rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2631 jiffies s: 53617 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 26681 Comm: kworker/0:4 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:unwind_next_frame+0x8e0/0x2a00 arch/x86/kernel/unwind_orc.c:517
Code: 48 83 c5 10 e9 da 06 00 00 83 fd 04 0f 84 6c 01 00 00 83 fd 05 0f 85 ff 02 00 00 e8 3a 5c 52 00 48 8b 44 24 58 42 80 3c 28 00 <74> 08 48 89 df e8 66 7f b6 00 48 8b 33 48 8b 54 24 18 48 8d 5a 01
RSP: 0018:ffffc90000006a40 EFLAGS: 00000046
RAX: 1ffff92000000d77 RBX: ffffc90000006bb8 RCX: ffff88802dda3c00
RDX: 0000000000010100 RSI: ffffffff8e5a3da0 RDI: 0000000000000005
RBP: 0000000000000005 R08: 0000000000000005 R09: ffffffff81412f0e
R10: 0000000000000008 R11: ffff88802dda3c00 R12: ffffffff900778e0
R13: dffffc0000000000 R14: ffffc90000006bd0 R15: 1ffff92000000d70
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31113ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 __unwind_start+0x641/0x7c0 arch/x86/kernel/unwind_orc.c:760
 unwind_start arch/x86/include/asm/unwind.h:64 [inline]
 arch_stack_walk+0x103/0x1b0 arch/x86/kernel/stacktrace.c:24
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193
 kmalloc_noprof include/linux/slab.h:681 [inline]
 dummy_urb_enqueue+0x7d/0x760 drivers/usb/gadget/udc/dummy_hcd.c:1271
 usb_hcd_submit_urb+0x36c/0x1e80 drivers/usb/core/hcd.c:1533
 ath9k_hif_usb_rx_cb+0x11a3/0x1500 drivers/net/wireless/ath/ath9k/hif_usb.c:723
 __usb_hcd_giveback_urb+0x42c/0x6e0 drivers/usb/core/hcd.c:1650
 dummy_timer+0x830/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 kernel/kcov.c:320
Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 c0 d6 03 00 65 8b 05 70 45 70 7e 25 00 01 ff 00 74
RSP: 0018:ffffc90000007a98 EFLAGS: 00000293
RAX: 0000000000000100 RBX: 00000010c6f7a0b5 RCX: ffff88802dda3c00
RDX: ffff88802dda3c00 RSI: 0000000000000000 RDI: 00000010c6f7a0b5
RBP: 0019999999999998 R08: ffffffff89b5bdf3 R09: fffff52000000f58
R10: dffffc0000000000 R11: fffff52000000f58 R12: 0000000225c17d04
R13: 0000000000000000 R14: 00000015798ee228 R15: 1ffff11005a42c63
 pie_calculate_probability+0x293/0x820 net/sched/sch_pie.c:347
 fq_pie_timer+0x26d/0x590 net/sched/sch_fq_pie.c:398
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:format_decode+0x6c6/0x1bb0
Code: 4c 24 18 80 e1 07 38 c1 7c a9 be 08 00 00 00 48 8b 7c 24 18 e8 4b 65 4d f6 eb 98 e8 b4 40 e9 f5 48 8b 5c 24 40 e9 4a 09 00 00 <48> 8b 44 24 30 42 80 3c 30 00 74 0d 48 8d bc 24 80 00 00 00 e8 c1
RSP: 0018:ffffc9000914eb20 EFLAGS: 00000212
RAX: 0000000000000000 RBX: 0000000000000035 RCX: ffff88802dda3c00
RDX: 0000000000000005 RSI: ffffffff8fde5e60 RDI: 0000000000000035
RBP: ffffc9000914ec10 R08: 0000000000000001 R09: ffffffff8baa4aaa
R10: 0000000000000005 R11: ffff88802dda3c00 R12: ffffffff8beb9ac2
R13: ffffffff8beb9ac2 R14: dffffc0000000000 R15: 1ffffffff17d7358
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2910
 console_emit_next_record kernel/printk/printk.c:2950 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3049
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3118
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd10 kernel/workqueue.c:3389
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
hrtimer: interrupt took 9450445 ns
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 11017 jiffies s: 53617 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 26681 Comm: kworker/0:4 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:__orc_find arch/x86/kernel/unwind_orc.c:102 [inline]
