program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
[ 87.107305][ T10] cfg80211: failed to load regulatory.db
[ 87.375220][ T4652] Bluetooth: hci0: command tx timeout
[ 87.454682][ T803] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 87.609026][ T803] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 87.612804][ T803] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 87.616427][ T803] usb 5-1: Product: syz
[ 87.618167][ T803] usb 5-1: Manufacturer: syz
[ 87.620103][ T803] usb 5-1: SerialNumber: syz
[ 88.039602][ T803] ------------[ cut here ]------------
[ 88.042016][ T803] URB ffff888011cb0000 submitted while active
[ 88.044578][ T803] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:2/803
[ 88.048689][ T803] Modules linked in:
[ 88.050405][ T803] CPU: 0 UID: 0 PID: 803 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 88.054112][ T803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.058173][ T803] Workqueue: usb_hub_wq hub_event
[ 88.060302][ T803] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 88.062621][ T803] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 88.070190][ T803] RSP: 0018:ffffc90003e4eb80 EFLAGS: 00010293
[ 88.072679][ T803] RAX: ffffffff876314f2 RBX: ffff888011cb0000 RCX: ffff88801ae08000
[ 88.075894][ T803] RDX: 0000000000000000 RSI: ffff888011cb0000 RDI: ffffffff9065b500
[ 88.079139][ T803] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 88.082492][ T803] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888012b4c458
[ 88.085983][ T803] R13: 1ffff1100256988b R14: ffff888011cb0008 R15: 0000000000000cc0
[ 88.089314][ T803] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 88.093002][ T803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 88.096239][ T803] CR2: 00007f65166157f0 CR3: 0000000012ea1000 CR4: 0000000000352ef0
[ 88.099596][ T803] Call Trace:
[ 88.101077][ T803]
[ 88.102408][ T803] ? __kmalloc_cache_noprof+0x150/0x660
[ 88.104793][ T803] ? port100_send_cmd_async+0xbd/0xcc0
[ 88.107560][ T803] ? skb_put+0x112/0x210
[ 88.109781][ T803] port100_send_cmd_async+0x84f/0xcc0
[ 88.112074][ T803] port100_set_command_type+0x1c8/0x390
[ 88.114423][ T803] ? pcpu_alloc+0x10/0x310
[ 88.116350][ T803] ? __pfx_port100_set_command_type+0x10/0x10
[ 88.118937][ T803] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.121421][ T803] port100_probe+0x7b2/0xba0
[ 88.123439][ T803] ? __pfx_port100_probe+0x10/0x10
[ 88.125683][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.127916][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.130398][ T803] ? __pm_runtime_set_status+0x994/0xc80
[ 88.132784][ T803] usb_probe_interface+0x653/0xc60
[ 88.134987][ T803] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.137295][ T803] really_probe+0x254/0xae0
[ 88.139266][ T803] __driver_probe_device+0x1e8/0x360
[ 88.141556][ T803] driver_probe_device+0x4f/0x240
[ 88.143706][ T803] __device_attach_driver+0x270/0x410
[ 88.145976][ T803] bus_for_each_drv+0x258/0x2f0
[ 88.148027][ T803] ? __pfx___device_attach_driver+0x10/0x10
[ 88.150525][ T803] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.152776][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.154994][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.157403][ T803] __device_attach+0x2c4/0x450
[ 88.159477][ T803] ? __pfx___device_attach+0x10/0x10
[ 88.161701][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.163933][ T803] ? _raw_spin_unlock+0x28/0x50
[ 88.166025][ T803] device_initial_probe+0xa1/0xd0
[ 88.168200][ T803] bus_probe_device+0x12a/0x220
[ 88.170315][ T803] device_add+0x7d7/0xb80
[ 88.172200][ T803] usb_set_configuration+0x1ad8/0x2180
[ 88.175298][ T803] usb_generic_driver_probe+0x8d/0x150
[ 88.177676][ T803] usb_probe_device+0x1c3/0x3b0
[ 88.179825][ T803] ? __pfx_usb_probe_device+0x10/0x10
[ 88.182104][ T803] really_probe+0x254/0xae0
[ 88.184070][ T803] __driver_probe_device+0x1e8/0x360
[ 88.186337][ T803] driver_probe_device+0x4f/0x240
[ 88.188535][ T803] __device_attach_driver+0x270/0x410
[ 88.190844][ T803] bus_for_each_drv+0x258/0x2f0
