program:
r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
syz_usb_disconnect(r0)
[ 116.883024][ T2041] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 116.923009][ T44] Bluetooth: hci0: command tx timeout
[ 117.039385][ T2041] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 117.043805][ T2041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 117.047273][ T2041] usb 5-1: Product: syz
[ 117.049020][ T2041] usb 5-1: Manufacturer: syz
[ 117.051142][ T2041] usb 5-1: SerialNumber: syz
[ 117.472974][ T2041] ------------[ cut here ]------------
[ 117.474967][ T2041] URB ffff8880378ab800 submitted while active
[ 117.477027][ T2041] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:4/2041
[ 117.480498][ T2041] Modules linked in:
[ 117.481915][ T2041] CPU: 0 UID: 0 PID: 2041 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 117.486533][ T2041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 117.489837][ T2041] Workqueue: usb_hub_wq hub_event
[ 117.491522][ T2041] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 117.493433][ T2041] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 117.499727][ T2041] RSP: 0018:ffffc90000da6b80 EFLAGS: 00010293
[ 117.501765][ T2041] RAX: ffffffff876314f2 RBX: ffff8880378ab800 RCX: ffff88801af22540
[ 117.504427][ T2041] RDX: 0000000000000000 RSI: ffff8880378ab800 RDI: ffffffff9065b500
[ 117.507054][ T2041] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 117.509781][ T2041] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803c4a3458
[ 117.512444][ T2041] R13: 1ffff1100789468b R14: ffff8880378ab808 R15: 0000000000000cc0
[ 117.515307][ T2041] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 117.518407][ T2041] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 117.520634][ T2041] CR2: 00007f3bf80157f0 CR3: 0000000012c7f000 CR4: 0000000000352ef0
[ 117.523277][ T2041] Call Trace:
[ 117.524467][ T2041]
[ 117.525510][ T2041] ? __kmalloc_cache_noprof+0x150/0x660
[ 117.527337][ T2041] ? port100_send_cmd_async+0xbd/0xcc0
[ 117.529201][ T2041] ? skb_put+0x112/0x210
[ 117.530664][ T2041] port100_send_cmd_async+0x84f/0xcc0
[ 117.532489][ T2041] port100_set_command_type+0x1c8/0x390
[ 117.534348][ T2041] ? pcpu_alloc+0x10/0x310
[ 117.535865][ T2041] ? __pfx_port100_set_command_type+0x10/0x10
[ 117.537915][ T2041] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 117.539913][ T2041] port100_probe+0x7b2/0xba0
[ 117.541544][ T2041] ? __pfx_port100_probe+0x10/0x10
[ 117.543281][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.545046][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.547014][ T2041] ? __pm_runtime_set_status+0x994/0xc80
[ 117.548955][ T2041] usb_probe_interface+0x653/0xc60
[ 117.550693][ T2041] ? __pfx_usb_probe_interface+0x10/0x10
[ 117.552577][ T2041] really_probe+0x254/0xae0
[ 117.554145][ T2041] __driver_probe_device+0x1e8/0x360
[ 117.555973][ T2041] driver_probe_device+0x4f/0x240
[ 117.557708][ T2041] __device_attach_driver+0x270/0x410
[ 117.559572][ T2041] bus_for_each_drv+0x258/0x2f0
[ 117.561286][ T2041] ? __pfx___device_attach_driver+0x10/0x10