RIP: 0010:orc_find arch/x86/kernel/unwind_orc.c:227 [inline]
RIP: 0010:unwind_next_frame+0x50b/0x2a00 arch/x86/kernel/unwind_orc.c:494
Code: 49 8d 5c 45 00 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 34 48 63 2b 48 01 dd 48 89 ef 4c 89 f6 <e8> 60 62 52 00 48 8d 43 04 4c 39 f5 4c 0f 46 e8 48 8d 43 fc 4c 0f
RSP: 0018:ffffc90000006888 EFLAGS: 00000083
RAX: 0000000000000000 RBX: ffffffff900a4f38 RCX: dffffc0000000000
RDX: 0000000000010100 RSI: ffffffff817f2e67 RDI: ffffffff817f2d58
RBP: ffffffff817f2d58 R08: ffffffff81412c60 R09: ffffc90000006a50
R10: 0000000000000003 R11: ffffffff817f2f30 R12: ffffffff900a4f38
R13: ffffffff900a4f38 R14: ffffffff817f2e67 R15: ffffffff900a4f38
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31113ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2256 [inline]
 slab_free mm/slub.c:4477 [inline]
 kfree+0x149/0x360 mm/slub.c:4598
 dummy_timer+0x7ce/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1981
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:unwind_get_return_address+0x0/0xc0 arch/x86/kernel/unwind_orc.c:365
Code: b6 00 48 8d 7c 24 40 8b 74 24 14 e9 dd fe ff ff e8 f5 e3 6f 0a 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff
RSP: 0018:ffffc90000007438 EFLAGS: 00000246
RAX: ffffffff81378a4f RBX: ffffffff81f77b66 RCX: ffff88802dda3c00
RDX: 0000000000000100 RSI: 0000000000000101 RDI: ffffc90000007440
RBP: ffffc900000074d0 R08: ffffffff814145c5 R09: ffffffff814140bf
R10: 0000000000000003 R11: ffff88802dda3c00 R12: ffff88802dda3c00
R13: ffffffff817f2f30 R14: ffffc90000007520 R15: ffffc90000007440
 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 unpoison_slab_object mm/kasan/common.c:312 [inline]
 __kasan_slab_alloc+0x66/0x80 mm/kasan/common.c:338
 kasan_slab_alloc include/linux/kasan.h:201 [inline]
 slab_post_alloc_hook mm/slub.c:3992 [inline]
 slab_alloc_node mm/slub.c:4041 [inline]
 kmem_cache_alloc_noprof+0x135/0x2a0 mm/slub.c:4048
 dst_alloc+0x12b/0x190 net/core/dst.c:89
 ip6_dst_alloc net/ipv6/route.c:342 [inline]
 icmp6_dst_alloc+0x77/0x420 net/ipv6/route.c:3275
 ndisc_send_skb+0x32a/0x1380 net/ipv6/ndisc.c:491
 addrconf_rs_timer+0x371/0x670 net/ipv6/addrconf.c:4040
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_cmp8+0x7d/0x90 kernel/kcov.c:294
Code: c1 e1 05 48 8d 41 28 4c 39 c8 77 1e 49 ff c2 4c 89 12 48 c7 44 11 08 06 00 00 00 48 89 7c 11 10 48 89 74 11 18 4c 89 44 11 20 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90
RSP: 0018:ffffc9000914ec18 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802dda3c00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000007ffffff9
RBP: ffffc9000914ed10 R08: ffffffff8baa3069 R09: ffffffff8baa28c4
R10: 0000000000000012 R11: ffff88802dda3c00 R12: ffffffff8beb9ac6
R13: 000000007ffffff9 R14: ffffc9000914ef66 R15: ffffffff8beb9ac5
 vsnprintf+0x929/0x1da0 lib/vsprintf.c:2784
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2910
 console_emit_next_record kernel/printk/printk.c:2950 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3049
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3118
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd10 kernel/workqueue.c:3389
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	0-....: (6331 ticks this GP) idle=d0dc/1/0x4000000000000000 softirq=97740/97741 fqs=4863
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:       77          6            0
