Extracting prog: 27m37.464689558s Minimizing prog: 1h3m45.917636495s Simplifying prog options: 0s Extracting C: 1m41.550674646s Simplifying C: 1h46m24.74584512s 30 programs, 3 VMs, timeouts [6m0s] extracting reproducer from 30 programs single: executing 5 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_sctp-shutdown-setsockopt$inet_sctp6_SCTP_ADD_STREAMS-socket$nl_route-setsockopt$netlink_NETLINK_TX_RING-socket$netlink-bpf$PROG_LOAD-sendmsg$nl_route_sched detailed listing: executing program 0: socket$inet6_sctp(0xa, 0x0, 0x84) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffebc}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4 detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fd, &(0x7f00000005c0)="$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") program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$netlink-socket-sendmsg$nl_route_sched-getsockname$packet-sendmsg$nl_route_sched-sendmsg$nl_route_sched-socket$netlink-sendmmsg detailed listing: executing program 0: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x2c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs-ioctl$VHOST_SET_VRING_KICK-sched_setaffinity-prctl$PR_SCHED_CORE-openat$hwrng-openat$nullb-dup-mmap-preadv-madvise detailed listing: executing program 0: syz_open_procfs(0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x17) program did not crash testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program crashed: INFO: rcu detected stall in ieee80211_tasklet_handler single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB='s'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash testing program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb detailed listing: executing program 0: syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYBLOB='s'], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=9m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in NF_HOOK simplifying C reproducer testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program did not crash testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program did not crash testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: task hung in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: task hung in kernfs_add_one testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: task hung in kernfs_find_and_get_ns testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: task hung in jbd2_journal_commit_transaction testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program did not crash testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in smpboot_thread_fn testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in corrupted testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program crashed: INFO: rcu detected stall in aoecmd_cfg testing compiled C program (duration=9m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_dev$evdev-syz_usb_connect$cdc_ncm-syz_open_dev$char_usb program did not crash reproducing took 3h19m29.678873732s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2648 jiffies s: 6261 root: 0x0/. rcu: blocking rcu_node structures (internal RCU debug): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2822 jiffies s: 6265 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 NMI backtrace for cpu 1 CPU: 1 PID: 5151 Comm: kworker/1:5 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:206 Code: 8b 3d 3c 5d 44 0c 48 89 de 5b e9 c3 02 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 20 bf 6d 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc90000a17480 EFLAGS: 00000017 RAX: ffffffff8b776686 RBX: 0000000000000035 RCX: ffff888022f15a00 RDX: 0000000000010102 RSI: 00000000fffffffb RDI: ffffc90000a17540 RBP: 1ffff92000142ea8 R08: ffffffff8b76d162 R09: ffffffff8b76cfda R10: 0000000000000005 R11: ffff888022f15a00 R12: 0000000000000005 R13: dffffc0000000000 R14: ffffc90000a17540 R15: ffffffff8bcb7f83 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f39fbd50128 CR3: 000000000e132000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skip_atoi+0xb6/0xd0 lib/vsprintf.c:172 format_decode+0xb15/0x1bb0 lib/vsprintf.c:2592 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776 sprintf+0xda/0x120 lib/vsprintf.c:3028 print_time kernel/printk/printk.c:1327 [inline] info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1353 record_print_text kernel/printk/printk.c:1402 [inline] printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2855 console_emit_next_record kernel/printk/printk.c:2895 [inline] console_flush_all+0x410/0xfd0 kernel/printk/printk.c:2994 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3063 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2345 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4951 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4962 _dev_err+0x122/0x170 drivers/base/core.c:5017 wdm_int_callback+0x41f/0xac0 drivers/usb/class/cdc-wdm.c:269 __usb_hcd_giveback_urb+0x373/0x530 drivers/usb/core/hcd.c:1648 dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1687 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1751 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 2e 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 2b dd f5 65 8b 05 94 76 7b 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc90000a18900 EFLAGS: 00000206 RAX: 398c968f1c965c00 RBX: 1ffff92000143124 RCX: ffffffff8172c69a RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: 0000000000000001 RBP: ffffc90000a189a0 R08: ffffffff92f7164f R09: 1ffffffff25ee2c9 R10: dffffc0000000000 R11: fffffbfff25ee2ca R12: dffffc0000000000 R13: 1ffff92000143120 R14: ffffc90000a18920 R15: 0000000000000246 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108 aoenet_xmit+0x145/0x1a0 drivers/block/aoe/aoenet.c:123 aoecmd_cfg+0x9d6/0xa30 drivers/block/aoe/aoecmd.c:1363 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1843 [inline] __run_timers kernel/time/timer.c:2417 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428 run_timer_base kernel/time/timer.c:2437 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:preempt_schedule+0xe1/0xf0 Code: 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 