[ 117.563349][ T2041] ? __pfx_bus_for_each_drv+0x10/0x10
[ 117.565135][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.566914][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.568933][ T2041] __device_attach+0x2c4/0x450
[ 117.570581][ T2041] ? __pfx___device_attach+0x10/0x10
[ 117.572399][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.574131][ T2041] ? _raw_spin_unlock+0x28/0x50
[ 117.575785][ T2041] device_initial_probe+0xa1/0xd0
[ 117.577489][ T2041] bus_probe_device+0x12a/0x220
[ 117.579121][ T2041] device_add+0x7d7/0xb80
[ 117.580602][ T2041] usb_set_configuration+0x1ad8/0x2180
[ 117.582450][ T2041] usb_generic_driver_probe+0x8d/0x150
[ 117.584307][ T2041] usb_probe_device+0x1c3/0x3b0
[ 117.585958][ T2041] ? __pfx_usb_probe_device+0x10/0x10
[ 117.587815][ T2041] really_probe+0x254/0xae0
[ 117.589398][ T2041] __driver_probe_device+0x1e8/0x360
[ 117.591177][ T2041] driver_probe_device+0x4f/0x240
[ 117.592936][ T2041] __device_attach_driver+0x270/0x410
[ 117.594738][ T2041] bus_for_each_drv+0x258/0x2f0
[ 117.596393][ T2041] ? __pfx___device_attach_driver+0x10/0x10
[ 117.598413][ T2041] ? __pfx_bus_for_each_drv+0x10/0x10
[ 117.600245][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.602022][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.604018][ T2041] __device_attach+0x2c4/0x450
[ 117.605669][ T2041] ? __pfx___device_attach+0x10/0x10
[ 117.607449][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.609195][ T2041] ? _raw_spin_unlock+0x28/0x50
[ 117.610871][ T2041] device_initial_probe+0xa1/0xd0
[ 117.612601][ T2041] bus_probe_device+0x12a/0x220
[ 117.614314][ T2041] device_add+0x7d7/0xb80
[ 117.616033][ T2041] usb_new_device+0x99d/0x1620
[ 117.617655][ T2041] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 117.619617][ T2041] ? __pfx_usb_new_device+0x10/0x10
[ 117.621363][ T2041] ? _raw_spin_unlock_irq+0x23/0x50
[ 117.623312][ T2041] hub_event+0x28e8/0x4d30
[ 117.624858][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.626598][ T2041] ? __pfx_hub_event+0x10/0x10
[ 117.628260][ T2041] ? process_scheduled_works+0xa20/0x14e0
[ 117.630176][ T2041] ? rcu_is_watching+0x15/0xb0
[ 117.631833][ T2041] ? process_scheduled_works+0xa20/0x14e0
[ 117.633721][ T2041] process_scheduled_works+0xa8e/0x14e0
[ 117.635554][ T2041] ? __pfx_process_scheduled_works+0x10/0x10
[ 117.637571][ T2041] ? assign_work+0x3cf/0x5d0
[ 117.639163][ T2041] worker_thread+0xa47/0xfb0
[ 117.640751][ T2041] kthread+0x388/0x470
[ 117.642157][ T2041] ? __pfx_worker_thread+0x10/0x10
[ 117.644675][ T2041] ? __pfx_kthread+0x10/0x10
[ 117.646253][ T2041] ret_from_fork+0x514/0xb70
[ 117.647812][ T2041] ? __pfx_ret_from_fork+0x10/0x10
[ 117.649541][ T2041] ? __switch_to+0xc89/0x1420
[ 117.651146][ T2041] ? __pfx_kthread+0x10/0x10
[ 117.652734][ T2041] ret_from_fork_asm+0x1a/0x30
[ 117.654311][ T2041]
[ 117.655341][ T2041] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 117.657638][ T2041] CPU: 0 UID: 0 PID: 2041 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full)
[ 117.660479][ T2041] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 117.663546][ T2041] Workqueue: usb_hub_wq hub_event