rcu: 	cputime:    51477        994         3775   ==> 52480(ms)
rcu: 	(t=10500 jiffies g=154501 q=1832 ncpus=2)
CPU: 0 UID: 0 PID: 26681 Comm: kworker/0:4 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x90 kernel/kcov.c:319
Code: 10 48 89 74 0a 18 4c 89 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 65 8b 05 70 45
RSP: 0018:ffffc90000007a98 EFLAGS: 00000287
RAX: 0000000000000100 RBX: 000000a7c5ac471b RCX: ffff88802dda3c00
RDX: ffff88802dda3c00 RSI: 0000000000000000 RDI: 000000a7c5ac471b
RBP: 0019999999999998 R08: ffffffff89b5bdbf R09: fffff52000000f58
R10: dffffc0000000000 R11: fffff52000000f58 R12: 0000000225c17d04
R13: 0000000000000000 R14: 00000015798ee228 R15: 1ffff11005a42c63
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31113ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 pie_calculate_probability+0x279/0x820 net/sched/sch_pie.c:347
 fq_pie_timer+0x26d/0x590 net/sched/sch_fq_pie.c:398
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:__sanitizer_cov_trace_cmp8+0x7d/0x90 kernel/kcov.c:294
Code: c1 e1 05 48 8d 41 28 4c 39 c8 77 1e 49 ff c2 4c 89 12 48 c7 44 11 08 06 00 00 00 48 89 7c 11 10 48 89 74 11 18 4c 89 44 11 20 <c3> cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90
RSP: 0018:ffffc9000914ec18 EFLAGS: 00000293
RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88802dda3c00
RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000007ffffff9
RBP: ffffc9000914ed10 R08: ffffffff8baa3069 R09: ffffffff8baa28c4
R10: 0000000000000012 R11: ffff88802dda3c00 R12: ffffffff8beb9ac6
R13: 000000007ffffff9 R14: ffffc9000914ef66 R15: ffffffff8beb9ac5
 vsnprintf+0x929/0x1da0 lib/vsprintf.c:2784
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2910
 console_emit_next_record kernel/printk/printk.c:2950 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3049
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3118
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x86d/0xd10 kernel/workqueue.c:3389
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 26681 Comm: kworker/0:4 Not tainted 6.11.0-rc7-syzkaller-00020-g8d8d276ba2fb #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x8/0x90 kernel/kcov.c:320
Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 0c 25 c0 d6 03 00 65 8b 05 70 45 70 7e 25 00 01 ff 00 74
RSP: 0018:ffffc90000006fd8 EFLAGS: 00000046
RAX: ffffffff877b8c3e RBX: ffffffff877b8c3e RCX: ffff88802dda3c00
RDX: 0000000000010100 RSI: ffffffff877b8c3e RDI: 0000000000000000
RBP: ffffc90000007070 R08: ffffffff81378a22 R09: ffffffff814140bf
R10: 0000000000000003 R11: ffff88802dda3c00 R12: ffff88802dda3c00
R13: ffffffff817f2f30 R14: ffffc900000070c0 R15: ffffc90000006fe0
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31113ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 arch_stack_walk+0x132/0x1b0 arch/x86/kernel/stacktrace.c:27
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2256 [inline]
 slab_free mm/slub.c:4477 [inline]
 kfree+0x149/0x360 mm/slub.c:4598
 dummy_timer+0x7ce/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1981
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:pie_calculate_probability+0x3aa/0x820 net/sched/sch_pie.c:374
Code: 5c d2 dd f7 49 01 dc 49 81 ff cb 9a 3b 00 4c 0f 42 e3 4b 8d 1c 2c 49 be 00 00 00 00 00 fc ff df 48 8b 44 24 28 42 80 3c 30 00 <48> 8b 6c 24 30 74 08 48 89 ef e8 77 f1 41 f8 48 89 5d 00 31 ff 4c
RSP: 0018:ffffc90000007aa0 EFLAGS: 00000246
RAX: 1ffff1100da703d8 RBX: fffffff0a3da8872 RCX: ffff88802dda3c00