program:
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00")
nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0)
syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700")
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000004100)={&(0x7f0000004200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000005100)={&(0x7f0000005200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x1}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000006100)={&(0x7f0000006200)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000007000)={0x0, 0x0, &(0x7f0000007100)={&(0x7f0000007200)={0x24, r2, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}, @NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x40}]}, 0x24}}, 0x0)
[ 85.245352][ T5284] Bluetooth: hci0: command tx timeout
[ 85.550319][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 85.704567][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00
[ 85.707997][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 85.711162][ T10] usb 5-1: Product: syz
[ 85.712896][ T10] usb 5-1: Manufacturer: syz
[ 85.714688][ T10] usb 5-1: SerialNumber: syz
[ 86.189437][ T10] ------------[ cut here ]------------
[ 86.192084][ T10] URB ffff88801f5b0f00 submitted while active
[ 86.194774][ T10] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#0: kworker/0:1/10
[ 86.199141][ T10] Modules linked in:
[ 86.201083][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 86.205094][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.209418][ T10] Workqueue: usb_hub_wq hub_event
[ 86.211693][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.214059][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.222400][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 86.225110][ T10] RAX: ffffffff876314f2 RBX: ffff88801f5b0f00 RCX: ffff88801bf0a540
[ 86.228644][ T10] RDX: 0000000000000000 RSI: ffff88801f5b0f00 RDI: ffffffff9065b500
[ 86.232192][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.235750][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801d1e2858
[ 86.239254][ T10] R13: 1ffff11003a3c50b R14: ffff88801f5b0f08 R15: 0000000000000cc0
[ 86.242609][ T10] FS: 0000000000000000(0000) GS:ffff88808c540000(0000) knlGS:0000000000000000
[ 86.246140][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 86.248409][ T10] CR2: 00007fcf87e6cf98 CR3: 0000000012fd9000 CR4: 0000000000352ef0
[ 86.251265][ T10] Call Trace:
[ 86.252508][ T10]
[ 86.253799][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.256150][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.258176][ T10] ? skb_put+0x112/0x210
[ 86.259720][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 86.261897][ T10] port100_set_command_type+0x1c8/0x390
[ 86.264010][ T10] ? pcpu_alloc+0x10/0x310
[ 86.265627][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.267796][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.269871][ T10] port100_probe+0x7b2/0xba0
[ 86.271608][ T10] ? __pfx_port100_probe+0x10/0x10
[ 86.273497][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.275355][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.277468][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 86.279863][ T10] usb_probe_interface+0x653/0xc60
[ 86.282097][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.284010][ T10] really_probe+0x254/0xae0
[ 86.285544][ T10] __driver_probe_device+0x1e8/0x360
[ 86.287402][ T10] driver_probe_device+0x4f/0x240
[ 86.289250][ T10] __device_attach_driver+0x270/0x410
[ 86.291201][ T10] bus_for_each_drv+0x258/0x2f0
[ 86.292939][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 86.294976][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.296907][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.298732][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.301407][ T10] __device_attach+0x2c4/0x450
[ 86.303183][ T10] ? __pfx___device_attach+0x10/0x10
[ 86.305074][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.306895][ T10] ? _raw_spin_unlock+0x28/0x50
[ 86.308809][ T10] device_initial_probe+0xa1/0xd0
[ 86.310784][ T10] bus_probe_device+0x12a/0x220
[ 86.312641][ T10] device_add+0x7d7/0xb80
[ 86.314244][ T10] usb_set_configuration+0x1ad8/0x2180
