program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) (async)
syz_usb_disconnect(r0)
[ 84.926788][ T5286] Bluetooth: hci0: command tx timeout
[ 85.220873][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 85.376818][ T9] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 85.380411][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.383899][ T9] usb 5-1: Product: syz
[ 85.385464][ T9] usb 5-1: Manufacturer: syz
[ 85.387076][ T9] usb 5-1: SerialNumber: syz
[ 85.810053][ T9] ------------[ cut here ]------------
[ 85.813025][ T9] URB ffff88801324e900 submitted while active
[ 85.815248][ T9] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:0/9
[ 85.819445][ T9] Modules linked in:
[ 85.821297][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 85.824577][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 85.827829][ T9] Workqueue: usb_hub_wq hub_event
[ 85.829522][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 85.831905][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 85.839082][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 85.841474][ T9] RAX: ffffffff876314f2 RBX: ffff88801324e900 RCX: ffff88801bf0ca80
[ 85.844578][ T9] RDX: 0000000000000000 RSI: ffff88801324e900 RDI: ffffffff9065b500
[ 85.847646][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 85.850716][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803f9d3c58
[ 85.853832][ T9] R13: 1ffff11007f3a78b R14: ffff88801324e908 R15: 0000000000000cc0
[ 85.856971][ T9] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 85.861125][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 85.864087][ T9] CR2: 00007fd5ab0157f0 CR3: 000000001f688000 CR4: 0000000000352ef0
[ 85.867268][ T9] Call Trace:
[ 85.868746][ T9]
[ 85.870052][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 85.872520][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 85.874849][ T9] ? skb_put+0x112/0x210
[ 85.876731][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 85.879061][ T9] port100_set_command_type+0x1c8/0x390
[ 85.881444][ T9] ? pcpu_alloc+0x10/0x310
[ 85.883370][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 85.885931][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 85.888325][ T9] port100_probe+0x7b2/0xba0
[ 85.890042][ T9] ? __pfx_port100_probe+0x10/0x10
[ 85.892041][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.893769][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.896003][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 85.898393][ T9] usb_probe_interface+0x653/0xc60
[ 85.900614][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 85.903098][ T9] really_probe+0x254/0xae0
[ 85.905077][ T9] __driver_probe_device+0x1e8/0x360
[ 85.907373][ T9] driver_probe_device+0x4f/0x240
[ 85.909283][ T9] __device_attach_driver+0x270/0x410
[ 85.911479][ T9] bus_for_each_drv+0x258/0x2f0
[ 85.913413][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 85.915797][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.917898][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.919921][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.922329][ T9] __device_attach+0x2c4/0x450
[ 85.924066][ T9] ? __pfx___device_attach+0x10/0x10
[ 85.926267][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 85.928546][ T9] ? _raw_spin_unlock+0x28/0x50
[ 85.930729][ T9] device_initial_probe+0xa1/0xd0
[ 85.932932][ T9] bus_probe_device+0x12a/0x220
[ 85.935075][ T9] device_add+0x7d7/0xb80
[ 85.936948][ T9] usb_set_configuration+0x1ad8/0x2180
[ 85.939441][ T9] usb_generic_driver_probe+0x8d/0x150
[ 85.941843][ T9] usb_probe_device+0x1c3/0x3b0
[ 85.943928][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 85.946236][ T9] really_probe+0x254/0xae0
[ 85.948226][ T9] __driver_probe_device+0x1e8/0x360
[ 85.950577][ T9] driver_probe_device+0x4f/0x240
[ 85.952905][ T9] __device_attach_driver+0x270/0x410
[ 85.955177][ T9] bus_for_each_drv+0x258/0x2f0
