program:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6f5290000000000000003df00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdfd2b00d800")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcfd210100e100")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_disconnect(r0)
[ 87.102215][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 87.122559][ T4652] Bluetooth: hci0: command tx timeout
[ 87.277702][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 87.291285][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 87.295092][ T10] usb 5-1: Product: syz
[ 87.296964][ T10] usb 5-1: Manufacturer: syz
[ 87.298879][ T10] usb 5-1: SerialNumber: syz
[ 87.717364][ T10] ------------[ cut here ]------------
[ 87.719593][ T10] URB ffff88803eff3b00 submitted while active
[ 87.721996][ T10] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:1/10
[ 87.726527][ T10] Modules linked in:
[ 87.728231][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 87.731659][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.735404][ T10] Workqueue: usb_hub_wq hub_event
[ 87.737184][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 87.739155][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 87.746109][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 87.748658][ T10] RAX: ffffffff876314f2 RBX: ffff88803eff3b00 RCX: ffff88801bf0a540
[ 87.752062][ T10] RDX: 0000000000000000 RSI: ffff88803eff3b00 RDI: ffffffff9065b500
[ 87.756191][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 87.759518][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803486e458
[ 87.764303][ T10] R13: 1ffff1100690dc8b R14: ffff88803eff3b08 R15: 0000000000000cc0
[ 87.767616][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 87.770906][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 87.773141][ T10] CR2: 00007fb61e0157f0 CR3: 000000003ff87000 CR4: 0000000000352ef0
[ 87.775788][ T10] Call Trace:
[ 87.776990][ T10]
[ 87.778037][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 87.779916][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 87.781773][ T10] ? skb_put+0x112/0x210
[ 87.783361][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 87.785367][ T10] port100_set_command_type+0x1c8/0x390
[ 87.787479][ T10] ? pcpu_alloc+0x10/0x310
[ 87.789203][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 87.791588][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 87.793930][ T10] port100_probe+0x7b2/0xba0
[ 87.795763][ T10] ? __pfx_port100_probe+0x10/0x10
[ 87.797697][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.799651][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.801960][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 87.804326][ T10] usb_probe_interface+0x653/0xc60
[ 87.806634][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 87.809101][ T10] really_probe+0x254/0xae0
[ 87.811190][ T10] __driver_probe_device+0x1e8/0x360
[ 87.813726][ T10] driver_probe_device+0x4f/0x240
[ 87.815957][ T10] __device_attach_driver+0x270/0x410
[ 87.817809][ T10] bus_for_each_drv+0x258/0x2f0
[ 87.819425][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 87.821405][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 87.823246][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.825002][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.827295][ T10] __device_attach+0x2c4/0x450
[ 87.828990][ T10] ? __pfx___device_attach+0x10/0x10
[ 87.830909][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 87.833632][ T10] ? _raw_spin_unlock+0x28/0x50
[ 87.835490][ T10] device_initial_probe+0xa1/0xd0
[ 87.837451][ T10] bus_probe_device+0x12a/0x220
[ 87.839363][ T10] device_add+0x7d7/0xb80
[ 87.841186][ T10] usb_set_configuration+0x1ad8/0x2180
[ 87.843828][ T10] usb_generic_driver_probe+0x8d/0x150
[ 87.845892][ T10] usb_probe_device+0x1c3/0x3b0
[ 87.847820][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 87.849983][ T10] really_probe+0x254/0xae0
[ 87.851884][ T10] __driver_probe_device+0x1e8/0x360
[ 87.854034][ T10] driver_probe_device+0x4f/0x240
