.822763][ T9] ? skb_put+0x112/0x210
[ 77.824279][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 77.826108][ T9] port100_set_command_type+0x1c8/0x390
[ 77.827997][ T9] ? pcpu_alloc+0x10/0x310
[ 77.829587][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 77.831703][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 77.833691][ T9] port100_probe+0x7b2/0xba0
[ 77.835258][ T9] ? __pfx_port100_probe+0x10/0x10
[ 77.837050][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.838888][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.840887][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 77.842842][ T9] usb_probe_interface+0x653/0xc60
[ 77.844562][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 77.846459][ T9] really_probe+0x254/0xae0
[ 77.848018][ T9] __driver_probe_device+0x1e8/0x360
[ 77.849819][ T9] driver_probe_device+0x4f/0x240
[ 77.851577][ T9] __device_attach_driver+0x270/0x410
[ 77.853447][ T9] bus_for_each_drv+0x258/0x2f0
[ 77.855112][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 77.857176][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 77.859085][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.860888][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.862905][ T9] __device_attach+0x2c4/0x450
[ 77.864608][ T9] ? __pfx___device_attach+0x10/0x10
[ 77.866408][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 77.868172][ T9] ? _raw_spin_unlock+0x28/0x50
[ 77.869859][ T9] device_initial_probe+0xa1/0xd0
[ 77.871660][ T9] bus_probe_device+0x12a/0x220
[ 77.873338][ T9] device_add+0x7d7/0xb80
[ 77.874820][ T9] usb_set_configuration+0x1ad8/0x2180
[ 77.876664][ T9] usb_generic_driver_probe+0x8d/0x150
[ 77.878510][ T9] usb_probe_device+0x1c3/0x3b0
[ 77.880248][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 77.882920][ T9] really_probe+0x254/0xae0
[ 77.884728][ T9] __driver_probe_device+0x1e8/0x360
[ 77.886448][ T9] driver_probe_device+0x4f/0x240
[ 77.888123][ T9] __device_attach_driver+0x270/0x410
[ 77.890081][ T9] bus_for_each_drv+0x258/0x2f0
[ 77.892143][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 77.894247][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 77.896236][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.898052][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.900095][ T9] __device_attach+0x2c4/0x450
[ 77.901838][ T9] ? __pfx___device_attach+0x10/0x10
[ 77.903660][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 77.905421][ T9] ? _raw_spin_unlock+0x28/0x50
[ 77.907107][ T9] device_initial_probe+0xa1/0xd0
[ 77.908892][ T9] bus_probe_device+0x12a/0x220
[ 77.910571][ T9] device_add+0x7d7/0xb80
[ 77.912455][ T9] usb_new_device+0x99d/0x1620
[ 77.914597][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 77.917216][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 77.919531][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 77.921378][ T9] hub_event+0x28e8/0x4d30
[ 77.923024][ T9] ? __pfx_hub_event+0x10/0x10
[ 77.924737][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 77.926762][ T9] ? rcu_is_watching+0x15/0xb0
[ 77.928414][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 77.930332][ T9] process_scheduled_works+0xa8e/0x14e0
[ 77.932262][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 77.934324][ T9] ? assign_work+0x3cf/0x5d0
[ 77.935956][ T9] worker_thread+0xa47/0xfb0
[ 77.937586][ T9] kthread+0x388/0x470
[ 77.939026][ T9] ? __pfx_worker_thread+0x10/0x10
[ 77.940791][ T9] ? __pfx_kthread+0x10/0x10
[ 77.942441][ T9] ret_from_fork+0x514/0xb70
[ 77.944040][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 77.945762][ T9] ? __switch_to+0xc89/0x1420
[ 77.947391][ T9] ? __pfx_kthread+0x10/0x10
[ 77.948961][ T9] ret_from_fork_asm+0x1a/0x30
[ 77.950595][ T9]
[ 77.951712][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.954119][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 77.957110][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.960393][ T9] Workqueue: usb_hub_wq hub_event
[ 77.962048][ T9] Call Trace:
[ 77.963168][ T9]
[ 77.964189][ T9] vpanic+0x56c/0xa60
[ 77.965484][ T9] ? __pfx__printk+0x10/0x10
[ 77.966998][ T9] ? __pfx_vpanic+0x10/0x10
[ 77.968507][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 77.970299][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 77.972072][ T9] panic+0xc5/0xd0
[ 77.973339][ T9] ? __pfx_panic+0x10/0x10
[ 77.974816][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 77.976474][ T9] __warn+0x315/0x4c0
[ 77.977775][ T9] ? usb_submit_urb+0x79/0x18b0
[ 77.979444][ T9] ? usb_submit_urb+0x79/0x18b0
[ 77.981047][ T9] __report_bug+0x276/0x570
[ 77.982546][ T9] ? kasan_save_track+0x4f/0x80
[ 77.984146][ T9] ? kasan_save_track+0x3e/0x80
[ 77.985751][ T9] ? usb_submit_urb+0x79/0x18b0
[ 77.987358][ T9] ? __pfx___report_bug+0x10/0x10
[ 77.989053][ T9] ? __pfx___mutex_trylock_common+0x10/0x10
[ 77.990986][ T9] ? rcu_is_watching+0x15/0xb0
