Extracting prog: 1m10.363659989s
Minimizing prog: 3m11.181917983s
Simplifying prog options: 0s
Extracting C: 26.998746288s
Simplifying C: 6m19.287321312s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program crashed: BUG: sleeping function called from invalid context in __hid_request
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid
detailed listing:
executing program 0:
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write$UHID_CREATE2
detailed listing:
executing program 0:
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x3, 0x4d8, 0xc002}}, 0x118)

program did not crash
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
simplifying C reproducer
testing compiled C program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program did not crash
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing compiled C program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
program crashed: BUG: sleeping function called from invalid context in __hid_request
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program did not crash
validation run: crashed=false
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program crashed: BUG: sleeping function called from invalid context in __hid_request
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program crashed: BUG: sleeping function called from invalid context in __hid_request
validation run: crashed=true
testing program (duration=30s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$uhid-write$UHID_CREATE2
detailed listing:
executing program 0:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x43, 0x3, 0x4d8, 0xc002, 0x0, 0x0, "05010900a10185110901150026ff0075089502810285210902150026ff0075089501810285910904150026ff0075089501910285920903150026ff00750895019102c0"}}, 0x15b)

program crashed: BUG: sleeping function called from invalid context in __hid_request
validation run: crashed=true
reproducing took 15m29.375100427s
repro crashed as (corrupted=false):
rc_core: IR keymap rc-rc6-mce not found
Registered IR keymap rc-empty
rc rc0: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0002/rc/rc0
input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0002/rc/rc0/input6
BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:322
in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1348, name: kworker/0:2
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
locks held by kworker/0:2/1348: 4, last CPU#0:
 #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371
 #1: ffffc9000620fd08 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372
 #2: ffff8880533a5a58 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff8880533a5a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1073
 #3: ffff8880287b5970 (&data->lock){....}-{3:3}, at: picolcd_set_contrast+0x173/0x360 drivers/hid/hid-picolcd_lcd.c:36
irq event stamp: 43714
hardirqs last  enabled at (43713): [<ffffffff827f1804>] kasan_quarantine_put+0x104/0x240 mm/kasan/quarantine.c:234
hardirqs last disabled at (43714): [<ffffffff8bd24722>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline]
hardirqs last disabled at (43714): [<ffffffff8bd24722>] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:181
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767
softirqs last disabled at (43683): [<ffffffff81ca23c4>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last disabled at (43683): [<ffffffff81ca23c4>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last disabled at (43683): [<ffffffff81ca23c4>] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 UID: 0 PID: 1348 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events uhid_device_add_worker
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 __might_resched.cold+0x1dc/0x222 kernel/sched/core.c:9234
 might_alloc include/linux/sched/mm.h:322 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x4f9/0x840 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 hid_alloc_report_buf drivers/hid/hid-core.c:1923 [inline]
 __hid_request+0xb5/0x490 drivers/hid/hid-core.c:2014
 hid_hw_request+0x98/0xc0 drivers/hid/hid-core.c:2533
 picolcd_set_contrast+0x2b1/0x360 drivers/hid/hid-picolcd_lcd.c:39
 picolcd_init_lcd+0x245/0x300 drivers/hid/hid-picolcd_lcd.c:70
 picolcd_probe_lcd drivers/hid/hid-picolcd_core.c:477 [inline]
 picolcd_probe+0xc8a/0x1440 drivers/hid/hid-picolcd_core.c:580
 __hid_device_probe drivers/hid/hid-core.c:2839 [inline]
 hid_device_probe+0x4fe/0x850 drivers/hid/hid-core.c:2878
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 hid_add_device+0x2bf/0x440 drivers/hid/hid-core.c:3065
 uhid_device_add_worker+0x3a/0x70 drivers/hid/uhid.c:73
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
hid-picolcd 0003:04D8:C002.0002: No report with id 0x94 found
hid-picolcd 0003:04D8:C002.0002: failed to configure display