[ 87.856146][ T10] __device_attach_driver+0x270/0x410
[ 87.858258][ T10] bus_for_each_drv+0x258/0x2f0
[ 87.860200][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 87.862397][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 87.864558][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 87.866660][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 87.868814][ T10] __device_attach+0x2c4/0x450
[ 87.870557][ T10] ? __pfx___device_attach+0x10/0x10
[ 87.872454][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 87.874602][ T10] ? _raw_spin_unlock+0x28/0x50
[ 87.876556][ T10] device_initial_probe+0xa1/0xd0
[ 87.878481][ T10] bus_probe_device+0x12a/0x220
[ 87.880366][ T10] device_add+0x7d7/0xb80
[ 87.882026][ T10] usb_new_device+0x99d/0x1620
[ 87.884020][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 87.886319][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 87.888519][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 87.890705][ T10] hub_event+0x28e8/0x4d30
[ 87.892664][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 87.894608][ T10] ? __pfx_hub_event+0x10/0x10
[ 87.896669][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 87.899086][ T10] ? rcu_is_watching+0x15/0xb0
[ 87.901242][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 87.903752][ T10] process_scheduled_works+0xa8e/0x14e0
[ 87.906245][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 87.908852][ T10] ? assign_work+0x3cf/0x5d0
[ 87.910880][ T10] worker_thread+0xa47/0xfb0
[ 87.913142][ T10] kthread+0x388/0x470
[ 87.915023][ T10] ? __pfx_worker_thread+0x10/0x10
[ 87.917351][ T10] ? __pfx_kthread+0x10/0x10
[ 87.919541][ T10] ret_from_fork+0x514/0xb70
[ 87.921749][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 87.925001][ T10] ? __switch_to+0xc89/0x1420
[ 87.927022][ T10] ? __pfx_kthread+0x10/0x10
[ 87.929579][ T10] ret_from_fork_asm+0x1a/0x30
[ 87.931690][ T10]
[ 87.933727][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 87.936880][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 87.940850][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 87.944831][ T10] Workqueue: usb_hub_wq hub_event
[ 87.946736][ T10] Call Trace:
[ 87.948045][ T10]
[ 87.949271][ T10] vpanic+0x56c/0xa60
[ 87.950930][ T10] ? __pfx__printk+0x10/0x10
[ 87.952870][ T10] ? __pfx_vpanic+0x10/0x10
[ 87.954770][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 87.956942][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 87.959151][ T10] panic+0xc5/0xd0
[ 87.960781][ T10] ? __pfx_panic+0x10/0x10
[ 87.962687][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 87.964834][ T10] __warn+0x315/0x4c0
[ 87.966480][ T10] ? usb_submit_urb+0x79/0x18b0
[ 87.968478][ T10] ? usb_submit_urb+0x79/0x18b0
[ 87.970536][ T10] __report_bug+0x276/0x570
[ 87.972434][ T10] ? kasan_save_track+0x4f/0x80
[ 87.974383][ T10] ? kasan_save_track+0x3e/0x80
[ 87.976152][ T10] ? usb_submit_urb+0x79/0x18b0
[ 87.977889][ T10] ? __pfx___report_bug+0x10/0x10
[ 87.979869][ T10] ? usb_submit_urb+0x81/0x18b0
[ 87.981713][ T10] report_bug_entry+0x19a/0x290
[ 87.983578][ T10] ? usb_submit_urb+0x7c/0x18b0
[ 87.985422][ T10] ? usb_submit_urb+0x81/0x18b0
[ 87.987342][ T10] handle_bug+0xce/0x200
[ 87.989028][ T10] exc_invalid_op+0x1a/0x50
[ 87.990798][ T10] asm_exc_invalid_op+0x1a/0x20
[ 87.992715][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 87.994665][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 88.003811][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 88.006263][ T10] RAX: ffffffff876314f2 RBX: ffff88803eff3b00 RCX: ffff88801bf0a540
[ 88.009139][ T10] RDX: 0000000000000000 RSI: ffff88803eff3b00 RDI: ffffffff9065b500
[ 88.012058][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 88.014961][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803486e458
[ 88.018093][ T10] R13: 1ffff1100690dc8b R14: ffff88803eff3b08 R15: 0000000000000cc0
[ 88.020831][ T10] ? usb_submit_urb+0x72/0x18b0
