program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0) (async)
syz_usb_disconnect(r0)
[ 122.536095][ T5293] Bluetooth: hci0: command tx timeout
[ 122.861572][ T5316] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 123.017424][ T5316] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 123.020983][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 123.031533][ T5316] usb 5-1: Product: syz
[ 123.033295][ T5316] usb 5-1: Manufacturer: syz
[ 123.035698][ T5316] usb 5-1: SerialNumber: syz
[ 123.460441][ T5316] ------------[ cut here ]------------
[ 123.462619][ T5316] URB ffff888040021f00 submitted while active
[ 123.464774][ T5316] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/5316
[ 123.468148][ T5316] Modules linked in:
[ 123.469604][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 123.473216][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.476514][ T5316] Workqueue: usb_hub_wq hub_event
[ 123.478198][ T5316] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 123.480043][ T5316] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 123.486379][ T5316] RSP: 0018:ffffc9000dca6b80 EFLAGS: 00010293
[ 123.488436][ T5316] RAX: ffffffff876314f2 RBX: ffff888040021f00 RCX: ffff888013668000
[ 123.491047][ T5316] RDX: 0000000000000000 RSI: ffff888040021f00 RDI: ffffffff9065b500
[ 123.493763][ T5316] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 123.496371][ T5316] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88804016c458
[ 123.499260][ T5316] R13: 1ffff1100802d88b R14: ffff888040021f08 R15: 0000000000000cc0
[ 123.502096][ T5316] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 123.505109][ T5316] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 123.507490][ T5316] CR2: 00007fa4dfd50320 CR3: 0000000012ad8000 CR4: 0000000000352ef0
[ 123.510424][ T5316] Call Trace:
[ 123.511631][ T5316]
[ 123.512671][ T5316] ? __kmalloc_cache_noprof+0x150/0x660
[ 123.514643][ T5316] ? port100_send_cmd_async+0xbd/0xcc0
[ 123.516397][ T5316] ? skb_put+0x112/0x210
[ 123.519674][ T5316] port100_send_cmd_async+0x84f/0xcc0
[ 123.521621][ T5316] port100_set_command_type+0x1c8/0x390
[ 123.523475][ T5316] ? pcpu_alloc+0x10/0x310
[ 123.524993][ T5316] ? __pfx_port100_set_command_type+0x10/0x10
[ 123.526996][ T5316] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 123.528942][ T5316] port100_probe+0x7b2/0xba0
[ 123.530544][ T5316] ? __pfx_port100_probe+0x10/0x10
[ 123.532286][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.534107][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.536114][ T5316] ? __pm_runtime_set_status+0x994/0xc80
[ 123.538053][ T5316] usb_probe_interface+0x653/0xc60
[ 123.539758][ T5316] ? __pfx_usb_probe_interface+0x10/0x10
[ 123.541694][ T5316] really_probe+0x254/0xae0
[ 123.543261][ T5316] __driver_probe_device+0x1e8/0x360
[ 123.545094][ T5316] driver_probe_device+0x4f/0x240
[ 123.546814][ T5316] __device_attach_driver+0x270/0x410
[ 123.548624][ T5316] bus_for_each_drv+0x258/0x2f0
[ 123.550296][ T5316] ? __pfx___device_attach_driver+0x10/0x10
