program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x5}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
[ 76.723765][ T1333] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.726151][ T1333] ieee802154 phy1 wpan1: encryption failed: -22
[ 77.028070][ T5309] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 77.137958][ T4653] Bluetooth: hci0: command tx timeout
[ 77.183238][ T5309] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 77.186916][ T5309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 77.190465][ T5309] usb 5-1: Product: syz
[ 77.192227][ T5309] usb 5-1: Manufacturer: syz
[ 77.194159][ T5309] usb 5-1: SerialNumber: syz
[ 77.715817][ T5309] ------------[ cut here ]------------
[ 77.718605][ T5309] URB ffff888032b03a00 submitted while active
[ 77.721314][ T5309] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:5/5309
[ 77.725750][ T5309] Modules linked in:
[ 77.727627][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 77.731592][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.735993][ T5309] Workqueue: usb_hub_wq hub_event
[ 77.738595][ T5309] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 77.741929][ T5309] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 77.750277][ T5309] RSP: 0018:ffffc9000e00eb80 EFLAGS: 00010293
[ 77.753312][ T5309] RAX: ffffffff876314f2 RBX: ffff888032b03a00 RCX: ffff888000944a80
[ 77.756940][ T5309] RDX: 0000000000000000 RSI: ffff888032b03a00 RDI: ffffffff9065b500
[ 77.760439][ T5309] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 77.763820][ T5309] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880121d5c58
[ 77.767493][ T5309] R13: 1ffff1100243ab8b R14: ffff888032b03a08 R15: 0000000000000cc0
[ 77.771145][ T5309] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 77.774970][ T5309] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 77.780253][ T5309] CR2: 00007f6721248f98 CR3: 0000000012bec000 CR4: 0000000000352ef0
[ 77.783692][ T5309] Call Trace:
[ 77.785308][ T5309]
[ 77.786649][ T5309] ? __kmalloc_cache_noprof+0x150/0x660
[ 77.789099][ T5309] ? port100_send_cmd_async+0xbd/0xcc0
[ 77.791524][ T5309] ? skb_put+0x112/0x210
[ 77.793515][ T5309] port100_send_cmd_async+0x84f/0xcc0
[ 77.795962][ T5309] port100_set_command_type+0x1c8/0x390
[ 77.798411][ T5309] ? pcpu_alloc+0x10/0x310
[ 77.800456][ T5309] ? __pfx_port100_set_command_type+0x10/0x10
[ 77.803122][ T5309] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 77.805733][ T5309] port100_probe+0x7b2/0xba0
[ 77.807735][ T5309] ? __pfx_port100_probe+0x10/0x10
[ 77.809947][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.811822][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.813777][ T5309] ? __pm_runtime_set_status+0x994/0xc80
[ 77.815783][ T5309] usb_probe_interface+0x653/0xc60
[ 77.818379][ T5309] ? __pfx_usb_probe_interface+0x10/0x10
[ 77.820931][ T5309] really_probe+0x254/0xae0
[ 77.823005][ T5309] __driver_probe_device+0x1e8/0x360
[ 77.825318][ T5309] driver_probe_device+0x4f/0x240
[ 77.827514][ T5309] __device_attach_driver+0x270/0x410
[ 77.830217][ T5309] bus_for_each_drv+0x258/0x2f0
[ 77.834009][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 77.836564][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 77.838887][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.841124][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.843586][ T5309] __device_attach+0x2c4/0x450
[ 77.845687][ T5309] ? __pfx___device_attach+0x10/0x10
[ 77.847947][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 77.850151][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 77.852302][ T5309] device_initial_probe+0xa1/0xd0
[ 77.854557][ T5309] bus_probe_device+0x12a/0x220
[ 77.857094][ T5309] device_add+0x7d7/0xb80
[ 77.859066][ T5309] usb_set_configuration+0x1ad8/0x2180
[ 77.861403][ T5309] usb_generic_driver_probe+0x8d/0x150
[ 77.863764][ T5309] usb_probe_device+0x1c3/0x3b0
[ 77.865896][ T5309] ? __pfx_usb_probe_device+0x10/0x10
[ 77.868300][ T5309] really_probe+0x254/0xae0
[ 77.870962][ T5309] __driver_probe_device+0x1e8/0x360
[ 77.873700][ T5309] driver_probe_device+0x4f/0x240
[ 77.875950][ T5309] __device_attach_driver+0x270/0x410
