syzbot

rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2665 jiffies s: 14657 root: 0x1/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 1 to CPUs 0:
NMI backtrace for cpu 0
CPU: 0 UID: 0 PID: 18261 Comm: kworker/0:0 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:in_softirq_really kernel/kcov.c:170 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x1e/0x70 kernel/kcov.c:216
Code: 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 15 d4 ff 77 7e 65 8b 05 d5 ff 77 7e a9 00 01 ff 00 48 8b 34 24 74 1d <f6> c4 01 74 43 a9 00 00 0f 00 75 3c a9 00 00 f0 00 75 35 8b 82 1c
RSP: 0018:ffffc900000063d0 EFLAGS: 00000006
RAX: 0000000000010102 RBX: ffffc90000006458 RCX: ffffffff813d0689
RDX: ffff88807c2cda00 RSI: ffffffff813d1253 RDI: 0000000000000001
RBP: 0000000000000002 R08: 0000000000000001 R09: 0000000000000004
R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff9161cebc
R13: ffffc90000006ed8 R14: ffffffff9161cec0 R15: 0000000000000003
FS:  0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b31e06ff8 CR3: 000000000db7c000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 deref_stack_regs arch/x86/kernel/unwind_orc.c:418 [inline]
 unwind_next_frame+0x1353/0x23a0 arch/x86/kernel/unwind_orc.c:596
 arch_stack_walk+0x100/0x170 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x95/0xd0 kernel/stacktrace.c:122
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:387
 kmalloc_noprof include/linux/slab.h:690 [inline]
 dummy_urb_enqueue+0x8d/0x8a0 drivers/usb/gadget/udc/dummy_hcd.c:1271
 usb_hcd_submit_urb+0x2d1/0x2090 drivers/usb/core/hcd.c:1533
 usb_submit_urb+0x87c/0x1730 drivers/usb/core/urb.c:581
 ath9k_hif_usb_reg_in_cb+0x500/0x720 drivers/net/wireless/ath/ath9k/hif_usb.c:790
 __usb_hcd_giveback_urb+0x389/0x6e0 drivers/usb/core/hcd.c:1650
 usb_hcd_giveback_urb+0x396/0x450 drivers/usb/core/hcd.c:1734
 dummy_timer+0x17c3/0x38d0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x20c/0xcc0 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x31b/0x800 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x10f/0x450 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x43/0xb0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline]
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:write_comp_data+0x11/0x90 kernel/kcov.c:245
Code: cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 49 89 d2 49 89 f8 49 89 f1 65 48 8b 15 4f ff 77 7e <65> 8b 05 50 ff 77 7e a9 00 01 ff 00 74 1d f6 c4 01 74 67 a9 00 00
RSP: 0018:ffffc90000006f88 EFLAGS: 00000246
RAX: 0000000000000000 RBX: ffff888078c626a8 RCX: ffffffff897bfa4f
RDX: ffff88807c2cda00 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000003 R11: 0000000000000000 R12: ffff888078c626c0
R13: 000000009e88907d R14: ffff888078c62670 R15: dffffc0000000000
 __inet_lookup_established+0x43f/0x800 net/ipv4/inet_hashtables.c:513
 __inet_lookup include/net/inet_hashtables.h:419 [inline]
 __inet_lookup_skb include/net/inet_hashtables.h:506 [inline]
 tcp_v4_rcv+0x1d68/0x4390 net/ipv4/tcp_ipv4.c:2219
 ip_protocol_deliver_rcu+0xba/0x4c0 net/ipv4/ip_input.c:205
 ip_local_deliver_finish+0x316/0x570 net/ipv4/ip_input.c:233
 NF_HOOK include/linux/netfilter.h:314 [inline]
 NF_HOOK include/linux/netfilter.h:308 [inline]
 ip_local_deliver+0x18e/0x1f0 net/ipv4/ip_input.c:254
 dst_input include/net/dst.h:460 [inline]
 ip_sublist_rcv_finish+0x2c1/0x620 net/ipv4/ip_input.c:580
 ip_list_rcv_finish.constprop.0+0x559/0x720 net/ipv4/ip_input.c:630
 ip_sublist_rcv net/ipv4/ip_input.c:638 [inline]
 ip_list_rcv+0x339/0x450 net/ipv4/ip_input.c:672
 __netif_receive_skb_list_ptype net/core/dev.c:5705 [inline]
 __netif_receive_skb_list_core+0x755/0x950 net/core/dev.c:5752
 __netif_receive_skb_list net/core/dev.c:5804 [inline]
 netif_receive_skb_list_internal+0x753/0xdb0 net/core/dev.c:5895
 gro_normal_list include/net/gro.h:515 [inline]
 gro_normal_one include/net/gro.h:528 [inline]
 napi_skb_finish net/core/gro.c:610 [inline]
 napi_gro_receive+0xa16/0xc60 net/core/gro.c:640
 virtnet_receive_done+0xa6c/0x1a00 drivers/net/virtio_net.c:2357
 receive_buf+0x4d9/0x31f0 drivers/net/virtio_net.c:2401
 virtnet_receive_packets drivers/net/virtio_net.c:2698 [inline]
 virtnet_receive drivers/net/virtio_net.c:2722 [inline]
 virtnet_poll+0x107c/0x3ba0 drivers/net/virtio_net.c:2817
 __napi_poll.constprop.0+0xb7/0x550 net/core/dev.c:6771
 napi_poll net/core/dev.c:6840 [inline]
 net_rx_action+0xa92/0x1010 net/core/dev.c:6962
 handle_softirqs+0x216/0x8f0 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu kernel/softirq.c:637 [inline]
 irq_exit_rcu+0xbb/0x120 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x95/0xb0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0xa19/0xd70 kernel/printk/printk.c:3056
Code: e8 8c 6c 26 00 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 6a 24 1f 00 48 85 db 0f 85 8b 01 00 00 e8 ec 21 1f 00 fb 48 8b 04 24 <4c> 89 fa 83 e2 07 0f b6 00 38 d0 7f 08 84 c0 0f 85 a9 02 00 00 41
RSP: 0018:ffffc90009e875d8 EFLAGS: 00000293
RAX: fffff520013d0ee2 RBX: 0000000000000000 RCX: ffffffff816cb6e6
RDX: ffff88807c2cda00 RSI: ffffffff816cb6f4 RDI: 0000000000000007
RBP: dffffc0000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000200
R13: ffffffff8ea78d78 R14: ffffffff8ea78d20 R15: ffffc90009e87710
 console_unlock+0xae/0x290 kernel/printk/printk.c:3119
 vprintk_emit+0x409/0x600 kernel/printk/printk.c:2348
 dev_vprintk_emit drivers/base/core.c:4912 [inline]
 dev_printk_emit+0xfb/0x140 drivers/base/core.c:4923
 __dev_printk+0xf5/0x270 drivers/base/core.c:4935
 _dev_err+0xe5/0x120 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x185/0x1c0 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x185/0x2660 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x33/0x70 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x272/0x620 drivers/net/wireless/ath/ath9k/hif_usb.c:1271
 request_firmware_work_func+0x13a/0x250 drivers/base/firmware_loader/main.c:1167
 process_one_work+0x9c5/0x1b40 kernel/workqueue.c:3231
 process_scheduled_works kernel/workqueue.c:3312 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3393
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>