------------[ cut here ]------------
WARNING: CPU: 0 PID: 16 at kernel/kcov.c:870 kcov_remote_start+0x5a2/0x7e0 kernel/kcov.c:870
Modules linked in:
CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc2-syzkaller-00022-g32f88d65f01b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
RIP: 0010:kcov_remote_start+0x5a2/0x7e0 kernel/kcov.c:870
Code: 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 0f 85 a6 01 00 00 41 f7 c6 00 02 00 00 0f 84 93 fa ff ff fb e9 8d fa ff ff 90 <0f> 0b 90 e8 c6 3f f0 09 89 c0 48 c7 c7 c8 d4 02 00 48 03 3c c5 e0
RSP: 0018:ffffc900000079c0 EFLAGS: 00010002
RAX: 0000000080010100 RBX: ffff8880172cda00 RCX: 0000000000000002
RDX: dffffc0000000000 RSI: ffffffff8bcacc00 RDI: ffffffff8c1ff240
RBP: 0100000000000005 R08: ffffffff92fa85f7 R09: 1ffffffff25f50be
R10: dffffc0000000000 R11: fffffbfff25f50bf R12: ffffffff8196202e
R13: 00000000ffffffb9 R14: 0000000000000006 R15: ffff8880b942d4c8
FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020000140 CR3: 00000000118bc000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
kcov_remote_start_usb include/linux/kcov.h:53 [inline]
kcov_remote_start_usb_softirq include/linux/kcov.h:66 [inline]
__usb_hcd_giveback_urb+0x34a/0x530 drivers/usb/core/hcd.c:1647
dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
__run_hrtimer kernel/time/hrtimer.c:1687 [inline]
__hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1751
hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813
local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
__sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa1/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:hub_irq+0x105/0x460 drivers/usb/core/hub.c:795
Code: 0f 84 e5 01 00 00 4c 89 64 24 08 49 83 c4 20 4c 89 e0 48 c1 e8 03 48 89 44 24 10 31 db 45 31 ff 48 8b 44 24 10 42 80 3c 30 00 <74> 08 4c 89 e7 e8 41 44 e0 fa 49 8b 2c 24 bf 08 00 00 00 48 89 de
RSP: 0018:ffffc90000157838 EFLAGS: 00000246
RAX: 1ffff110046f9804 RBX: 0000000000000000 RCX: 0000000000040000
RDX: ffff8880172cda00 RSI: 0000000000000001 RDI: 0000000000000000
RBP: 0000000000000005 R08: ffffffff871b9209 R09: ffffffff871b919e
R10: 0000000000000004 R11: ffff8880172cda00 R12: ffff8880237cc020
R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000
__usb_hcd_giveback_urb+0x373/0x530 drivers/usb/core/hcd.c:1648
usb_giveback_urb_bh+0x306/0x4e0 drivers/usb/core/hcd.c:1682
process_one_work kernel/workqueue.c:3231 [inline]
process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
bh_worker+0x2a5/0x620 kernel/workqueue.c:3572
tasklet_hi_action+0xf/0x90 kernel/softirq.c:816
handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
run_ksoftirqd+0xca/0x130 kernel/softirq.c:928
smpboot_thread_fn+0x544/0xa30 kernel/smpboot.c:164
kthread+0x2f0/0x390 kernel/kthread.c:389
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: 0f 84 e5 01 00 00 je 0x1eb
6: 4c 89 64 24 08 mov %r12,0x8(%rsp)
b: 49 83 c4 20 add $0x20,%r12
f: 4c 89 e0 mov %r12,%rax
12: 48 c1 e8 03 shr $0x3,%rax
16: 48 89 44 24 10 mov %rax,0x10(%rsp)
1b: 31 db xor %ebx,%ebx
1d: 45 31 ff xor %r15d,%r15d
20: 48 8b 44 24 10 mov 0x10(%rsp),%rax
25: 42 80 3c 30 00 cmpb $0x0,(%rax,%r14,1)
* 2a: 74 08 je 0x34 <-- trapping instruction
2c: 4c 89 e7 mov %r12,%rdi
2f: e8 41 44 e0 fa call 0xfae04475
34: 49 8b 2c 24 mov (%r12),%rbp
38: bf 08 00 00 00 mov $0x8,%edi
3d: 48 89 de mov %rbx,%rsi