[ 88.022706][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 88.024547][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 88.026381][ T10] ? skb_put+0x112/0x210
[ 88.027914][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 88.029854][ T10] port100_set_command_type+0x1c8/0x390
[ 88.031801][ T10] ? pcpu_alloc+0x10/0x310
[ 88.033438][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 88.035908][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 88.038227][ T10] port100_probe+0x7b2/0xba0
[ 88.040166][ T10] ? __pfx_port100_probe+0x10/0x10
[ 88.042237][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.044355][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.046608][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 88.048826][ T10] usb_probe_interface+0x653/0xc60
[ 88.050867][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 88.053026][ T10] really_probe+0x254/0xae0
[ 88.054824][ T10] __driver_probe_device+0x1e8/0x360
[ 88.056759][ T10] driver_probe_device+0x4f/0x240
[ 88.058463][ T10] __device_attach_driver+0x270/0x410
[ 88.060348][ T10] bus_for_each_drv+0x258/0x2f0
[ 88.062150][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 88.064427][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.066552][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.068644][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.070968][ T10] __device_attach+0x2c4/0x450
[ 88.072722][ T10] ? __pfx___device_attach+0x10/0x10
[ 88.074767][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 88.076730][ T10] ? _raw_spin_unlock+0x28/0x50
[ 88.078624][ T10] device_initial_probe+0xa1/0xd0
[ 88.080497][ T10] bus_probe_device+0x12a/0x220
[ 88.082359][ T10] device_add+0x7d7/0xb80
[ 88.084187][ T10] usb_set_configuration+0x1ad8/0x2180
[ 88.086515][ T10] usb_generic_driver_probe+0x8d/0x150
[ 88.088797][ T10] usb_probe_device+0x1c3/0x3b0
[ 88.090689][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 88.092789][ T10] really_probe+0x254/0xae0
[ 88.094701][ T10] __driver_probe_device+0x1e8/0x360
[ 88.096819][ T10] driver_probe_device+0x4f/0x240
[ 88.098792][ T10] __device_attach_driver+0x270/0x410
[ 88.100885][ T10] bus_for_each_drv+0x258/0x2f0
[ 88.102789][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 88.104885][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 88.106968][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 88.109114][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 88.111505][ T10] __device_attach+0x2c4/0x450
[ 88.113179][ T10] ? __pfx___device_attach+0x10/0x10
[ 88.115077][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 88.116876][ T10] ? _raw_spin_unlock+0x28/0x50
[ 88.118858][ T10] device_initial_probe+0xa1/0xd0
[ 88.120961][ T10] bus_probe_device+0x12a/0x220
[ 88.122728][ T10] device_add+0x7d7/0xb80
[ 88.124406][ T10] usb_new_device+0x99d/0x1620
[ 88.126143][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 88.128419][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 88.130339][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 88.132257][ T10] hub_event+0x28e8/0x4d30
[ 88.134112][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 88.136143][ T10] ? __pfx_hub_event+0x10/0x10
[ 88.137970][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 88.140176][ T10] ? rcu_is_watching+0x15/0xb0
[ 88.142053][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 88.144349][ T10] process_scheduled_works+0xa8e/0x14e0
[ 88.146542][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 88.148824][ T10] ? assign_work+0x3cf/0x5d0
[ 88.150585][ T10] worker_thread+0xa47/0xfb0
[ 88.152407][ T10] kthread+0x388/0x470
[ 88.154057][ T10] ? __pfx_worker_thread+0x10/0x10
[ 88.155861][ T10] ? __pfx_kthread+0x10/0x10
[ 88.157583][ T10] ret_from_fork+0x514/0xb70
[ 88.159235][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 88.161162][ T10] ? __switch_to+0xc89/0x1420
[ 88.162942][ T10] ? __pfx_kthread+0x10/0x10
[ 88.164658][ T10] ret_from_fork_asm+0x1a/0x30
[ 88.166448][ T10]
[ 88.167979][ T10] Kernel Offset: disabled
[ 88.169561][ T10] Rebooting in 86400 seconds..