[ 85.957285][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 85.959643][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 85.962148][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 85.964001][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.966191][ T9] __device_attach+0x2c4/0x450
[ 85.968041][ T9] ? __pfx___device_attach+0x10/0x10
[ 85.969989][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 85.972106][ T9] ? _raw_spin_unlock+0x28/0x50
[ 85.973801][ T9] device_initial_probe+0xa1/0xd0
[ 85.975906][ T9] bus_probe_device+0x12a/0x220
[ 85.977985][ T9] device_add+0x7d7/0xb80
[ 85.979892][ T9] usb_new_device+0x99d/0x1620
[ 85.982043][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 85.984619][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 85.986735][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 85.988831][ T9] hub_event+0x28e8/0x4d30
[ 85.990339][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 85.993361][ T9] ? __pfx_hub_event+0x10/0x10
[ 85.995454][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 85.997954][ T9] ? rcu_is_watching+0x15/0xb0
[ 85.999786][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.001756][ T9] process_scheduled_works+0xa8e/0x14e0
[ 86.003609][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.005564][ T9] ? assign_work+0x3cf/0x5d0
[ 86.007106][ T9] worker_thread+0xa47/0xfb0
[ 86.008894][ T9] kthread+0x388/0x470
[ 86.010330][ T9] ? __pfx_worker_thread+0x10/0x10
[ 86.012068][ T9] ? __pfx_kthread+0x10/0x10
[ 86.013594][ T9] ret_from_fork+0x514/0xb70
[ 86.015142][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 86.016833][ T9] ? __switch_to+0xc89/0x1420
[ 86.018425][ T9] ? __pfx_kthread+0x10/0x10
[ 86.020080][ T9] ret_from_fork_asm+0x1a/0x30
[ 86.021711][ T9]
[ 86.022835][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.025283][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 86.028349][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.032363][ T9] Workqueue: usb_hub_wq hub_event
[ 86.034453][ T9] Call Trace:
[ 86.035868][ T9]
[ 86.037123][ T9] vpanic+0x56c/0xa60
[ 86.039477][ T9] ? __pfx__printk+0x10/0x10
[ 86.041423][ T9] ? __pfx_vpanic+0x10/0x10
[ 86.043363][ T9] ? is_bpf_text_address+0x292/0x2b0
[ 86.045573][ T9] ? is_bpf_text_address+0x26/0x2b0
[ 86.047734][ T9] panic+0xc5/0xd0
[ 86.049344][ T9] ? __pfx_panic+0x10/0x10
[ 86.051251][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 86.053329][ T9] __warn+0x315/0x4c0
[ 86.054958][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.056763][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.058326][ T9] __report_bug+0x276/0x570
[ 86.059962][ T9] ? kasan_save_track+0x4f/0x80
[ 86.061839][ T9] ? kasan_save_track+0x3e/0x80
[ 86.063748][ T9] ? usb_submit_urb+0x79/0x18b0
[ 86.065613][ T9] ? __pfx___report_bug+0x10/0x10
[ 86.067445][ T9] ? __pfx___mutex_trylock_common+0x10/0x10
[ 86.069675][ T9] ? rcu_is_watching+0x15/0xb0
[ 86.071283][ T9] ? trace_contention_end+0x3d/0x140
[ 86.073017][ T9] report_bug_entry+0x19a/0x290
[ 86.074613][ T9] ? usb_submit_urb+0x7c/0x18b0
[ 86.076484][ T9] ? usb_submit_urb+0x81/0x18b0
[ 86.078214][ T9] handle_bug+0xce/0x200
[ 86.079655][ T9] exc_invalid_op+0x1a/0x50
[ 86.081273][ T9] asm_exc_invalid_op+0x1a/0x20
[ 86.083116][ T9] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.085270][ T9] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.092604][ T9] RSP: 0018:ffffc9000022eb80 EFLAGS: 00010293
[ 86.095089][ T9] RAX: ffffffff876314f2 RBX: ffff88801324e900 RCX: ffff88801bf0ca80
[ 86.098233][ T9] RDX: 0000000000000000 RSI: ffff88801324e900 RDI: ffffffff9065b500
[ 86.101342][ T9] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.104482][ T9] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803f9d3c58
[ 86.107362][ T9] R13: 1ffff11007f3a78b R14: ffff88801324e908 R15: 0000000000000cc0
[ 86.109978][ T9] ? usb_submit_urb+0x72/0x18b0