[ 123.553002][ T5316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 123.554830][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.556558][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.558530][ T5316] __device_attach+0x2c4/0x450
[ 123.560171][ T5316] ? __pfx___device_attach+0x10/0x10
[ 123.561970][ T5316] ? do_raw_spin_unlock+0x4d/0x210
[ 123.563911][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 123.565540][ T5316] device_initial_probe+0xa1/0xd0
[ 123.567218][ T5316] bus_probe_device+0x12a/0x220
[ 123.569047][ T5316] device_add+0x7d7/0xb80
[ 123.570574][ T5316] usb_set_configuration+0x1ad8/0x2180
[ 123.572414][ T5316] usb_generic_driver_probe+0x8d/0x150
[ 123.574250][ T5316] usb_probe_device+0x1c3/0x3b0
[ 123.575881][ T5316] ? __pfx_usb_probe_device+0x10/0x10
[ 123.577670][ T5316] really_probe+0x254/0xae0
[ 123.579205][ T5316] __driver_probe_device+0x1e8/0x360
[ 123.581591][ T5316] driver_probe_device+0x4f/0x240
[ 123.583728][ T5316] __device_attach_driver+0x270/0x410
[ 123.585607][ T5316] bus_for_each_drv+0x258/0x2f0
[ 123.587226][ T5316] ? __pfx___device_attach_driver+0x10/0x10
[ 123.589165][ T5316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 123.590979][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.593232][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.595758][ T5316] __device_attach+0x2c4/0x450
[ 123.597819][ T5316] ? __pfx___device_attach+0x10/0x10
[ 123.600098][ T5316] ? do_raw_spin_unlock+0x4d/0x210
[ 123.602367][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 123.604642][ T5316] device_initial_probe+0xa1/0xd0
[ 123.607649][ T5316] bus_probe_device+0x12a/0x220
[ 123.610183][ T5316] device_add+0x7d7/0xb80
[ 123.612246][ T5316] usb_new_device+0x99d/0x1620
[ 123.614435][ T5316] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 123.617368][ T5316] ? __pfx_usb_new_device+0x10/0x10
[ 123.619622][ T5316] ? _raw_spin_unlock_irq+0x23/0x50
[ 123.622218][ T5316] hub_event+0x28e8/0x4d30
[ 123.624732][ T5316] ? __pfx_hub_event+0x10/0x10
[ 123.627108][ T5316] ? process_scheduled_works+0xa20/0x14e0
[ 123.629632][ T5316] ? rcu_is_watching+0x15/0xb0
[ 123.631865][ T5316] ? process_scheduled_works+0xa20/0x14e0
[ 123.634346][ T5316] process_scheduled_works+0xa8e/0x14e0
[ 123.636753][ T5316] ? __pfx_process_scheduled_works+0x10/0x10
[ 123.639299][ T5316] ? assign_work+0x3cf/0x5d0
[ 123.641447][ T5316] worker_thread+0xa47/0xfb0
[ 123.643513][ T5316] ? __kthread_parkme+0x71/0x1f0
[ 123.645608][ T5316] kthread+0x388/0x470
[ 123.647250][ T5316] ? __pfx_worker_thread+0x10/0x10
[ 123.649454][ T5316] ? __pfx_kthread+0x10/0x10
[ 123.651500][ T5316] ret_from_fork+0x514/0xb70
[ 123.653516][ T5316] ? __pfx_ret_from_fork+0x10/0x10
[ 123.655761][ T5316] ? __switch_to+0xc89/0x1420
[ 123.657905][ T5316] ? __pfx_kthread+0x10/0x10
[ 123.660033][ T5316] ret_from_fork_asm+0x1a/0x30
[ 123.662210][ T5316]
[ 123.663559][ T5316] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 123.666573][ T5316] CPU: 0 UID: 0 PID: 5316 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 123.670426][ T5316] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 123.674673][ T5316] Workqueue: usb_hub_wq hub_event