[ 77.878284][ T5309] bus_for_each_drv+0x258/0x2f0
[ 77.880450][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 77.883038][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 77.885786][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 77.888320][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 77.890940][ T5309] __device_attach+0x2c4/0x450
[ 77.893367][ T5309] ? __pfx___device_attach+0x10/0x10
[ 77.895590][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 77.897923][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 77.900622][ T5309] device_initial_probe+0xa1/0xd0
[ 77.902931][ T5309] bus_probe_device+0x12a/0x220
[ 77.905049][ T5309] device_add+0x7d7/0xb80
[ 77.907000][ T5309] usb_new_device+0x99d/0x1620
[ 77.909110][ T5309] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 77.911686][ T5309] ? __pfx_usb_new_device+0x10/0x10
[ 77.913926][ T5309] ? _raw_spin_unlock_irq+0x23/0x50
[ 77.916181][ T5309] hub_event+0x28e8/0x4d30
[ 77.918224][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 77.920485][ T5309] ? __pfx_hub_event+0x10/0x10
[ 77.922573][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 77.925085][ T5309] ? rcu_is_watching+0x15/0xb0
[ 77.927324][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 77.929867][ T5309] process_scheduled_works+0xa8e/0x14e0
[ 77.932230][ T5309] ? __pfx_process_scheduled_works+0x10/0x10
[ 77.934781][ T5309] ? assign_work+0x3cf/0x5d0
[ 77.936839][ T5309] worker_thread+0xa47/0xfb0
[ 77.938990][ T5309] ? __kthread_parkme+0x71/0x1f0
[ 77.941197][ T5309] kthread+0x388/0x470
[ 77.943020][ T5309] ? __pfx_worker_thread+0x10/0x10
[ 77.945286][ T5309] ? __pfx_kthread+0x10/0x10
[ 77.947313][ T5309] ret_from_fork+0x514/0xb70
[ 77.949403][ T5309] ? __pfx_ret_from_fork+0x10/0x10
[ 77.951610][ T5309] ? __switch_to+0xc89/0x1420
[ 77.953619][ T5309] ? __pfx_kthread+0x10/0x10
[ 77.955638][ T5309] ret_from_fork_asm+0x1a/0x30
[ 77.957670][ T5309]
[ 77.959101][ T5309] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 77.962097][ T5309] CPU: 0 UID: 0 PID: 5309 Comm: kworker/0:5 Not tainted syzkaller #0 PREEMPT(full)
[ 77.965903][ T5309] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 77.969939][ T5309] Workqueue: usb_hub_wq hub_event
[ 77.972109][ T5309] Call Trace:
[ 77.973502][ T5309]
[ 77.974733][ T5309] vpanic+0x56c/0xa60
[ 77.976442][ T5309] ? __pfx__printk+0x10/0x10
[ 77.978362][ T5309] ? __pfx_vpanic+0x10/0x10
[ 77.980440][ T5309] ? is_bpf_text_address+0x292/0x2b0
[ 77.982606][ T5309] ? is_bpf_text_address+0x26/0x2b0
[ 77.984777][ T5309] panic+0xc5/0xd0
[ 77.986350][ T5309] ? __pfx_panic+0x10/0x10
[ 77.988276][ T5309] ? ret_from_fork_asm+0x1a/0x30
[ 77.990326][ T5309] __warn+0x315/0x4c0
[ 77.992038][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 77.994049][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 77.996059][ T5309] __report_bug+0x276/0x570
[ 77.997961][ T5309] ? kasan_save_track+0x4f/0x80
[ 78.000199][ T5309] ? kasan_save_track+0x3e/0x80
[ 78.002466][ T5309] ? usb_submit_urb+0x79/0x18b0
[ 78.004477][ T5309] ? __pfx___report_bug+0x10/0x10
[ 78.006595][ T5309] ? __pfx___mutex_trylock_common+0x10/0x10
[ 78.009054][ T5309] ? rcu_is_watching+0x15/0xb0
[ 78.011077][ T5309] ? trace_contention_end+0x3d/0x140
[ 78.013629][ T5309] report_bug_entry+0x19a/0x290
[ 78.015542][ T5309] ? usb_submit_urb+0x7c/0x18b0
[ 78.017281][ T5309] ? usb_submit_urb+0x81/0x18b0
[ 78.019206][ T5309] handle_bug+0xce/0x200
[ 78.020955][ T5309] exc_invalid_op+0x1a/0x50
[ 78.022651][ T5309] asm_exc_invalid_op+0x1a/0x20
[ 78.024300][ T5309] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 78.026378][ T5309] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 78.033394][ T5309] RSP: 0018:ffffc9000e00eb80 EFLAGS: 00010293
[ 78.035914][ T5309] RAX: ffffffff876314f2 RBX: ffff888032b03a00 RCX: ffff888000944a80
[ 78.039120][ T5309] RDX: 0000000000000000 RSI: ffff888032b03a00 RDI: ffffffff9065b500
[ 78.042362][ T5309] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 78.045605][ T5309] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff8880121d5c58
[ 78.048822][ T5309] R13: 1ffff1100243ab8b R14: ffff888032b03a08 R15: 0000000000000cc0