[ 86.111890][ T9] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.114090][ T9] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.116269][ T9] ? skb_put+0x112/0x210
[ 86.117865][ T9] port100_send_cmd_async+0x84f/0xcc0
[ 86.119765][ T9] port100_set_command_type+0x1c8/0x390
[ 86.121527][ T9] ? pcpu_alloc+0x10/0x310
[ 86.123153][ T9] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.125282][ T9] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.127164][ T9] port100_probe+0x7b2/0xba0
[ 86.128670][ T9] ? __pfx_port100_probe+0x10/0x10
[ 86.130335][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.132185][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.134317][ T9] ? __pm_runtime_set_status+0x994/0xc80
[ 86.136185][ T9] usb_probe_interface+0x653/0xc60
[ 86.138471][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.140416][ T9] really_probe+0x254/0xae0
[ 86.141936][ T9] __driver_probe_device+0x1e8/0x360
[ 86.143725][ T9] driver_probe_device+0x4f/0x240
[ 86.145516][ T9] __device_attach_driver+0x270/0x410
[ 86.147340][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.149192][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.151825][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.154510][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.156836][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.159371][ T9] __device_attach+0x2c4/0x450
[ 86.161618][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.163868][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.165968][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.168348][ T9] device_initial_probe+0xa1/0xd0
[ 86.170853][ T9] bus_probe_device+0x12a/0x220
[ 86.172994][ T9] device_add+0x7d7/0xb80
[ 86.174783][ T9] usb_set_configuration+0x1ad8/0x2180
[ 86.177108][ T9] usb_generic_driver_probe+0x8d/0x150
[ 86.179350][ T9] usb_probe_device+0x1c3/0x3b0
[ 86.180924][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 86.182977][ T9] really_probe+0x254/0xae0
[ 86.184783][ T9] __driver_probe_device+0x1e8/0x360
[ 86.186657][ T9] driver_probe_device+0x4f/0x240
[ 86.188283][ T9] __device_attach_driver+0x270/0x410
[ 86.190049][ T9] bus_for_each_drv+0x258/0x2f0
[ 86.191989][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 86.194377][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.196526][ T9] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.198302][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.200182][ T9] __device_attach+0x2c4/0x450
[ 86.201724][ T9] ? __pfx___device_attach+0x10/0x10
[ 86.203439][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.205064][ T9] ? _raw_spin_unlock+0x28/0x50
[ 86.206657][ T9] device_initial_probe+0xa1/0xd0
[ 86.208285][ T9] bus_probe_device+0x12a/0x220
[ 86.209882][ T9] device_add+0x7d7/0xb80
[ 86.211279][ T9] usb_new_device+0x99d/0x1620
[ 86.213058][ T9] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.215789][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 86.218178][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.220271][ T9] hub_event+0x28e8/0x4d30
[ 86.222220][ T9] ? do_raw_spin_unlock+0x4d/0x210
[ 86.224513][ T9] ? __pfx_hub_event+0x10/0x10
[ 86.226847][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.229675][ T9] ? rcu_is_watching+0x15/0xb0
[ 86.231685][ T9] ? process_scheduled_works+0xa20/0x14e0
[ 86.233934][ T9] process_scheduled_works+0xa8e/0x14e0
[ 86.236099][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.239166][ T9] ? assign_work+0x3cf/0x5d0
[ 86.241062][ T9] worker_thread+0xa47/0xfb0
[ 86.243115][ T9] kthread+0x388/0x470
[ 86.244863][ T9] ? __pfx_worker_thread+0x10/0x10
[ 86.246994][ T9] ? __pfx_kthread+0x10/0x10
[ 86.248916][ T9] ret_from_fork+0x514/0xb70
[ 86.250902][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 86.252954][ T9] ? __switch_to+0xc89/0x1420
[ 86.254876][ T9] ? __pfx_kthread+0x10/0x10
[ 86.256858][ T9] ret_from_fork_asm+0x1a/0x30
[ 86.258883][ T9]
[ 86.260576][ T9] Kernel Offset: disabled
[ 86.262381][ T9] Rebooting in 86400 seconds..