[ 86.316227][ T10] usb_generic_driver_probe+0x8d/0x150
[ 86.318325][ T10] usb_probe_device+0x1c3/0x3b0
[ 86.320070][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 86.321975][ T10] really_probe+0x254/0xae0
[ 86.323659][ T10] __driver_probe_device+0x1e8/0x360
[ 86.325667][ T10] driver_probe_device+0x4f/0x240
[ 86.327592][ T10] __device_attach_driver+0x270/0x410
[ 86.329728][ T10] bus_for_each_drv+0x258/0x2f0
[ 86.331683][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 86.333830][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.335805][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.337627][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.339690][ T10] __device_attach+0x2c4/0x450
[ 86.341404][ T10] ? __pfx___device_attach+0x10/0x10
[ 86.343277][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.345126][ T10] ? _raw_spin_unlock+0x28/0x50
[ 86.347047][ T10] device_initial_probe+0xa1/0xd0
[ 86.349020][ T10] bus_probe_device+0x12a/0x220
[ 86.351050][ T10] device_add+0x7d7/0xb80
[ 86.352764][ T10] usb_new_device+0x99d/0x1620
[ 86.354582][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.356643][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 86.358505][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.360608][ T10] hub_event+0x28e8/0x4d30
[ 86.362230][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.364370][ T10] ? __pfx_hub_event+0x10/0x10
[ 86.366100][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 86.368121][ T10] ? rcu_is_watching+0x15/0xb0
[ 86.369832][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 86.371849][ T10] process_scheduled_works+0xa8e/0x14e0
[ 86.373739][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.375851][ T10] ? assign_work+0x3cf/0x5d0
[ 86.377502][ T10] worker_thread+0xa47/0xfb0
[ 86.379544][ T10] kthread+0x388/0x470
[ 86.382172][ T10] ? __pfx_worker_thread+0x10/0x10
[ 86.384333][ T10] ? __pfx_kthread+0x10/0x10
[ 86.386292][ T10] ret_from_fork+0x514/0xb70
[ 86.388676][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 86.390953][ T10] ? __switch_to+0xc89/0x1420
[ 86.393029][ T10] ? __pfx_kthread+0x10/0x10
[ 86.395019][ T10] ret_from_fork_asm+0x1a/0x30
[ 86.397086][ T10]
[ 86.398470][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 86.401482][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full)
[ 86.405172][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 86.409362][ T10] Workqueue: usb_hub_wq hub_event
[ 86.411484][ T10] Call Trace:
[ 86.412913][ T10]
[ 86.414166][ T10] vpanic+0x56c/0xa60
[ 86.415895][ T10] ? __pfx__printk+0x10/0x10
[ 86.417845][ T10] ? __pfx_vpanic+0x10/0x10
[ 86.419733][ T10] ? is_bpf_text_address+0x292/0x2b0
[ 86.421875][ T10] ? is_bpf_text_address+0x26/0x2b0
[ 86.424056][ T10] panic+0xc5/0xd0
[ 86.425649][ T10] ? __pfx_panic+0x10/0x10
[ 86.427517][ T10] ? ret_from_fork_asm+0x1a/0x30
[ 86.429535][ T10] __warn+0x315/0x4c0
[ 86.431007][ T10] ? usb_submit_urb+0x79/0x18b0
[ 86.432745][ T10] ? usb_submit_urb+0x79/0x18b0
[ 86.434458][ T10] __report_bug+0x276/0x570
[ 86.436365][ T10] ? kasan_save_track+0x4f/0x80
[ 86.438399][ T10] ? kasan_save_track+0x3e/0x80
[ 86.440297][ T10] ? usb_submit_urb+0x79/0x18b0
[ 86.442067][ T10] ? __pfx___report_bug+0x10/0x10
[ 86.443972][ T10] ? __pfx___mutex_trylock_common+0x10/0x10
[ 86.446069][ T10] ? rcu_is_watching+0x15/0xb0
[ 86.447860][ T10] ? trace_contention_end+0x3d/0x140
[ 86.450026][ T10] report_bug_entry+0x19a/0x290
[ 86.452092][ T10] ? usb_submit_urb+0x7c/0x18b0
[ 86.454080][ T10] ? usb_submit_urb+0x81/0x18b0
[ 86.456080][ T10] handle_bug+0xce/0x200
[ 86.457861][ T10] exc_invalid_op+0x1a/0x50
[ 86.459759][ T10] asm_exc_invalid_op+0x1a/0x20
[ 86.461766][ T10] RIP: 0010:usb_submit_urb+0x7c/0x18b0
[ 86.464015][ T10] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 79 40 d3 fa 49 83 3e 00 74 40 e8 ce 0d 64 fa 48 8d 3d 07 a0 02 09 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 b3 0d 64 fa eb 05 e8 ac 0d
[ 86.471785][ T10] RSP: 0018:ffffc9000023eb80 EFLAGS: 00010293
[ 86.474321][ T10] RAX: ffffffff876314f2 RBX: ffff88801f5b0f00 RCX: ffff88801bf0a540
[ 86.477605][ T10] RDX: 0000000000000000 RSI: ffff88801f5b0f00 RDI: ffffffff9065b500
