rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: {
 1-....
 } 2645 jiffies s: 19933 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
NMI backtrace for cpu 1
CPU: 1 PID: 2365 Comm: syz-executor.1 Not tainted 6.7.0-rc5-syzkaller-g1760bfa7d7ca #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023
RIP: 0010:io_serial_out+0x8f/0xb0 drivers/tty/serial/8250/8250_port.c:417
Code: 48 8d 7d 40 44 89 e1 48 b8 00 00 00 00 00 fc ff df 48 89 fa d3 e3 48 c1 ea 03 80 3c 02 00 75 18 66 03 5d 40 44 89 e8 89 da ee <5b> 5d 41 5c 41 5d c3 e8 75 fb 14 ff eb a4 e8 ce fb 14 ff eb e1 66
RSP: 0018:ffffc90000198400 EFLAGS: 00000006
RAX: 0000000000000000 RBX: 00000000000003f9 RCX: 0000000000000000
RDX: 00000000000003f9 RSI: ffffffff828681f5 RDI: ffffffff8c155fa0
RBP: ffffffff8c155f60 R08: 0000000000000001 R09: 000000000000001f
R10: 0000000000000000 R11: 205d313732353254 R12: 0000000000000000
R13: 0000000000000000 R14: ffffffff8c155fb0 R15: 000000000000004f
FS:  0000000000000000(0000) GS:ffff8881f6700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f3c203696be CR3: 0000000007c9c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 serial_out drivers/tty/serial/8250/8250.h:122 [inline]
 serial8250_clear_IER+0x98/0xb0 drivers/tty/serial/8250/8250_port.c:710
 serial8250_console_write+0x18e/0x1060 drivers/tty/serial/8250/8250_port.c:3409
 console_emit_next_record kernel/printk/printk.c:2901 [inline]
 console_flush_all+0x4d5/0xd50 kernel/printk/printk.c:2967
 console_unlock+0x10c/0x260 kernel/printk/printk.c:3036
 vprintk_emit+0x17f/0x5f0 kernel/printk/printk.c:2303
 dev_vprintk_emit drivers/base/core.c:4850 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4861
 __dev_printk+0xf5/0x270 drivers/base/core.c:4873
 _dev_err+0xe5/0x120 drivers/base/core.c:4916
 wdm_int_callback+0x7d1/0xaa0 drivers/usb/class/cdc-wdm.c:276
 __usb_hcd_giveback_urb+0x359/0x5c0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x389/0x430 drivers/usb/core/hcd.c:1733
 dummy_timer+0x1415/0x35f0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 call_timer_fn+0x193/0x580 kernel/time/timer.c:1700
 expire_timers kernel/time/timer.c:1751 [inline]
 __run_timers+0x764/0xb10 kernel/time/timer.c:2022
 run_timer_softirq+0x58/0xd0 kernel/time/timer.c:2035
 __do_softirq+0x20a/0x94b kernel/softirq.c:553
 invoke_softirq kernel/softirq.c:427 [inline]
 __irq_exit_rcu kernel/softirq.c:632 [inline]
 irq_exit_rcu+0xa7/0x110 kernel/softirq.c:644
 sysvec_apic_timer_interrupt+0x8e/0xb0 arch/x86/kernel/apic/apic.c:1076
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:649
RIP: 0010:__sanitizer_cov_trace_switch+0x40/0x90 kernel/kcov.c:341
Code: 48 83 f8 20 74 63 77 44 48 83 f8 08 74 53 48 83 f8 10 75 2f 41 bd 03 00 00 00 4c 8b 75 00 31 db 4d 85 f6 74 1e 48 8b 74 dd 10 <4c> 89 e2 4c 89 ef 48 83 c3 01 48 8b 4c 24 28 e8 2c fe ff ff 49 39
RSP: 0018:ffffc9000632f438 EFLAGS: 00000202
RAX: 0000000000000000 RBX: 0000000000000006 RCX: ffffffff81139cb5
RDX: ffff888121bd0000 RSI: 0000000000000008 RDI: 0000000000000001
RBP: ffffffff8685b4a0 R08: 0000000000000001 R09: 0000000000000007
R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000005
R13: 0000000000000001 R14: 0000000000000008 R15: ffffc9000632f51d
 unwind_next_frame+0x6b5/0x2390 arch/x86/kernel/unwind_orc.c:515
 arch_stack_walk+0xfa/0x170 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x96/0xd0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x50 mm/kasan/common.c:45
 kasan_set_track+0x25/0x30 mm/kasan/common.c:52
 kasan_save_free_info+0x2b/0x40 mm/kasan/generic.c:522
 ____kasan_slab_free mm/kasan/common.c:236 [inline]
 ____kasan_slab_free+0x13c/0x190 mm/kasan/common.c:200
 kasan_slab_free include/linux/kasan.h:164 [inline]
 slab_free_hook mm/slub.c:1800 [inline]
 slab_free_freelist_hook mm/slub.c:1826 [inline]
 slab_free mm/slub.c:3809 [inline]
 kmem_cache_free+0x144/0x3b0 mm/slub.c:3831
 pagetable_pte_dtor include/linux/mm.h:2928 [inline]
 ___pte_free_tlb+0x1d/0x260 arch/x86/mm/pgtable.c:55
 __pte_free_tlb arch/x86/include/asm/pgalloc.h:61 [inline]
 free_pte_range mm/memory.c:194 [inline]
 free_pmd_range mm/memory.c:212 [inline]
 free_pud_range mm/memory.c:246 [inline]
 free_p4d_range mm/memory.c:280 [inline]
 free_pgd_range+0x4e7/0xb80 mm/memory.c:360
 free_pgtables+0x142/0x800 mm/memory.c:403
 exit_mmap+0x383/0xa60 mm/mmap.c:3319
 __mmput kernel/fork.c:1349 [inline]
 mmput+0xdb/0x420 kernel/fork.c:1371
 exit_mm kernel/exit.c:567 [inline]
 do_exit+0x9ad/0x2a50 kernel/exit.c:858
 do_group_exit+0xd4/0x2a0 kernel/exit.c:1021
 get_signal+0x23ba/0x2790 kernel/signal.c:2904
 arch_do_signal_or_restart+0x90/0x7f0 arch/x86/kernel/signal.c:309
 exit_to_user_mode_loop kernel/entry/common.c:168 [inline]
 exit_to_user_mode_prepare+0x116/0x1f0 kernel/entry/common.c:204
 __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]
 syscall_exit_to_user_mode+0x1d/0x60 kernel/entry/common.c:296
 do_syscall_64+0x4b/0x110 arch/x86/entry/common.c:89
 entry_SYSCALL_64_after_hwframe+0x63/0x6b
RIP: 0033:0x7fef328ea8e0
Code: Unable to access opcode bytes at 0x7fef328ea8b6.
