usb 6-1: pegasus_irq - nonzero urb status received: -71
usb 6-1: pegasus_irq - nonzero urb status received: -71
usb 6-1: pegasus_irq - nonzero urb status received: -71
------------[ cut here ]------------
1
WARNING: kernel/rcu/tree_stall.h:1048 at rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1048, CPU#0: kworker/u9:2/17318
Modules linked in:
CPU: 0 UID: 0 PID: 17318 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT(full)
Tainted: [L]=SOFTLOCKUP
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: hci6 hci_error_reset
RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 kernel/rcu/tree_stall.h:1048
Code: ff ff 48 c7 c7 e0 d6 7c 9a be 04 00 00 00 e8 83 2c 88 00 4c 89 f7 b8 01 00 00 00 87 05 25 55 d0 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 00 f8 b5 8e 74 47 48 c7 c0 40 d0 57 90 48 c1 e8
RSP: 0018:ffffc90000007d98 EFLAGS: 00010046
RAX: 0000000000000000 RBX: 0000000000000246 RCX: ffffffff81ac81ad
RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8eb5f800
RBP: ffffc90000007f20 R08: 0000000000000003 R09: 0000000000000004
R10: dffffc0000000000 R11: fffffbfff34f9adc R12: 0000000000002904
R13: dffffc0000000000 R14: ffffffff8eb5f800 R15: dffffc0000000000
FS: 0000000000000000(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 000000110c3bd5eb CR3: 000000007ac78000 CR4: 0000000000350ef0
Call Trace:
rcu_core+0x414/0x10a0 kernel/rcu/tree.c:2892
handle_softirqs+0x225/0x840 kernel/softirq.c:622
__do_softirq kernel/softirq.c:656 [inline]
invoke_softirq kernel/softirq.c:496 [inline]
__irq_exit_rcu+0xca/0x220 kernel/softirq.c:735
irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1062
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:console_flush_one_record arch/x86/include/asm/irqflags.h:-1 [inline]
RIP: 0010:console_flush_all+0x7d2/0xaf0 kernel/printk/printk.c:3343
Code: ff ff e8 31 2b 21 00 90 0f 0b 90 e9 9c fc ff ff e8 23 2b 21 00 e8 ce 4d 2b 0a 48 85 db 74 c0 e8 14 2b 21 00 fb 48 8b 5c 24 18 <48> 8b 44 24 28 42 80 3c 20 00 4d 8d 77 58 74 08 4c 89 f7 e8 16 c4
RSP: 0018:ffffc900050b7420 EFLAGS: 00000293
RAX: ffffffff81a5e75c RBX: ffffc900050b7580 RCX: ffff888020f73e00
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900050b7530 R08: ffffffff90579d37 R09: 1ffffffff20af3a6
R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: dffffc0000000000
R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff8f46f8e0
__console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
console_unlock+0xd1/0x1c0 kernel/printk/printk.c:3413
vprintk_emit+0x485/0x560 kernel/printk/printk.c:2479
_printk+0xdd/0x130 kernel/printk/printk.c:2504
bt_err+0x121/0x180 net/bluetooth/lib.c:293
__hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:271 [inline]
__hci_cmd_sync_status net/bluetooth/hci_sync.c:287 [inline]
hci_reset_sync+0x116/0x140 net/bluetooth/hci_sync.c:3787
hci_init1_sync net/bluetooth/hci_sync.c:3873 [inline]
hci_init_sync net/bluetooth/hci_sync.c:5065 [inline]
hci_dev_init_sync net/bluetooth/hci_sync.c:5257 [inline]
hci_dev_open_sync+0xa8e/0x2ed0 net/bluetooth/hci_sync.c:5335
hci_dev_do_open net/bluetooth/hci_core.c:428 [inline]
hci_error_reset+0x161/0x4c0 net/bluetooth/hci_core.c:996
process_one_work kernel/workqueue.c:3322 [inline]
process_scheduled_works+0xa8e/0x14e0 kernel/workqueue.c:3405
worker_thread+0xa47/0xfb0 kernel/workqueue.c:3486
kthread+0x388/0x470 kernel/kthread.c:436
ret_from_fork+0x514/0xb70 arch/x86/kernel/process.c:158
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
----------------
Code disassembly (best guess), 1 bytes skipped:
0: ff ljmp (bad)
1: e8 31 2b 21 00 call 0x212b37
6: 90 nop
7: 0f 0b ud2
9: 90 nop
a: e9 9c fc ff ff jmp 0xfffffcab
f: e8 23 2b 21 00 call 0x212b37
14: e8 ce 4d 2b 0a call 0xa2b4de7
19: 48 85 db test %rbx,%rbx
1c: 74 c0 je 0xffffffde
1e: e8 14 2b 21 00 call 0x212b37
23: fb sti
24: 48 8b 5c 24 18 mov 0x18(%rsp),%rbx
* 29: 48 8b 44 24 28 mov 0x28(%rsp),%rax <-- trapping instruction
2e: 42 80 3c 20 00 cmpb $0x0,(%rax,%r12,1)
33: 4d 8d 77 58 lea 0x58(%r15),%r14
37: 74 08 je 0x41
39: 4c 89 f7 mov %r14,%rdi
3c: e8 .byte 0xe8
3d: 16 (bad)
3e: c4 .byte 0xc4