[ 88.192943][ T803] ? __pfx___device_attach_driver+0x10/0x10
[ 88.195496][ T803] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.197754][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.200027][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.202519][ T803] __device_attach+0x2c4/0x450
[ 88.204660][ T803] ? __pfx___device_attach+0x10/0x10
[ 88.206904][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.209482][ T803] ? _raw_spin_unlock+0x28/0x50
[ 88.211523][ T803] device_initial_probe+0xa1/0xd0
[ 88.213637][ T803] bus_probe_device+0x12a/0x220
[ 88.216007][ T803] device_add+0x7d7/0xb80
[ 88.217880][ T803] usb_new_device+0x99d/0x1620
[ 88.219927][ T803] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.222451][ T803] ? __pfx_usb_new_device+0x10/0x10
[ 88.224735][ T803] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.226920][ T803] hub_event+0x28e8/0x4d30
[ 88.228872][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.231067][ T803] ? __pfx_hub_event+0x10/0x10
[ 88.233082][ T803] ? process_scheduled_works+0xa20/0x14e0
[ 88.235467][ T803] ? rcu_is_watching+0x15/0xb0
[ 88.237531][ T803] ? process_scheduled_works+0xa20/0x14e0
[ 88.239955][ T803] process_scheduled_works+0xa8e/0x14e0
[ 88.242321][ T803] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.244906][ T803] ? assign_work+0x3cf/0x5d0
[ 88.246869][ T803] worker_thread+0xa47/0xfb0
[ 88.248896][ T803] kthread+0x388/0x470
[ 88.250685][ T803] ? __pfx_worker_thread+0x10/0x10
[ 88.252829][ T803] ? __pfx_kthread+0x10/0x10
[ 88.255710][ T803] ret_from_fork+0x514/0xb70
[ 88.257726][ T803] ? __pfx_ret_from_fork+0x10/0x10
[ 88.260022][ T803] ? __switch_to+0xc89/0x1420
[ 88.262043][ T803] ? __pfx_kthread+0x10/0x10
[ 88.264030][ T803] ret_from_fork_asm+0x1a/0x30
[ 88.266122][ T803]
[ 88.267547][ T803] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 88.270546][ T803] CPU: 0 UID: 0 PID: 803 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full)
[ 88.274405][ T803] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 88.278521][ T803] Workqueue: usb_hub_wq hub_event
[ 88.280606][ T803] Call Trace:
[ 88.282036][ T803]
[ 88.283343][ T803] vpanic+0x56c/0xa60
[ 88.284969][ T803] ? __pfx__printk+0x10/0x10
[ 88.286878][ T803] ? __pfx_vpanic+0x10/0x10
[ 88.288770][ T803] ? is_bpf_text_address+0x292/0x2b0
[ 88.290944][ T803] ? is_bpf_text_address+0x26/0x2b0
[ 88.293064][ T803] panic+0xc5/0xd0
[ 88.294652][ T803] ? __pfx_panic+0x10/0x10
[ 88.296513][ T803] ? ret_from_fork_asm+0x1a/0x30
[ 88.298591][ T803] __warn+0x315/0x4c0
[ 88.300235][ T803] ? usb_submit_urb+0x79/0x18b0
[ 88.302252][ T803] ? usb_submit_urb+0x79/0x18b0
[ 88.304225][ T803] __report_bug+0x276/0x570
[ 88.306064][ T803] ? kasan_save_track+0x4f/0x80
[ 88.308075][ T803] ? kasan_save_track+0x3e/0x80
[ 88.310102][ T803] ? usb_submit_urb+0x79/0x18b0
[ 88.312109][ T803] ? __pfx___report_bug+0x10/0x10
[ 88.314167][ T803] ? __pfx___mutex_trylock_common+0x10/0x10
[ 88.316587][ T803] ? rcu_is_watching+0x15/0xb0
[ 88.318593][ T803] ? trace_contention_end+0x3d/0x140
[ 88.320757][ T803] report_bug_entry+0x19a/0x290
[ 88.322782][ T803] ? usb_submit_urb+0x7c/0x18b0
[ 88.324859][ T803] ? usb_submit_urb+0x81/0x18b0
[ 88.326880][ T803] handle_bug+0xce/0x200
[ 88.328649][ T803] exc_invalid_op+0x1a/0x50
[ 88.330519][ T803] asm_exc_invalid_op+0x1a/0x20
[ 88.332564][ T803] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 88.334860][ T803] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 88.342868][ T803] RSP: 0018:ffffc90003e4eb80 EFLAGS: 00010293
[ 88.345339][ T803] RAX: ffffffff876314f2 RBX: ffff888011cb0000 RCX: ffff88801ae08000
[ 88.348612][ T803] RDX: 0000000000000000 RSI: ffff888011cb0000 RDI: ffffffff9065b500
[ 88.351847][ T803] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 88.355063][ T803] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff888012b4c458
[ 88.358260][ T803] R13: 1ffff1100256988b R14: ffff888011cb0008 R15: 0000000000000cc0
[ 88.361454][ T803] ? usb_submit_urb+0x72/0x18b0
