syzbot

rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 0-...D
 } 2675 jiffies s: 9497 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 PID: 18099 Comm: udevd Not tainted 6.10.0-rc4-syzkaller-00025-gb0fc24f36191 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
RIP: 0010:number+0x155/0xb80 lib/vsprintf.c:467
Code: fa 44 89 ee bf 0a 00 00 00 e8 77 fa c8 fa 31 c0 41 80 fd 0a 0f 95 c0 89 44 24 0c e8 c5 ff c8 fa 8b 44 24 70 31 ff 89 44 24 08 <c1> f8 08 89 44 24 18 0f bf 44 24 76 89 44 24 30 44 89 f8 83 e0 20
RSP: 0018:ffffc900000068c0 EFLAGS: 00000046
RAX: 00000000ffffff0f RBX: ffffc90000006bc1 RCX: ffffc90001002000
RDX: 0000000000040000 RSI: ffffffff868a43eb RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000484ba0 R12: ffffffff86c8ac64
R13: 000000000000000a R14: ffffc90000006bcc R15: 0000000000000000
FS:  00007f5275627c80(0000) GS:ffff8881f6400000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b30936000 CR3: 000000014044c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 vsnprintf+0x92a/0x1880 lib/vsprintf.c:2890
 snprintf+0xc8/0x100 lib/vsprintf.c:2959
 print_caller kernel/printk/printk.c:1336 [inline]
 info_print_prefix+0x135/0x350 kernel/printk/printk.c:1355
 record_print_text+0x141/0x400 kernel/printk/printk.c:1402
 printk_get_next_message+0x2a6/0x670 kernel/printk/printk.c:2855
 console_emit_next_record kernel/printk/printk.c:2895 [inline]
 console_flush_all+0x3b2/0xd70 kernel/printk/printk.c:2994
 console_unlock+0xae/0x290 kernel/printk/printk.c:3063
 vprintk_emit kernel/printk/printk.c:2345 [inline]
 vprintk_emit+0x11a/0x5a0 kernel/printk/printk.c:2300
 vprintk+0x7f/0xa0 kernel/printk/printk_safe.c:45
 _printk+0xc8/0x100 kernel/printk/printk.c:2370
 printk_stack_address arch/x86/kernel/dumpstack.c:72 [inline]
 show_trace_log_lvl+0x211/0x500 arch/x86/kernel/dumpstack.c:285
 show_regs arch/x86/kernel/dumpstack.c:478 [inline]
 show_regs+0x8c/0xa0 arch/x86/kernel/dumpstack.c:465
 fn_show_ptregs+0x40/0x50 drivers/tty/vt/keyboard.c:510
 k_spec drivers/tty/vt/keyboard.c:667 [inline]
 k_spec+0xed/0x150 drivers/tty/vt/keyboard.c:656
 kbd_keycode drivers/tty/vt/keyboard.c:1524 [inline]
 kbd_event+0xcbd/0x17a0 drivers/tty/vt/keyboard.c:1543
 input_to_handler+0x38f/0x4d0 drivers/input/input.c:132
 input_pass_values+0x5c9/0x840 drivers/input/input.c:161
 input_event_dispose+0x508/0x630 drivers/input/input.c:389
 input_handle_event+0x11c/0xd80 drivers/input/input.c:406
 input_event drivers/input/input.c:435 [inline]
 input_event+0x83/0xa0 drivers/input/input.c:427
 hidinput_hid_event+0x1d57/0x2410 drivers/hid/hid-input.c:1744
 hid_process_event+0x4b7/0x5e0 drivers/hid/hid-core.c:1540
 hid_input_array_field+0x330/0x710 drivers/hid/hid-core.c:1644
 hid_process_report drivers/hid/hid-core.c:1694 [inline]
 hid_report_raw_event+0xa02/0x11c0 drivers/hid/hid-core.c:2015
 hid_input_report+0x345/0x440 drivers/hid/hid-core.c:2089
 hid_irq_in+0x35e/0x870 drivers/hid/usbhid/hid-core.c:284
 __usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
 dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1687 [inline]
 __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1813
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 46 0c 9d fa 48 89 df e8 2e 89 9d fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 65 ff 91 fa 65 8b 05 86 6b 6f 79 85 c0 74 16 5b
RSP: 0018:ffffc90000007dd8 EFLAGS: 00000246
RAX: 0000000000000006 RBX: ffff888134742218 RCX: 1ffffffff137b0f1
RDX: 0000000000000000 RSI: ffffffff86c7d6e0 RDI: ffffffff86e77840
RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000001
R10: ffffffff89bdc117 R11: 0000000000000007 R12: 0000000000000001
R13: 0000000000000001 R14: ffff888134742000 R15: 0000000000000000
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 input_inject_event+0x193/0x370 drivers/input/input.c:468
 __led_set_brightness drivers/leds/led-core.c:52 [inline]
 led_set_brightness_nopm drivers/leds/led-core.c:316 [inline]
 led_set_brightness_nosleep drivers/leds/led-core.c:347 [inline]
 led_set_brightness+0x211/0x290 drivers/leds/led-core.c:309
 led_trigger_event drivers/leds/led-triggers.c:394 [inline]
 led_trigger_event+0xda/0x270 drivers/leds/led-triggers.c:382
 kbd_propagate_led_state drivers/tty/vt/keyboard.c:1082 [inline]
 kbd_bh+0x21b/0x300 drivers/tty/vt/keyboard.c:1271
 tasklet_action_common.constprop.0+0x24c/0x3e0 kernel/softirq.c:785
 handle_softirqs+0x209/0x8e0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xac/0x110 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x13/0x18
Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 75 06 5a <c3> cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc cc cc 0f
RSP: 0018:ffffc9000260fa20 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff88811070f3b0 RCX: ffffffff8131e3a3
RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff88811070f3b0
RBP: ffff88811070f3b8 R08: 0000000000000000 R09: ffffed10220e1e76
R10: ffff88811070f3b3 R11: 0000000000000001 R12: ffff88811070f3c0
R13: ffff88811070f3b0 R14: ffff888122aa7d60 R15: ffff88811070f318
 pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:589 [inline]
 queued_spin_unlock arch/x86/include/asm/qspinlock.h:57 [inline]
 do_raw_spin_unlock+0x172/0x230 kernel/locking/spinlock_debug.c:142
 __raw_spin_unlock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_unlock+0x1e/0x50 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 __d_lookup+0x246/0x4c0 fs/dcache.c:2323
 lookup_fast+0x17b/0x540 fs/namei.c:1650
 open_last_lookups fs/namei.c:3542 [inline]
 path_openat+0x3c5/0x29f0 fs/namei.c:3804
 do_filp_open+0x1dc/0x430 fs/namei.c:3834
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1405
 do_sys_open fs/open.c:1420 [inline]
 __do_sys_openat fs/open.c:1436 [inline]
 __se_sys_openat fs/open.c:1431 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1431
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f52757529a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe46b3c930 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f52757529a4
RDX: 0000000000080000 RSI: 00007ffe46b3ca68 RDI: 00000000ffffff9c
RBP: 00007ffe46b3ca68 R08: 0000000000000008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 000056458d6c8b42 R14: 0000000000000001 R15: 000056458d6c9ddb
 </TASK>
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 input_inject_event+0x193/0x370 drivers/input/input.c:468
 __led_set_brightness drivers/leds/led-core.c:52 [inline]
 led_set_brightness_nopm drivers/leds/led-core.c:316 [inline]
 led_set_brightness_nosleep drivers/leds/led-core.c:347 [inline]
 led_set_brightness+0x211/0x290 drivers/leds/led-core.c:309
 led_trigger_event drivers/leds/led-triggers.c:394 [inline]
 led_trigger_event+0xda/0x270 drivers/leds/led-triggers.c:382
 kbd_propagate_led_state drivers/tty/vt/keyboard.c:1082 [inline]
 kbd_bh+0x21b/0x300 drivers/tty/vt/keyboard.c:1271
 tasklet_action_common.constprop.0+0x24c/0x3e0 kernel/softirq.c:785
 handle_softirqs+0x209/0x8e0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xac/0x110 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_callee_save___pv_queued_spin_unlock+0x13/0x18
Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 52 b8 01 00 00 00 31 d2 f0 0f b0 17 75 06 5a <c3> cc cc cc cc 56 0f b6 f0 e8 9f ff ff ff 5e 5a c3 cc cc cc cc 0f
RSP: 0018:ffffc9000260fa20 EFLAGS: 00000246
RAX: 0000000000000001 RBX: ffff88811070f3b0 RCX: ffffffff8131e3a3
RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffff88811070f3b0
RBP: ffff88811070f3b8 R08: 0000000000000000 R09: ffffed10220e1e76
R10: ffff88811070f3b3 R11: 0000000000000001 R12: ffff88811070f3c0
R13: ffff88811070f3b0 R14: ffff888122aa7d60 R15: ffff88811070f318
 pv_queued_spin_unlock arch/x86/include/asm/paravirt.h:589 [inline]
 queued_spin_unlock arch/x86/include/asm/qspinlock.h:57 [inline]
 do_raw_spin_unlock+0x172/0x230 kernel/locking/spinlock_debug.c:142
 __raw_spin_unlock include/linux/spinlock_api_smp.h:142 [inline]
 _raw_spin_unlock+0x1e/0x50 kernel/locking/spinlock.c:186
 spin_unlock include/linux/spinlock.h:391 [inline]
 __d_lookup+0x246/0x4c0 fs/dcache.c:2323
 lookup_fast+0x17b/0x540 fs/namei.c:1650
 open_last_lookups fs/namei.c:3542 [inline]
 path_openat+0x3c5/0x29f0 fs/namei.c:3804
 do_filp_open+0x1dc/0x430 fs/namei.c:3834
 do_sys_openat2+0x17a/0x1e0 fs/open.c:1405
 do_sys_open fs/open.c:1420 [inline]
 __do_sys_openat fs/open.c:1436 [inline]
 __se_sys_openat fs/open.c:1431 [inline]
 __x64_sys_openat+0x175/0x210 fs/open.c:1431
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f52757529a4
Code: 24 20 48 8d 44 24 30 48 89 44 24 28 64 8b 04 25 18 00 00 00 85 c0 75 2c 44 89 e2 48 89 ee bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 76 60 48 8b 15 55 a4 0d 00 f7 d8 64 89 02 48 83
RSP: 002b:00007ffe46b3c930 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f52757529a4
RDX: 0000000000080000 RSI: 00007ffe46b3ca68 RDI: 00000000ffffff9c
RBP: 00007ffe46b3ca68 R08: 0000000000000008 R09: 0000000000000001
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000
R13: 000056458d6c8b42 R14: 0000000000000001 R15: 000056458d6c9ddb
 </TASK>
keytouch 0003:0926:3333.00DF: can't resubmit intr, dummy_hcd.0-1/input0, status -19
key