program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x5}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
[ 75.523415][ T44] Bluetooth: hci0: command tx timeout
[ 75.792154][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 75.947028][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 75.950999][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 75.954583][ T10] usb 5-1: Product: syz
[ 75.956625][ T10] usb 5-1: Manufacturer: syz
[ 75.958632][ T10] usb 5-1: SerialNumber: syz
[ 76.246321][ T1332] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.249346][ T1332] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.479205][ T10] ------------[ cut here ]------------
[ 76.481552][ T10] URB ffff888042b63d00 submitted while active
[ 76.484157][ T10] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:1/10
[ 76.488299][ T10] Modules linked in:
[ 76.489920][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 76.493463][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 76.497669][ T10] Workqueue: usb_hub_wq hub_event
[ 76.499874][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 76.502184][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 76.510022][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 76.512826][ T10] RAX: ffffffff876314f2 RBX: ffff888042b63d00 RCX: ffff88801bf0a540
[ 76.516149][ T10] RDX: 0000000000000000 RSI: ffff888042b63d00 RDI: ffffffff9065b500
[ 76.519523][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 76.523006][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880405cac58
[ 76.526343][ T10] R13: 1ffff110080b958b R14: ffff888042b63d08 R15: 0000000000000cc0
[ 76.531032][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 76.536717][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.540123][ T10] CR2: 00007f677e7bff98 CR3: 0000000043db8000 CR4: 0000000000352ef0
[ 76.543438][ T10] Call Trace:
[ 76.544837][ T10]
[ 76.546131][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 76.548411][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 76.550414][ T10] ? skb_put+0x112/0x210
[ 76.552199][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 76.554372][ T10] port100_set_command_type+0x1c8/0x390
[ 76.556564][ T10] ? pcpu_alloc+0x10/0x310
[ 76.558379][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 76.560873][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 76.564865][ T10] port100_probe+0x7b2/0xba0
[ 76.566792][ T10] ? __pfx_port100_probe+0x10/0x10
[ 76.569124][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.571777][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.574282][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 76.576356][ T10] usb_probe_interface+0x653/0xc60
[ 76.578104][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 76.580071][ T10] really_probe+0x254/0xae0
[ 76.581799][ T10] __driver_probe_device+0x1e8/0x360
[ 76.583952][ T10] driver_probe_device+0x4f/0x240
[ 76.585816][ T10] __device_attach_driver+0x270/0x410
[ 76.587755][ T10] bus_for_each_drv+0x258/0x2f0
[ 76.589514][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 76.591750][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 76.593733][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.595713][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.597947][ T10] __device_attach+0x2c4/0x450
[ 76.599802][ T10] ? __pfx___device_attach+0x10/0x10
[ 76.602015][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.604207][ T10] ? _raw_spin_unlock+0x28/0x50
[ 76.606246][ T10] device_initial_probe+0xa1/0xd0
[ 76.608262][ T10] bus_probe_device+0x12a/0x220
[ 76.610238][ T10] device_add+0x7d7/0xb80
[ 76.612051][ T10] usb_set_configuration+0x1ad8/0x2180
[ 76.614211][ T10] usb_generic_driver_probe+0x8d/0x150
[ 76.616357][ T10] usb_probe_device+0x1c3/0x3b0
[ 76.618332][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 76.620482][ T10] really_probe+0x254/0xae0
[ 76.622373][ T10] __driver_probe_device+0x1e8/0x360
[ 76.624517][ T10] driver_probe_device+0x4f/0x240
[ 76.626480][ T10] __device_attach_driver+0x270/0x410
