cdc_wdm 3-1:1.0: nonzero urb status received: -71
cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
cdc_wdm 3-1:1.0: nonzero urb status received: -71
cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4821 at kernel/kcov.c:870 kcov_remote_start+0x274/0x6e0 kernel/kcov.c:870
Modules linked in:
CPU: 1 PID: 4821 Comm: kworker/1:4 Not tainted 6.10.0-rc2-syzkaller-00024-g5821bf2dffbe #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
Workqueue: usb_hub_wq hub_event
RIP: 0010:kcov_remote_start+0x274/0x6e0 kernel/kcov.c:870
Code: c0 22 49 89 47 08 e9 87 00 00 00 f6 c4 01 0f 85 06 fe ff ff e9 dc fd ff ff 44 8b 95 54 15 00 00 45 85 d2 0f 84 d5 fe ff ff 90 <0f> 0b 90 e9 b9 00 00 00 65 8b 05 55 72 b0 7e 49 c7 c0 2e e4 04 88
RSP: 0000:ffffc900001b8550 EFLAGS: 00010002
RAX: 0000000000010101 RBX: 000000000002d428 RCX: ffffffff813080be
RDX: 0000000000000002 RSI: ffffffff86c7d9a0 RDI: ffffffff86e78600
RBP: ffff88811990ba00 R08: 0000000000000000 R09: fffffbfff19989a6
R10: 0000000000000001 R11: 0000000000000007 R12: ffff8881f652d428
R13: 0000000000000000 R14: 0100000000000003 R15: ffff88811990ba00
FS:  0000000000000000(0000) GS:ffff8881f6500000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b3162a000 CR3: 0000000115a3c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 kcov_remote_start_usb include/linux/kcov.h:53 [inline]
 kcov_remote_start_usb_softirq include/linux/kcov.h:66 [inline]
 __usb_hcd_giveback_urb+0x331/0x5c0 drivers/usb/core/hcd.c:1647
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1732
 dummy_timer+0x17f6/0x3900 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1687 [inline]
 __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1751
 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1813
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x3e/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:queue_work_on+0x98/0x140 kernel/workqueue.c:2415
Code: e8 3d a7 31 00 48 85 ed 75 44 e8 03 ac 31 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 21 a7 31 00 48 85 db 0f 85 8d 00 00 00 <e8> e3 ab 31 00 44 89 e0 5b 5d 41 5c 41 5d 41 5e c3 cc cc cc cc e8
RSP: 0000:ffffc900001b8ac8 EFLAGS: 00000287
RAX: 00000000000008a5 RBX: 0000000000000000 RCX: ffffc90001203000
RDX: 0000000000040000 RSI: ffffffff812197b2 RDI: 0000000000000007
RBP: 0000000000000200 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 000000000000000a R12: 0000000000000001
R13: 0000000000000008 R14: ffff888105298800 R15: 0000000000000002
 queue_work include/linux/workqueue.h:621 [inline]
 kick_hub_wq drivers/usb/core/hub.c:724 [inline]
 kick_hub_wq+0x145/0x2a0 drivers/usb/core/hub.c:705
 hub_irq+0x322/0x440 drivers/usb/core/hub.c:804
 __usb_hcd_giveback_urb+0x364/0x5c0 drivers/usb/core/hcd.c:1648
 usb_giveback_urb_bh+0x28f/0x570 drivers/usb/core/hcd.c:1682
 process_one_work+0x9fb/0x1b60 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 bh_worker+0x5a4/0x8a0 kernel/workqueue.c:3572
 workqueue_softirq_action+0x12c/0x190 kernel/workqueue.c:3599
 tasklet_hi_action+0x17/0x70 kernel/softirq.c:816
 handle_softirqs+0x209/0x8e0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xac/0x110 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x90/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:152 [inline]
RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 kernel/locking/spinlock.c:194
Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 76 2c 9c fa 48 89 df e8 5e a9 9c fa f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 <bf> 01 00 00 00 e8 95 1f 91 fa 65 8b 05 16 8c 6e 79 85 c0 74 16 5b
RSP: 0000:ffffc9000467f4b8 EFLAGS: 00000246
RAX: 0000000000000002 RBX: ffffffff89127320 RCX: 1ffffffff199cd8e
RDX: 0000000000000000 RSI: ffffffff86c7d6a0 RDI: ffffffff86e78600
RBP: 0000000000000283 R08: 0000000000000001 R09: fffffbfff19989a6
R10: ffffffff8ccc4d37 R11: 0000000000000009 R12: 1ffff920008cfe9f
R13: ffff88810971923c R14: ffff888107fd9100 R15: ffff888107fd9118
 spin_unlock_irqrestore include/linux/spinlock.h:406 [inline]
 usb_hcd_poll_rh_status+0x572/0x7f0 drivers/usb/core/hcd.c:762
 dummy_hub_control+0x57d/0x1f30 drivers/usb/gadget/udc/dummy_hcd.c:2360
----------------
Code disassembly (best guess):
   0:	e8 3d a7 31 00       	call   0x31a742
   5:	48 85 ed             	test   %rbp,%rbp
   8:	75 44                	jne    0x4e
   a:	e8 03 ac 31 00       	call   0x31ac12
   f:	9c                   	pushf
  10:	5b                   	pop    %rbx
  11:	81 e3 00 02 00 00    	and    $0x200,%ebx
  17:	31 ff                	xor    %edi,%edi
  19:	48 89 de             	mov    %rbx,%rsi
  1c:	e8 21 a7 31 00       	call   0x31a742
  21:	48 85 db             	test   %rbx,%rbx
  24:	0f 85 8d 00 00 00    	jne    0xb7
* 2a:	e8 e3 ab 31 00       	call   0x31ac12 <-- trapping instruction
  2f:	44 89 e0             	mov    %r12d,%eax
  32:	5b                   	pop    %rbx
  33:	5d                   	pop    %rbp
  34:	41 5c                	pop    %r12
  36:	41 5d                	pop    %r13
  38:	41 5e                	pop    %r14
  3a:	c3                   	ret
  3b:	cc                   	int3
  3c:	cc                   	int3
  3d:	cc                   	int3
  3e:	cc                   	int3
  3f:	e8                   	.byte 0xe8