[ 123.676740][ T5316] Call Trace:
[ 123.678177][ T5316]
[ 123.679422][ T5316] vpanic+0x56c/0xa60
[ 123.681157][ T5316] ? __pfx__printk+0x10/0x10
[ 123.683089][ T5316] ? __pfx_vpanic+0x10/0x10
[ 123.684963][ T5316] ? is_bpf_text_address+0x292/0x2b0
[ 123.687103][ T5316] ? is_bpf_text_address+0x26/0x2b0
[ 123.689307][ T5316] panic+0xc5/0xd0
[ 123.690783][ T5316] ? __pfx_panic+0x10/0x10
[ 123.692513][ T5316] ? ret_from_fork_asm+0x1a/0x30
[ 123.694449][ T5316] __warn+0x315/0x4c0
[ 123.695885][ T5316] ? usb_submit_urb+0x79/0x18b0
[ 123.697506][ T5316] ? usb_submit_urb+0x79/0x18b0
[ 123.699170][ T5316] __report_bug+0x276/0x570
[ 123.701135][ T5316] ? kasan_save_track+0x4f/0x80
[ 123.703178][ T5316] ? kasan_save_track+0x3e/0x80
[ 123.705186][ T5316] ? usb_submit_urb+0x79/0x18b0
[ 123.707234][ T5316] ? __pfx___report_bug+0x10/0x10
[ 123.709364][ T5316] ? __pfx___mutex_trylock_common+0x10/0x10
[ 123.711824][ T5316] ? rcu_is_watching+0x15/0xb0
[ 123.713933][ T5316] ? trace_contention_end+0x3d/0x140
[ 123.716213][ T5316] report_bug_entry+0x19a/0x290
[ 123.718255][ T5316] ? usb_submit_urb+0x7c/0x18b0
[ 123.720323][ T5316] ? usb_submit_urb+0x81/0x18b0
[ 123.722427][ T5316] handle_bug+0xce/0x200
[ 123.724219][ T5316] exc_invalid_op+0x1a/0x50
[ 123.726409][ T5316] asm_exc_invalid_op+0x1a/0x20
[ 123.728423][ T5316] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 123.730693][ T5316] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 123.737735][ T5316] RSP: 0018:ffffc9000dca6b80 EFLAGS: 00010293
[ 123.740051][ T5316] RAX: ffffffff876314f2 RBX: ffff888040021f00 RCX: ffff888013668000
[ 123.742988][ T5316] RDX: 0000000000000000 RSI: ffff888040021f00 RDI: ffffffff9065b500
[ 123.745865][ T5316] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 123.748750][ T5316] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88804016c458
[ 123.751714][ T5316] R13: 1ffff1100802d88b R14: ffff888040021f08 R15: 0000000000000cc0
[ 123.754608][ T5316] ? usb_submit_urb+0x72/0x18b0
[ 123.756512][ T5316] ? __kmalloc_cache_noprof+0x150/0x660
[ 123.758538][ T5316] ? port100_send_cmd_async+0xbd/0xcc0
[ 123.760575][ T5316] ? skb_put+0x112/0x210
[ 123.762235][ T5316] port100_send_cmd_async+0x84f/0xcc0
[ 123.764245][ T5316] port100_set_command_type+0x1c8/0x390
[ 123.766274][ T5316] ? pcpu_alloc+0x10/0x310
[ 123.767932][ T5316] ? __pfx_port100_set_command_type+0x10/0x10
[ 123.770239][ T5316] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 123.772426][ T5316] port100_probe+0x7b2/0xba0
[ 123.774213][ T5316] ? __pfx_port100_probe+0x10/0x10
[ 123.776147][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.778152][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.780344][ T5316] ? __pm_runtime_set_status+0x994/0xc80
[ 123.782455][ T5316] usb_probe_interface+0x653/0xc60
[ 123.784387][ T5316] ? __pfx_usb_probe_interface+0x10/0x10
[ 123.786466][ T5316] really_probe+0x254/0xae0
[ 123.788159][ T5316] __driver_probe_device+0x1e8/0x360
[ 123.790151][ T5316] driver_probe_device+0x4f/0x240
[ 123.792006][ T5316] __device_attach_driver+0x270/0x410