[ 76.628625][ T10] bus_for_each_drv+0x258/0x2f0
[ 76.630656][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 76.633188][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 76.635873][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.638050][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.640543][ T10] __device_attach+0x2c4/0x450
[ 76.643295][ T10] ? __pfx___device_attach+0x10/0x10
[ 76.645573][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.648618][ T10] ? _raw_spin_unlock+0x28/0x50
[ 76.650802][ T10] device_initial_probe+0xa1/0xd0
[ 76.653093][ T10] bus_probe_device+0x12a/0x220
[ 76.655243][ T10] device_add+0x7d7/0xb80
[ 76.657176][ T10] usb_new_device+0x99d/0x1620
[ 76.659300][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 76.662029][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 76.664380][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 76.666727][ T10] hub_event+0x28e8/0x4d30
[ 76.668786][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.671090][ T10] ? __pfx_hub_event+0x10/0x10
[ 76.673316][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 76.675807][ T10] ? rcu_is_watching+0x15/0xb0
[ 76.677903][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 76.680234][ T10] process_scheduled_works+0xa8e/0x14e0
[ 76.682449][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 76.684780][ T10] ? assign_work+0x3cf/0x5d0
[ 76.686743][ T10] worker_thread+0xa47/0xfb0
[ 76.688770][ T10] ? __kthread_parkme+0x71/0x1f0
[ 76.690920][ T10] kthread+0x388/0x470
[ 76.692813][ T10] ? __pfx_worker_thread+0x10/0x10
[ 76.695110][ T10] ? __pfx_kthread+0x10/0x10
[ 76.697267][ T10] ret_from_fork+0x514/0xb70
[ 76.699386][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 76.701728][ T10] ? __switch_to+0xc89/0x1420
[ 76.703914][ T10] ? __pfx_kthread+0x10/0x10
[ 76.705999][ T10] ret_from_fork_asm+0x1a/0x30
[ 76.708449][ T10]
[ 76.710234][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.714108][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 76.718945][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 76.723893][ T10] Workqueue: usb_hub_wq hub_event
[ 76.726378][ T10] Call Trace:
[ 76.728147][ T10]
[ 76.729714][ T10] vpanic+0x56c/0xa60
[ 76.731879][ T10] ? __pfx__printk+0x10/0x10
[ 76.734025][ T10] ? __pfx_vpanic+0x10/0x10
[ 76.736296][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 76.738526][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 76.740861][ T10] panic+0xc5/0xd0
[ 76.742698][ T10] ? __pfx_panic+0x10/0x10
[ 76.744884][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 76.747297][ T10] __warn+0x315/0x4c0
[ 76.749157][ T10] ? usb_submit_urb+0x79/0x18b0
[ 76.751515][ T10] ? usb_submit_urb+0x79/0x18b0
[ 76.753799][ T10] __report_bug+0x276/0x570
[ 76.755715][ T10] ? kasan_save_track+0x4f/0x80
[ 76.757858][ T10] ? kasan_save_track+0x3e/0x80
[ 76.759916][ T10] ? usb_submit_urb+0x79/0x18b0
[ 76.761941][ T10] ? __pfx___report_bug+0x10/0x10
[ 76.764061][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 76.766547][ T10] ? rcu_is_watching+0x15/0xb0
[ 76.768588][ T10] ? trace_contention_end+0x3d/0x140
[ 76.770759][ T10] report_bug_entry+0x19a/0x290
[ 76.772824][ T10] ? usb_submit_urb+0x7c/0x18b0
[ 76.774875][ T10] ? usb_submit_urb+0x81/0x18b0
[ 76.776899][ T10] handle_bug+0xce/0x200
[ 76.778610][ T10] exc_invalid_op+0x1a/0x50
[ 76.780551][ T10] asm_exc_invalid_op+0x1a/0x20
[ 76.782601][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 76.784935][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 76.792965][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 76.795502][ T10] RAX: ffffffff876314f2 RBX: ffff888042b63d00 RCX: ffff88801bf0a540
[ 76.798794][ T10] RDX: 0000000000000000 RSI: ffff888042b63d00 RDI: ffffffff9065b500
[ 76.802074][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 76.805383][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880405cac58
[ 76.808559][ T10] R13: 1ffff110080b958b R14: ffff888042b63d08 R15: 0000000000000cc0
[ 76.811943][ T10] ? usb_submit_urb+0x72/0x18b0