[ 88.363465][ T803] ? __kmalloc_cache_noprof+0x150/0x660
[ 88.365722][ T803] ? port100_send_cmd_async+0xbd/0xcc0
[ 88.367956][ T803] ? skb_put+0x112/0x210
[ 88.369696][ T803] port100_send_cmd_async+0x84f/0xcc0
[ 88.371907][ T803] port100_set_command_type+0x1c8/0x390
[ 88.374156][ T803] ? pcpu_alloc+0x10/0x310
[ 88.375974][ T803] ? __pfx_port100_set_command_type+0x10/0x10
[ 88.378460][ T803] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.380874][ T803] port100_probe+0x7b2/0xba0
[ 88.382825][ T803] ? __pfx_port100_probe+0x10/0x10
[ 88.384929][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.387026][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.389397][ T803] ? __pm_runtime_set_status+0x994/0xc80
[ 88.391709][ T803] usb_probe_interface+0x653/0xc60
[ 88.393771][ T803] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.396084][ T803] really_probe+0x254/0xae0
[ 88.397944][ T803] __driver_probe_device+0x1e8/0x360
[ 88.400123][ T803] driver_probe_device+0x4f/0x240
[ 88.402163][ T803] __device_attach_driver+0x270/0x410
[ 88.404327][ T803] bus_for_each_drv+0x258/0x2f0
[ 88.406308][ T803] ? __pfx___device_attach_driver+0x10/0x10
[ 88.408771][ T803] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.411028][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.413197][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.415547][ T803] __device_attach+0x2c4/0x450
[ 88.417490][ T803] ? __pfx___device_attach+0x10/0x10
[ 88.419658][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.421741][ T803] ? _raw_spin_unlock+0x28/0x50
[ 88.423726][ T803] device_initial_probe+0xa1/0xd0
[ 88.425785][ T803] bus_probe_device+0x12a/0x220
[ 88.427770][ T803] device_add+0x7d7/0xb80
[ 88.429547][ T803] usb_set_configuration+0x1ad8/0x2180
[ 88.431796][ T803] usb_generic_driver_probe+0x8d/0x150
[ 88.434016][ T803] usb_probe_device+0x1c3/0x3b0
[ 88.435995][ T803] ? __pfx_usb_probe_device+0x10/0x10
[ 88.438147][ T803] really_probe+0x254/0xae0
[ 88.440027][ T803] __driver_probe_device+0x1e8/0x360
[ 88.442193][ T803] driver_probe_device+0x4f/0x240
[ 88.444256][ T803] __device_attach_driver+0x270/0x410
[ 88.446428][ T803] bus_for_each_drv+0x258/0x2f0
[ 88.448449][ T803] ? __pfx___device_attach_driver+0x10/0x10
[ 88.450840][ T803] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.453002][ T803] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.455115][ T803] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.457478][ T803] __device_attach+0x2c4/0x450
[ 88.459466][ T803] ? __pfx___device_attach+0x10/0x10
[ 88.461620][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.463713][ T803] ? _raw_spin_unlock+0x28/0x50
[ 88.465718][ T803] device_initial_probe+0xa1/0xd0
[ 88.467802][ T803] bus_probe_device+0x12a/0x220
[ 88.469804][ T803] device_add+0x7d7/0xb80
[ 88.471597][ T803] usb_new_device+0x99d/0x1620
[ 88.473540][ T803] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.475984][ T803] ? __pfx_usb_new_device+0x10/0x10
[ 88.478090][ T803] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.480229][ T803] hub_event+0x28e8/0x4d30
[ 88.482024][ T803] ? do_raw_spin_unlock+0x4d/0x210
[ 88.484106][ T803] ? __pfx_hub_event+0x10/0x10
[ 88.486029][ T803] ? process_scheduled_works+0xa20/0x14e0
[ 88.488297][ T803] ? rcu_is_watching+0x15/0xb0
[ 88.490195][ T803] ? process_scheduled_works+0xa20/0x14e0
[ 88.492489][ T803] process_scheduled_works+0xa8e/0x14e0
[ 88.494736][ T803] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.497191][ T803] ? assign_work+0x3cf/0x5d0
[ 88.499130][ T803] worker_thread+0xa47/0xfb0
[ 88.501050][ T803] kthread+0x388/0x470
[ 88.502749][ T803] ? __pfx_worker_thread+0x10/0x10
[ 88.504834][ T803] ? __pfx_kthread+0x10/0x10
[ 88.506774][ T803] ret_from_fork+0x514/0xb70
[ 88.508669][ T803] ? __pfx_ret_from_fork+0x10/0x10
[ 88.510800][ T803] ? __switch_to+0xc89/0x1420
[ 88.512718][ T803] ? __pfx_kthread+0x10/0x10
[ 88.514622][ T803] ret_from_fork_asm+0x1a/0x30
[ 88.516577][ T803]
[ 88.518248][ T803] Kernel Offset: disabled
[ 88.520060][ T803] Rebooting in 86400 seconds..