[ 117.665121][ T2041] Call Trace:
[ 117.666167][ T2041]
[ 117.667121][ T2041] vpanic+0x56c/0xa60
[ 117.668434][ T2041] ? __pfx__printk+0x10/0x10
[ 117.669946][ T2041] ? __pfx_vpanic+0x10/0x10
[ 117.671447][ T2041] ? is_bpf_text_address+0x292/0x2b0
[ 117.673169][ T2041] ? is_bpf_text_address+0x26/0x2b0
[ 117.674910][ T2041] panic+0xc5/0xd0
[ 117.676168][ T2041] ? __pfx_panic+0x10/0x10
[ 117.677643][ T2041] ? ret_from_fork_asm+0x1a/0x30
[ 117.679282][ T2041] __warn+0x315/0x4c0
[ 117.680637][ T2041] ? usb_submit_urb+0x79/0x18b0
[ 117.682275][ T2041] ? usb_submit_urb+0x79/0x18b0
[ 117.683874][ T2041] __report_bug+0x276/0x570
[ 117.685381][ T2041] ? kasan_save_track+0x4f/0x80
[ 117.686980][ T2041] ? kasan_save_track+0x3e/0x80
[ 117.688572][ T2041] ? usb_submit_urb+0x79/0x18b0
[ 117.690219][ T2041] ? __pfx___report_bug+0x10/0x10
[ 117.692002][ T2041] ? __pfx___mutex_trylock_common+0x10/0x10
[ 117.694064][ T2041] ? rcu_is_watching+0x15/0xb0
[ 117.695720][ T2041] ? trace_contention_end+0x3d/0x140
[ 117.697550][ T2041] report_bug_entry+0x19a/0x290
[ 117.699240][ T2041] ? usb_submit_urb+0x7c/0x18b0
[ 117.700899][ T2041] ? usb_submit_urb+0x81/0x18b0
[ 117.702516][ T2041] handle_bug+0xce/0x200
[ 117.703968][ T2041] exc_invalid_op+0x1a/0x50
[ 117.705569][ T2041] asm_exc_invalid_op+0x1a/0x20
[ 117.707261][ T2041] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 117.709120][ T2041] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 117.715543][ T2041] RSP: 0018:ffffc90000da6b80 EFLAGS: 00010293
[ 117.717739][ T2041] RAX: ffffffff876314f2 RBX: ffff8880378ab800 RCX: ffff88801af22540
[ 117.720449][ T2041] RDX: 0000000000000000 RSI: ffff8880378ab800 RDI: ffffffff9065b500
[ 117.723106][ T2041] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 117.725799][ T2041] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88803c4a3458
[ 117.728461][ T2041] R13: 1ffff1100789468b R14: ffff8880378ab808 R15: 0000000000000cc0
[ 117.731168][ T2041] ? usb_submit_urb+0x72/0x18b0
[ 117.732865][ T2041] ? __kmalloc_cache_noprof+0x150/0x660
[ 117.734735][ T2041] ? port100_send_cmd_async+0xbd/0xcc0
[ 117.736704][ T2041] ? skb_put+0x112/0x210
[ 117.738198][ T2041] port100_send_cmd_async+0x84f/0xcc0
[ 117.740081][ T2041] port100_set_command_type+0x1c8/0x390
[ 117.741992][ T2041] ? pcpu_alloc+0x10/0x310
[ 117.743501][ T2041] ? __pfx_port100_set_command_type+0x10/0x10
[ 117.745500][ T2041] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 117.747392][ T2041] port100_probe+0x7b2/0xba0
[ 117.748990][ T2041] ? __pfx_port100_probe+0x10/0x10
[ 117.750677][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.752444][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.754388][ T2041] ? __pm_runtime_set_status+0x994/0xc80
[ 117.756216][ T2041] usb_probe_interface+0x653/0xc60
[ 117.757900][ T2041] ? __pfx_usb_probe_interface+0x10/0x10
[ 117.759802][ T2041] really_probe+0x254/0xae0
[ 117.761330][ T2041] __driver_probe_device+0x1e8/0x360
[ 117.763151][ T2041] driver_probe_device+0x4f/0x240