18 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 1f 00 00 00 c8 e8 78 bd f6 ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffc900042c7240 EFLAGS: 00000246 RAX: 1ffff110045e2b40 RBX: 1ffff92000858e48 RCX: 1ffff92000858e20 RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: ffff888022f16ff8 RBP: ffffc900042c72d8 R08: ffffffff92f71657 R09: 1ffffffff25ee2ca R10: dffffc0000000000 R11: fffffbfff25ee2cb R12: 1ffff92000858e4c R13: dffffc0000000000 R14: ffffc900042c7260 R15: dffffc0000000000 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 vprintk_emit+0x690/0x770 kernel/printk/printk.c:2346 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4951 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4962 _dev_info+0x122/0x170 drivers/base/core.c:5020 hub_port_init+0x7bf/0x2670 drivers/usb/core/hub.c:4950 hub_port_connect drivers/usb/core/hub.c:5450 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x295f/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 4.435 msecs cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2648 jiffies s: 6261 root: 0x0/. rcu: blocking rcu_node structures (internal RCU debug): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2822 jiffies s: 6265 root: 0x2/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 0 to CPUs 1: cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 NMI backtrace for cpu 1 CPU: 1 PID: 5151 Comm: kworker/1:5 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 kernel/kcov.c:206 Code: 8b 3d 3c 5d 44 0c 48 89 de 5b e9 c3 02 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 c0 d4 03 00 65 8b 15 20 bf 6d 7e f7 c2 00 01 ff 00 RSP: 0018:ffffc90000a17480 EFLAGS: 00000017 RAX: ffffffff8b776686 RBX: 0000000000000035 RCX: ffff888022f15a00 RDX: 0000000000010102 RSI: 00000000fffffffb RDI: ffffc90000a17540 RBP: 1ffff92000142ea8 R08: ffffffff8b76d162 R09: ffffffff8b76cfda R10: 0000000000000005 R11: ffff888022f15a00 R12: 0000000000000005 R13: dffffc0000000000 R14: ffffc90000a17540 R15: ffffffff8bcb7f83 FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f39fbd50128 CR3: 000000000e132000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: skip_atoi+0xb6/0xd0 lib/vsprintf.c:172 format_decode+0xb15/0x1bb0 lib/vsprintf.c:2592 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776 sprintf+0xda/0x120 lib/vsprintf.c:3028 print_time kernel/printk/printk.c:1327 [inline] info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1353 record_print_text kernel/printk/printk.c:1402 [inline] printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2855 console_emit_next_record kernel/printk/printk.c:2895 [inline] console_flush_all+0x410/0xfd0 kernel/printk/printk.c:2994 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3063 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2345 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4951 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4962 _dev_err+0x122/0x170 drivers/base/core.c:5017 wdm_int_callback+0x41f/0xac0 drivers/usb/class/cdc-wdm.c:269 __usb_hcd_giveback_urb+0x373/0x530 drivers/usb/core/hcd.c:1648 dummy_timer+0x830/0x45d0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1687 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1751 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1813 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 kernel/locking/spinlock.c:194 Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 0e 2e 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 b3 2b dd f5 65 8b 05 94 76 7b 74 85 c0 74 43 48 c7 04 24 0e 36 RSP: 0018:ffffc90000a18900 EFLAGS: 00000206 RAX: 398c968f1c965c00 RBX: 1ffff92000143124 RCX: ffffffff8172c69a RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: 0000000000000001 RBP: ffffc90000a189a0 R08: ffffffff92f7164f R09: 1ffffffff25ee2c9 R10: dffffc0000000000 R11: fffffbfff25ee2ca R12: dffffc0000000000 R13: 1ffff92000143120 R14: ffffc90000a18920 R15: 0000000000000246 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline] __wake_up_common_lock+0x18c/0x1e0 kernel/sched/wait.c:108 aoenet_xmit+0x145/0x1a0 drivers/block/aoe/aoenet.c:123 aoecmd_cfg+0x9d6/0xa30 drivers/block/aoe/aoecmd.c:1363 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792 expire_timers kernel/time/timer.c:1843 [inline] __run_timers kernel/time/timer.c:2417 [inline] __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428 run_timer_base kernel/time/timer.c:2437 [inline] run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:preempt_schedule+0xe1/0xf0 Code: 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 48 75 18 48 8d 65 e0 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc e8 1f 00 00 00 c8 e8 78 bd f6 ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 RSP: 0018:ffffc900042c7240 EFLAGS: 00000246 RAX: 1ffff110045e2b40 RBX: 1ffff92000858e48 RCX: 1ffff92000858e20 RDX: dffffc0000000000 RSI: ffffffff8bcaba80 RDI: ffff888022f16ff8 RBP: ffffc900042c72d8 R08: ffffffff92f71657 R09: 1ffffffff25ee2ca R10: dffffc0000000000 R11: fffffbfff25ee2cb R12: 1ffff92000858e4c R13: dffffc0000000000 R14: ffffc900042c7260 R15: dffffc0000000000 preempt_schedule_thunk+0x1a/0x30 arch/x86/entry/thunk.S:12 vprintk_emit+0x690/0x770 kernel/printk/printk.c:2346 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4951 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4962 _dev_info+0x122/0x170 drivers/base/core.c:5020 hub_port_init+0x7bf/0x2670 drivers/usb/core/hub.c:4950 hub_port_connect drivers/usb/core/hub.c:5450 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x295f/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd70 kernel/workqueue.c:3393 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 INFO: NMI handler (nmi_cpu_backtrace_handler) took too long to run: 4.435 msecs cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: nonzero urb status received: -71 cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: nonzero urb status received: -71 cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 5-1:1.0: nonzero urb status received: -71 cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: nonzero urb status received: -71 cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19