[ 78.052042][ T5309] ? usb_submit_urb+0x72/0x18b0
[ 78.054061][ T5309] ? __kmalloc_cache_noprof+0x150/0x660
[ 78.056376][ T5309] ? port100_send_cmd_async+0xbd/0xcc0
[ 78.058624][ T5309] ? skb_put+0x112/0x210
[ 78.060361][ T5309] port100_send_cmd_async+0x84f/0xcc0
[ 78.062441][ T5309] port100_set_command_type+0x1c8/0x390
[ 78.064534][ T5309] ? pcpu_alloc+0x10/0x310
[ 78.066274][ T5309] ? __pfx_port100_set_command_type+0x10/0x10
[ 78.068511][ T5309] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 78.070370][ T5309] port100_probe+0x7b2/0xba0
[ 78.071898][ T5309] ? __pfx_port100_probe+0x10/0x10
[ 78.073536][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.075505][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.077682][ T5309] ? __pm_runtime_set_status+0x994/0xc80
[ 78.079773][ T5309] usb_probe_interface+0x653/0xc60
[ 78.081586][ T5309] ? __pfx_usb_probe_interface+0x10/0x10
[ 78.083611][ T5309] really_probe+0x254/0xae0
[ 78.085285][ T5309] __driver_probe_device+0x1e8/0x360
[ 78.087219][ T5309] driver_probe_device+0x4f/0x240
[ 78.089117][ T5309] __device_attach_driver+0x270/0x410
[ 78.091125][ T5309] bus_for_each_drv+0x258/0x2f0
[ 78.093048][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 78.095285][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.097370][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.099202][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.101456][ T5309] __device_attach+0x2c4/0x450
[ 78.103295][ T5309] ? __pfx___device_attach+0x10/0x10
[ 78.105276][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 78.107210][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 78.109055][ T5309] device_initial_probe+0xa1/0xd0
[ 78.110946][ T5309] bus_probe_device+0x12a/0x220
[ 78.112806][ T5309] device_add+0x7d7/0xb80
[ 78.114470][ T5309] usb_set_configuration+0x1ad8/0x2180
[ 78.116637][ T5309] usb_generic_driver_probe+0x8d/0x150
[ 78.118732][ T5309] usb_probe_device+0x1c3/0x3b0
[ 78.120670][ T5309] ? __pfx_usb_probe_device+0x10/0x10
[ 78.122748][ T5309] really_probe+0x254/0xae0
[ 78.124577][ T5309] __driver_probe_device+0x1e8/0x360
[ 78.126644][ T5309] driver_probe_device+0x4f/0x240
[ 78.128619][ T5309] __device_attach_driver+0x270/0x410
[ 78.130679][ T5309] bus_for_each_drv+0x258/0x2f0
[ 78.132545][ T5309] ? __pfx___device_attach_driver+0x10/0x10
[ 78.134645][ T5309] ? __pfx_bus_for_each_drv+0x10/0x10
[ 78.136602][ T5309] ? lockdep_hardirqs_on+0x7a/0x110
[ 78.138534][ T5309] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 78.140654][ T5309] __device_attach+0x2c4/0x450
[ 78.142485][ T5309] ? __pfx___device_attach+0x10/0x10
[ 78.144537][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 78.146530][ T5309] ? _raw_spin_unlock+0x28/0x50
[ 78.148362][ T5309] device_initial_probe+0xa1/0xd0
[ 78.150089][ T5309] bus_probe_device+0x12a/0x220
[ 78.151748][ T5309] device_add+0x7d7/0xb80
[ 78.153325][ T5309] usb_new_device+0x99d/0x1620
[ 78.154991][ T5309] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 78.157020][ T5309] ? __pfx_usb_new_device+0x10/0x10
[ 78.158755][ T5309] ? _raw_spin_unlock_irq+0x23/0x50
[ 78.160575][ T5309] hub_event+0x28e8/0x4d30
[ 78.162104][ T5309] ? do_raw_spin_unlock+0x4d/0x210
[ 78.163892][ T5309] ? __pfx_hub_event+0x10/0x10
[ 78.165841][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 78.167932][ T5309] ? rcu_is_watching+0x15/0xb0
[ 78.169761][ T5309] ? process_scheduled_works+0xa20/0x14e0
[ 78.171969][ T5309] process_scheduled_works+0xa8e/0x14e0
[ 78.174064][ T5309] ? __pfx_process_scheduled_works+0x10/0x10
[ 78.176400][ T5309] ? assign_work+0x3cf/0x5d0
[ 78.178199][ T5309] worker_thread+0xa47/0xfb0
[ 78.180018][ T5309] ? __kthread_parkme+0x71/0x1f0
[ 78.181937][ T5309] kthread+0x388/0x470
[ 78.183487][ T5309] ? __pfx_worker_thread+0x10/0x10
[ 78.185345][ T5309] ? __pfx_kthread+0x10/0x10
[ 78.186915][ T5309] ret_from_fork+0x514/0xb70
[ 78.188693][ T5309] ? __pfx_ret_from_fork+0x10/0x10
[ 78.190644][ T5309] ? __switch_to+0xc89/0x1420
[ 78.192486][ T5309] ? __pfx_kthread+0x10/0x10
[ 78.194287][ T5309] ret_from_fork_asm+0x1a/0x30
[ 78.196227][ T5309]
[ 78.197840][ T5309] Kernel Offset: disabled
[ 78.199496][ T5309] Rebooting in 86400 seconds..