[ 117.764853][ T2041] __device_attach_driver+0x270/0x410
[ 117.766593][ T2041] bus_for_each_drv+0x258/0x2f0
[ 117.768264][ T2041] ? __pfx___device_attach_driver+0x10/0x10
[ 117.770223][ T2041] ? __pfx_bus_for_each_drv+0x10/0x10
[ 117.772004][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.773785][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.775746][ T2041] __device_attach+0x2c4/0x450
[ 117.777333][ T2041] ? __pfx___device_attach+0x10/0x10
[ 117.779039][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.780869][ T2041] ? _raw_spin_unlock+0x28/0x50
[ 117.782523][ T2041] device_initial_probe+0xa1/0xd0
[ 117.784187][ T2041] bus_probe_device+0x12a/0x220
[ 117.785877][ T2041] device_add+0x7d7/0xb80
[ 117.787290][ T2041] usb_set_configuration+0x1ad8/0x2180
[ 117.789118][ T2041] usb_generic_driver_probe+0x8d/0x150
[ 117.790972][ T2041] usb_probe_device+0x1c3/0x3b0
[ 117.792669][ T2041] ? __pfx_usb_probe_device+0x10/0x10
[ 117.794414][ T2041] really_probe+0x254/0xae0
[ 117.795880][ T2041] __driver_probe_device+0x1e8/0x360
[ 117.797648][ T2041] driver_probe_device+0x4f/0x240
[ 117.799326][ T2041] __device_attach_driver+0x270/0x410
[ 117.801185][ T2041] bus_for_each_drv+0x258/0x2f0
[ 117.802897][ T2041] ? __pfx___device_attach_driver+0x10/0x10
[ 117.804977][ T2041] ? __pfx_bus_for_each_drv+0x10/0x10
[ 117.806794][ T2041] ? lockdep_hardirqs_on+0x7a/0x110
[ 117.808542][ T2041] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 117.810487][ T2041] __device_attach+0x2c4/0x450
[ 117.812148][ T2041] ? __pfx___device_attach+0x10/0x10
[ 117.814039][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.815752][ T2041] ? _raw_spin_unlock+0x28/0x50
[ 117.817405][ T2041] device_initial_probe+0xa1/0xd0
[ 117.819139][ T2041] bus_probe_device+0x12a/0x220
[ 117.820816][ T2041] device_add+0x7d7/0xb80
[ 117.822291][ T2041] usb_new_device+0x99d/0x1620
[ 117.823933][ T2041] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 117.826010][ T2041] ? __pfx_usb_new_device+0x10/0x10
[ 117.827869][ T2041] ? _raw_spin_unlock_irq+0x23/0x50
[ 117.830049][ T2041] hub_event+0x28e8/0x4d30
[ 117.832115][ T2041] ? do_raw_spin_unlock+0x4d/0x210
[ 117.834297][ T2041] ? __pfx_hub_event+0x10/0x10
[ 117.836306][ T2041] ? process_scheduled_works+0xa20/0x14e0
[ 117.838685][ T2041] ? rcu_is_watching+0x15/0xb0
[ 117.840721][ T2041] ? process_scheduled_works+0xa20/0x14e0
[ 117.843037][ T2041] process_scheduled_works+0xa8e/0x14e0
[ 117.845411][ T2041] ? __pfx_process_scheduled_works+0x10/0x10
[ 117.847916][ T2041] ? assign_work+0x3cf/0x5d0
[ 117.849843][ T2041] worker_thread+0xa47/0xfb0
[ 117.851785][ T2041] kthread+0x388/0x470
[ 117.853448][ T2041] ? __pfx_worker_thread+0x10/0x10
[ 117.855584][ T2041] ? __pfx_kthread+0x10/0x10
[ 117.857516][ T2041] ret_from_fork+0x514/0xb70
[ 117.859506][ T2041] ? __pfx_ret_from_fork+0x10/0x10
[ 117.861743][ T2041] ? __switch_to+0xc89/0x1420
[ 117.863751][ T2041] ? __pfx_kthread+0x10/0x10
[ 117.865736][ T2041] ret_from_fork_asm+0x1a/0x30
[ 117.867747][ T2041]
[ 117.869450][ T2041] Kernel Offset: disabled
[ 117.871284][ T2041] Rebooting in 86400 seconds..