[ 76.814007][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 76.816327][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 76.818594][ T10] ? skb_put+0x112/0x210
[ 76.820232][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 76.822523][ T10] port100_set_command_type+0x1c8/0x390
[ 76.824887][ T10] ? pcpu_alloc+0x10/0x310
[ 76.826778][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 76.829368][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 76.831857][ T10] port100_probe+0x7b2/0xba0
[ 76.833815][ T10] ? __pfx_port100_probe+0x10/0x10
[ 76.835955][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.838172][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.840654][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 76.843087][ T10] usb_probe_interface+0x653/0xc60
[ 76.845238][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 76.847481][ T10] really_probe+0x254/0xae0
[ 76.849375][ T10] __driver_probe_device+0x1e8/0x360
[ 76.851523][ T10] driver_probe_device+0x4f/0x240
[ 76.853629][ T10] __device_attach_driver+0x270/0x410
[ 76.855816][ T10] bus_for_each_drv+0x258/0x2f0
[ 76.857895][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 76.860424][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 76.862638][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.864777][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.867110][ T10] __device_attach+0x2c4/0x450
[ 76.869093][ T10] ? __pfx___device_attach+0x10/0x10
[ 76.871361][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.873512][ T10] ? _raw_spin_unlock+0x28/0x50
[ 76.875571][ T10] device_initial_probe+0xa1/0xd0
[ 76.877683][ T10] bus_probe_device+0x12a/0x220
[ 76.879720][ T10] device_add+0x7d7/0xb80
[ 76.881531][ T10] usb_set_configuration+0x1ad8/0x2180
[ 76.883794][ T10] usb_generic_driver_probe+0x8d/0x150
[ 76.886073][ T10] usb_probe_device+0x1c3/0x3b0
[ 76.888076][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 76.890327][ T10] really_probe+0x254/0xae0
[ 76.892251][ T10] __driver_probe_device+0x1e8/0x360
[ 76.894387][ T10] driver_probe_device+0x4f/0x240
[ 76.896466][ T10] __device_attach_driver+0x270/0x410
[ 76.898650][ T10] bus_for_each_drv+0x258/0x2f0
[ 76.900652][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 76.903099][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 76.905298][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 76.907430][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 76.909841][ T10] __device_attach+0x2c4/0x450
[ 76.911845][ T10] ? __pfx___device_attach+0x10/0x10
[ 76.914101][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.916235][ T10] ? _raw_spin_unlock+0x28/0x50
[ 76.918288][ T10] device_initial_probe+0xa1/0xd0
[ 76.920419][ T10] bus_probe_device+0x12a/0x220
[ 76.922449][ T10] device_add+0x7d7/0xb80
[ 76.924255][ T10] usb_new_device+0x99d/0x1620
[ 76.926233][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 76.928675][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 76.930893][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 76.933142][ T10] hub_event+0x28e8/0x4d30
[ 76.935004][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 76.937191][ T10] ? __pfx_hub_event+0x10/0x10
[ 76.939258][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 76.941681][ T10] ? rcu_is_watching+0x15/0xb0
[ 76.943815][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 76.946278][ T10] process_scheduled_works+0xa8e/0x14e0
[ 76.948683][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 76.951276][ T10] ? assign_work+0x3cf/0x5d0
[ 76.953284][ T10] worker_thread+0xa47/0xfb0
[ 76.955196][ T10] ? __kthread_parkme+0x71/0x1f0
[ 76.957277][ T10] kthread+0x388/0x470
[ 76.959033][ T10] ? __pfx_worker_thread+0x10/0x10
[ 76.961263][ T10] ? __pfx_kthread+0x10/0x10
[ 76.963276][ T10] ret_from_fork+0x514/0xb70
[ 76.966190][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 76.968508][ T10] ? __switch_to+0xc89/0x1420
[ 76.970483][ T10] ? __pfx_kthread+0x10/0x10
[ 76.972500][ T10] ret_from_fork_asm+0x1a/0x30
[ 76.974591][ T10]
[ 76.976307][ T10] Kernel Offset: disabled
[ 76.978178][ T10] Rebooting in 86400 seconds..