[ 123.794025][ T5316] bus_for_each_drv+0x258/0x2f0
[ 123.795889][ T5316] ? __pfx___device_attach_driver+0x10/0x10
[ 123.798154][ T5316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 123.800288][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.802278][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.804495][ T5316] __device_attach+0x2c4/0x450
[ 123.806304][ T5316] ? __pfx___device_attach+0x10/0x10
[ 123.808267][ T5316] ? do_raw_spin_unlock+0x4d/0x210
[ 123.810188][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 123.812025][ T5316] device_initial_probe+0xa1/0xd0
[ 123.813928][ T5316] bus_probe_device+0x12a/0x220
[ 123.815714][ T5316] device_add+0x7d7/0xb80
[ 123.817345][ T5316] usb_set_configuration+0x1ad8/0x2180
[ 123.819393][ T5316] usb_generic_driver_probe+0x8d/0x150
[ 123.821515][ T5316] usb_probe_device+0x1c3/0x3b0
[ 123.823320][ T5316] ? __pfx_usb_probe_device+0x10/0x10
[ 123.825374][ T5316] really_probe+0x254/0xae0
[ 123.827055][ T5316] __driver_probe_device+0x1e8/0x360
[ 123.828954][ T5316] driver_probe_device+0x4f/0x240
[ 123.830887][ T5316] __device_attach_driver+0x270/0x410
[ 123.832981][ T5316] bus_for_each_drv+0x258/0x2f0
[ 123.834870][ T5316] ? __pfx___device_attach_driver+0x10/0x10
[ 123.837160][ T5316] ? __pfx_bus_for_each_drv+0x10/0x10
[ 123.839151][ T5316] ? lockdep_hardirqs_on+0x7a/0x110
[ 123.841131][ T5316] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 123.843319][ T5316] __device_attach+0x2c4/0x450
[ 123.845092][ T5316] ? __pfx___device_attach+0x10/0x10
[ 123.847087][ T5316] ? do_raw_spin_unlock+0x4d/0x210
[ 123.849172][ T5316] ? _raw_spin_unlock+0x28/0x50
[ 123.851063][ T5316] device_initial_probe+0xa1/0xd0
[ 123.852930][ T5316] bus_probe_device+0x12a/0x220
[ 123.854638][ T5316] device_add+0x7d7/0xb80
[ 123.856228][ T5316] usb_new_device+0x99d/0x1620
[ 123.858011][ T5316] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 123.860176][ T5316] ? __pfx_usb_new_device+0x10/0x10
[ 123.862024][ T5316] ? _raw_spin_unlock_irq+0x23/0x50
[ 123.863883][ T5316] hub_event+0x28e8/0x4d30
[ 123.865539][ T5316] ? __pfx_hub_event+0x10/0x10
[ 123.867316][ T5316] ? process_scheduled_works+0xa20/0x14e0
[ 123.869602][ T5316] ? rcu_is_watching+0x15/0xb0
[ 123.871535][ T5316] ? process_scheduled_works+0xa20/0x14e0
[ 123.873881][ T5316] process_scheduled_works+0xa8e/0x14e0
[ 123.876173][ T5316] ? __pfx_process_scheduled_works+0x10/0x10
[ 123.878666][ T5316] ? assign_work+0x3cf/0x5d0
[ 123.880629][ T5316] worker_thread+0xa47/0xfb0
[ 123.882557][ T5316] ? __kthread_parkme+0x71/0x1f0
[ 123.884639][ T5316] kthread+0x388/0x470
[ 123.886365][ T5316] ? __pfx_worker_thread+0x10/0x10
[ 123.888459][ T5316] ? __pfx_kthread+0x10/0x10
[ 123.890381][ T5316] ret_from_fork+0x514/0xb70
[ 123.892257][ T5316] ? __pfx_ret_from_fork+0x10/0x10
[ 123.894466][ T5316] ? __switch_to+0xc89/0x1420
[ 123.896408][ T5316] ? __pfx_kthread+0x10/0x10
[ 123.898422][ T5316] ret_from_fork_asm+0x1a/0x30
[ 123.900471][ T5316]
[ 123.902169][ T5316] Kernel Offset: disabled
[ 123.903978][ T5316] Rebooting in 86400 seconds..