final repro crashed as (corrupted=false):
rc_core: IR keymap rc-rc6-mce not found
Registered IR keymap rc-empty
rc rc0: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0002/rc/rc0
input: syz0 as /devices/virtual/misc/uhid/0003:04D8:C002.0002/rc/rc0/input6
BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:322
in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 1348, name: kworker/0:2
preempt_count: 1, expected: 0
RCU nest depth: 0, expected: 0
locks held by kworker/0:2/1348: 4, last CPU#0:
 #0: ffff88801c0aa940 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1466/0x1b10 kernel/workqueue.c:3371
 #1: ffffc9000620fd08 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_one_work+0xa2c/0x1b10 kernel/workqueue.c:3372
 #2: ffff8880533a5a58 (&dev->mutex){....}-{4:4}, at: device_lock include/linux/device.h:1104 [inline]
 #2: ffff8880533a5a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 drivers/base/dd.c:1073
 #3: ffff8880287b5970 (&data->lock){....}-{3:3}, at: picolcd_set_contrast+0x173/0x360 drivers/hid/hid-picolcd_lcd.c:36
irq event stamp: 43714
hardirqs last  enabled at (43713): [<ffffffff827f1804>] kasan_quarantine_put+0x104/0x240 mm/kasan/quarantine.c:234
hardirqs last disabled at (43714): [<ffffffff8bd24722>] __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:153 [inline]
hardirqs last disabled at (43714): [<ffffffff8bd24722>] _raw_spin_lock_irqsave+0x52/0x60 kernel/locking/spinlock.c:181
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last  enabled at (43688): [<ffffffff81ca23c4>] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767
softirqs last disabled at (43683): [<ffffffff81ca23c4>] __do_softirq kernel/softirq.c:679 [inline]
softirqs last disabled at (43683): [<ffffffff81ca23c4>] invoke_softirq kernel/softirq.c:519 [inline]
softirqs last disabled at (43683): [<ffffffff81ca23c4>] __irq_exit_rcu+0x194/0x210 kernel/softirq.c:767
Preemption disabled at:
[<0000000000000000>] 0x0
CPU: 0 UID: 0 PID: 1348 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Workqueue: events uhid_device_add_worker
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 __might_resched.cold+0x1dc/0x222 kernel/sched/core.c:9234
 might_alloc include/linux/sched/mm.h:322 [inline]
 slab_pre_alloc_hook mm/slub.c:4636 [inline]
 slab_alloc_node mm/slub.c:4974 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_noprof+0x4f9/0x840 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 hid_alloc_report_buf drivers/hid/hid-core.c:1923 [inline]
 __hid_request+0xb5/0x490 drivers/hid/hid-core.c:2014
 hid_hw_request+0x98/0xc0 drivers/hid/hid-core.c:2533
 picolcd_set_contrast+0x2b1/0x360 drivers/hid/hid-picolcd_lcd.c:39
 picolcd_init_lcd+0x245/0x300 drivers/hid/hid-picolcd_lcd.c:70
 picolcd_probe_lcd drivers/hid/hid-picolcd_core.c:477 [inline]
 picolcd_probe+0xc8a/0x1440 drivers/hid/hid-picolcd_core.c:580
 __hid_device_probe drivers/hid/hid-core.c:2839 [inline]
 hid_device_probe+0x4fe/0x850 drivers/hid/hid-core.c:2878
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x210/0x460 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __device_attach_driver+0x1df/0x320 drivers/base/dd.c:1026
 bus_for_each_drv+0x159/0x1e0 drivers/base/bus.c:500
 __device_attach+0x1e4/0x4d0 drivers/base/dd.c:1098
 device_initial_probe+0xaf/0xd0 drivers/base/dd.c:1153
 bus_probe_device+0x64/0x160 drivers/base/bus.c:620
 device_add+0x121d/0x1970 drivers/base/core.c:3776
 hid_add_device+0x2bf/0x440 drivers/hid/hid-core.c:3065
 uhid_device_add_worker+0x3a/0x70 drivers/hid/uhid.c:73
 process_one_work+0xac7/0x1b10 kernel/workqueue.c:3396
 process_scheduled_works kernel/workqueue.c:3479 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3560
 kthread+0x373/0x450 kernel/kthread.c:436
 ret_from_fork+0x730/0xd60 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
hid-picolcd 0003:04D8:C002.0002: No report with id 0x94 found
hid-picolcd 0003:04D8:C002.0002: failed to configure display