[ 86.480886][ T10] RBP: dffffc0000000000 R08: ffffffff9057c237 R09: 1ffffffff20af846
[ 86.484208][ T10] R10: dffffc0000000000 R11: fffffbfff20af847 R12: ffff88801d1e2858
[ 86.487439][ T10] R13: 1ffff11003a3c50b R14: ffff88801f5b0f08 R15: 0000000000000cc0
[ 86.490671][ T10] ? usb_submit_urb+0x72/0x18b0
[ 86.492747][ T10] ? __kmalloc_cache_noprof+0x150/0x660
[ 86.495038][ T10] ? port100_send_cmd_async+0xbd/0xcc0
[ 86.497325][ T10] ? skb_put+0x112/0x210
[ 86.499098][ T10] port100_send_cmd_async+0x84f/0xcc0
[ 86.501381][ T10] port100_set_command_type+0x1c8/0x390
[ 86.503677][ T10] ? pcpu_alloc+0x10/0x310
[ 86.505523][ T10] ? __pfx_port100_set_command_type+0x10/0x10
[ 86.508111][ T10] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 86.510550][ T10] port100_probe+0x7b2/0xba0
[ 86.512497][ T10] ? __pfx_port100_probe+0x10/0x10
[ 86.514656][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.516819][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.519278][ T10] ? __pm_runtime_set_status+0x994/0xc80
[ 86.521642][ T10] usb_probe_interface+0x653/0xc60
[ 86.523802][ T10] ? __pfx_usb_probe_interface+0x10/0x10
[ 86.526129][ T10] really_probe+0x254/0xae0
[ 86.528065][ T10] __driver_probe_device+0x1e8/0x360
[ 86.530226][ T10] driver_probe_device+0x4f/0x240
[ 86.532323][ T10] __device_attach_driver+0x270/0x410
[ 86.534540][ T10] bus_for_each_drv+0x258/0x2f0
[ 86.536606][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 86.539110][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.541374][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.543541][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.545981][ T10] __device_attach+0x2c4/0x450
[ 86.548020][ T10] ? __pfx___device_attach+0x10/0x10
[ 86.550229][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.552388][ T10] ? _raw_spin_unlock+0x28/0x50
[ 86.554469][ T10] device_initial_probe+0xa1/0xd0
[ 86.556613][ T10] bus_probe_device+0x12a/0x220
[ 86.558691][ T10] device_add+0x7d7/0xb80
[ 86.560536][ T10] usb_set_configuration+0x1ad8/0x2180
[ 86.562831][ T10] usb_generic_driver_probe+0x8d/0x150
[ 86.565084][ T10] usb_probe_device+0x1c3/0x3b0
[ 86.567107][ T10] ? __pfx_usb_probe_device+0x10/0x10
[ 86.569421][ T10] really_probe+0x254/0xae0
[ 86.571356][ T10] __driver_probe_device+0x1e8/0x360
[ 86.573601][ T10] driver_probe_device+0x4f/0x240
[ 86.575792][ T10] __device_attach_driver+0x270/0x410
[ 86.578094][ T10] bus_for_each_drv+0x258/0x2f0
[ 86.580203][ T10] ? __pfx___device_attach_driver+0x10/0x10
[ 86.582650][ T10] ? __pfx_bus_for_each_drv+0x10/0x10
[ 86.584907][ T10] ? lockdep_hardirqs_on+0x7a/0x110
[ 86.587075][ T10] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 86.589519][ T10] __device_attach+0x2c4/0x450
[ 86.591542][ T10] ? __pfx___device_attach+0x10/0x10
[ 86.593707][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.595804][ T10] ? _raw_spin_unlock+0x28/0x50
[ 86.597891][ T10] device_initial_probe+0xa1/0xd0
[ 86.600049][ T10] bus_probe_device+0x12a/0x220
[ 86.602064][ T10] device_add+0x7d7/0xb80
[ 86.603862][ T10] usb_new_device+0x99d/0x1620
[ 86.605871][ T10] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 86.608327][ T10] ? __pfx_usb_new_device+0x10/0x10
[ 86.610457][ T10] ? _raw_spin_unlock_irq+0x23/0x50
[ 86.612617][ T10] hub_event+0x28e8/0x4d30
[ 86.614442][ T10] ? do_raw_spin_unlock+0x4d/0x210
[ 86.616655][ T10] ? __pfx_hub_event+0x10/0x10
[ 86.618712][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 86.621080][ T10] ? rcu_is_watching+0x15/0xb0
[ 86.623087][ T10] ? process_scheduled_works+0xa20/0x14e0
[ 86.625478][ T10] process_scheduled_works+0xa8e/0x14e0
[ 86.627823][ T10] ? __pfx_process_scheduled_works+0x10/0x10
[ 86.630268][ T10] ? assign_work+0x3cf/0x5d0
[ 86.632196][ T10] worker_thread+0xa47/0xfb0
[ 86.634107][ T10] kthread+0x388/0x470
[ 86.635803][ T10] ? __pfx_worker_thread+0x10/0x10
[ 86.637929][ T10] ? __pfx_kthread+0x10/0x10
[ 86.639967][ T10] ret_from_fork+0x514/0xb70
[ 86.641934][ T10] ? __pfx_ret_from_fork+0x10/0x10
[ 86.644111][ T10] ? __switch_to+0xc89/0x1420
[ 86.646078][ T10] ? __pfx_kthread+0x10/0x10
[ 86.648047][ T10] ret_from_fork_asm+0x1a/0x30
[ 86.650052][ T10]
[ 86.651741][ T10] Kernel Offset: disabled
[ 86.653508][ T10] Rebooting in 86400 seconds..