RSP: 002b:00007fef31c2bc00 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
RAX: 0000000000000007 RBX: 0000000000000002 RCX: 00007fef328ea8e0
RDX: 0000000000000002 RSI: 00007fef31c2bca0 RDI: 00000000ffffff9c
RBP: 00007fef31c2bca0 R08: 0000000000000000 R09: 00007fef31c2ba17
R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
R13: 000000000000006e R14: 00007fef32a0b120 R15: 00007ffc0b34fc98
 </TASK>
imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71): ignored
usb 6-1: new high-speed USB device number 126 using dummy_hcd
usb 6-1: config 0 has an invalid interface number: 20 but max is 0
usb 6-1: config 0 has no interface number 0
usb 6-1: config 0 interface 20 altsetting 59 endpoint 0x84 has an invalid bInterval 0, changing to 7
usb 6-1: config 0 interface 20 has no altsetting 0
usb 6-1: New USB device found, idVendor=12cf, idProduct=7111, bcdDevice=26.11
usb 6-1: New USB device strings: Mfr=180, Product=0, SerialNumber=0
usb 6-1: Manufacturer: syz
usb 6-1: config 0 descriptor??
radio-si470x 6-1:0.20: DeviceID=0x0000 ChipID=0x0000
radio-si470x 6-1:0.20: This driver is known to work with firmware version 12, but the device has firmware version 0.
radio-si470x 6-1:0.20: software version 0, hardware version 0
radio-si470x 6-1:0.20: This driver is known to work with hardware version 1, but the device has hardware version 0.
radio-si470x 6-1:0.20: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
radio-si470x 6-1:0.20: si470x_set_report: usb_control_msg returned -71
radio-si470x 6-1:0.20: non-zero urb status (-71)
radio-si470x 6-1:0.20: si470x_set_report: usb_control_msg returned -71
radio-si470x: probe of 6-1:0.20 failed with error -22
usb 6-1: USB disconnect, device number 126
usb 4-1: USB disconnect, device number 127
radio-si470x 6-1:0.20: non-zero urb status (-71)
radio-si470x 6-1:0.20: non-zero urb status (-71)
radio-si470x 6-1:0.20: non-zero urb status (-71)
radio-si470x 6-1:0.20: non-zero urb status (-71)
usb 4-1: new high-speed USB device number 2 using dummy_hcd
usb 4-1: Using ep0 maxpacket: 32
usb 4-1: config index 0 descriptor too short (expected 33948, got 27)
usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=d3.66
usb 4-1: New USB device strings: Mfr=66, Product=120, SerialNumber=172
usb 4-1: Product: syz
usb 4-1: Manufacturer: syz
usb 4-1: SerialNumber: syz
usb 4-1: config 0 descriptor??
ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
usb 5-1: new high-speed USB device number 58 using dummy_hcd
usb 5-1: Using ep0 maxpacket: 8
usb 5-1: config 0 has too many interfaces: 237, using maximum allowed: 32
usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
usb 5-1: config 0 has 1 interface, different from the descriptor's value: 237
usb 5-1: config 0 interface 0 has no altsetting 0
usb 5-1: New USB device found, idVendor=0bd3, idProduct=0d55, bcdDevice=69.6a
usb 5-1: New USB device strings: Mfr=64, Product=0, SerialNumber=0
usb 5-1: Manufacturer: syz
usb 5-1: config 0 descriptor??
usb 5-1: Found UVC 0.00 device <unnamed> (0bd3:0d55)
uvcvideo 5-1:0.0: Entity type for entity Output 255 was not initialized!
usb 5-1: Failed to create links for entity 255
usb 5-1: Failed to register entities (-22).
usb 5-1: USB disconnect, device number 58
radio-si470x 6-1:0.20: non-zero urb status (-71)
usb 3-1: new high-speed USB device number 120 using dummy_hcd
usb 3-1: device descriptor read/64, error -71
usb 3-1: device descriptor read/64, error -71
usb 3-1: new high-speed USB device number 121 using dummy_hcd
usb 3-1: device descriptor read/64, error -71
usb 3-1: device descriptor read/64, error -71
usb usb3-port1: attempt power cycle
usb 3-1: new high-speed USB device number 122 using dummy_hcd