[ 77.992588][ T9] ? trace_contention_end+0x3d/0x140
[ 77.994343][ T9] report_bug_entry+0x19a/0x290
[ 77.995968][ T9] ? usb_submit_urb+0x7c/0x18b0
[ 77.997575][ T9] ? usb_submit_urb+0x81/0x18b0
[ 77.999181][ T9] handle_bug+0xce/0x200
[ 78.000611][ T9] exc_invalid_op+0x1a/0x50
[ 78.002097][ T9] asm_exc_invalid_op+0x1a/0x20
[ 78.003686][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 78.005491][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 78.011809][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 78.013838][ T9] RAX: ffffffff876314f2 RBX: ffff888043a5de00 RCX: ffff88801bf0ca80
[ 78.016654][ T9] RDX: 0000000000000000 RSI: ffff888043a5de00 RDI: ffffffff9065b500
[ 78.019373][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 78.022148][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803fc2f458
[ 78.025049][ T9] R13: 1ffff11007f85e8b R14: ffff888043a5de08 R15: 0000000000000cc0
[ 78.028076][ T9] ? usb_submit_urb+0x72/0x18b0
[ 78.029984][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 78.032139][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 78.034259][ T9] ? skb_put+0x112/0x210
[ 78.035879][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 78.037836][ T9] port100_set_command_type+0x1c8/0x390
[ 78.039667][ T9] ? pcpu_alloc+0x10/0x310
[ 78.041160][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 78.043179][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 78.045083][ T9] port100_probe+0x7b2/0xba0
[ 78.046601][ T9] ? __pfx_port100_probe+0x10/0x10
[ 78.048289][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.050033][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.051971][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 78.053903][ T9] usb_probe_interface+0x653/0xc60
[ 78.055594][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 78.057414][ T9] really_probe+0x254/0xae0
[ 78.058971][ T9] __driver_probe_device+0x1e8/0x360
[ 78.060697][ T9] driver_probe_device+0x4f/0x240
[ 78.062328][ T9] __device_attach_driver+0x270/0x410
[ 78.064144][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.065723][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.067653][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.069453][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.071156][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.073146][ T9] __device_attach+0x2c4/0x450
[ 78.074746][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.076492][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.078181][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.079776][ T9] device_initial_probe+0xa1/0xd0
[ 78.081418][ T9] bus_probe_device+0x12a/0x220
[ 78.083045][ T9] device_add+0x7d7/0xb80
[ 78.084519][ T9] usb_set_configuration+0x1ad8/0x2180
[ 78.086317][ T9] usb_generic_driver_probe+0x8d/0x150
[ 78.088116][ T9] usb_probe_device+0x1c3/0x3b0
[ 78.089793][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 78.091550][ T9] really_probe+0x254/0xae0
[ 78.093123][ T9] __driver_probe_device+0x1e8/0x360
[ 78.094883][ T9] driver_probe_device+0x4f/0x240
[ 78.096548][ T9] __device_attach_driver+0x270/0x410
[ 78.098299][ T9] bus_for_each_drv+0x258/0x2f0
[ 78.099921][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 78.101824][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.103959][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.106212][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.108771][ T9] __device_attach+0x2c4/0x450
[ 78.110885][ T9] ? __pfx___device_attach+0x10/0x10
[ 78.113159][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 78.115424][ T9] ? _raw_spin_unlock+0x28/0x50
[ 78.117541][ T9] device_initial_probe+0xa1/0xd0
[ 78.119739][ T9] bus_probe_device+0x12a/0x220
[ 78.121860][ T9] device_add+0x7d7/0xb80
[ 78.123718][ T9] usb_new_device+0x99d/0x1620
[ 78.125809][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 78.128382][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 78.130702][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.132971][ T9] hub_event+0x28e8/0x4d30
[ 78.134889][ T9] ? __pfx_hub_event+0x10/0x10
[ 78.136920][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.139358][ T9] ? rcu_is_watching+0x15/0xb0
[ 78.141473][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 78.143976][ T9] process_scheduled_works+0xa8e/0x14e0
[ 78.146416][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.148973][ T9] ? assign_work+0x3cf/0x5d0
[ 78.150980][ T9] worker_thread+0xa47/0xfb0
[ 78.152961][ T9] kthread+0x388/0x470
[ 78.154715][ T9] ? __pfx_worker_thread+0x10/0x10
[ 78.156852][ T9] ? __pfx_kthread+0x10/0x10
[ 78.158971][ T9] ret_from_fork+0x514/0xb70
[ 78.160974][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 78.163068][ T9] ? __switch_to+0xc89/0x1420
[ 78.165090][ T9] ? __pfx_kthread+0x10/0x10
[ 78.167036][ T9] ret_from_fork_asm+0x1a/0x30
[ 78.169117][ T9]
[ 78.170799][ T9] Kernel Offset: disabled
[ 78.172676][ T9] Rebooting in 86400 seconds..