rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2627 jiffies s: 18989 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5219 Comm: kworker/1:3 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:filter_irq_stacks+0x4f/0xa0 kernel/stacktrace.c:397
Code: e0 68 bb 8b 48 89 fb eb 0c 49 ff c7 48 83 c3 08 4d 39 fc 74 4f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 77 6f 78 00 4b 8b 04 fe 48 39 e8 72 0c 48 c7 c1
RSP: 0018:ffffc90000a180b8 EFLAGS: 00000046
RAX: 1ffff9200014302b RBX: ffffc90000a18158 RCX: dffffc0000000000
RDX: 0000000000000000 RSI: 000000000000002b RDI: ffffc90000a18150
RBP: ffffffff8bc00230 R08: ffffffff814142d3 R09: ffffffff81412e12
R10: 0000000000000002 R11: ffff88807232bc00 R12: 000000000000002b
R13: ffffffff8bbb68e0 R14: ffffc90000a18150 R15: 0000000000000001
FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33a17ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 stack_depot_save_flags+0x29/0x830 lib/stackdepot.c:609
 kasan_save_stack mm/kasan/common.c:48 [inline]
 kasan_save_track+0x51/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2256 [inline]
 slab_free mm/slub.c:4477 [inline]
 kfree+0x149/0x360 mm/slub.c:4598
 dummy_timer+0x7ce/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1981
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:get_current arch/x86/include/asm/current.h:49 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:244 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x8/0x90 kernel/kcov.c:299
Code: cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 c0 d6 03 00 65 8b 05 50 47 70 7e 25 00 01 ff 00 74
RSP: 0018:ffffc90000a18a98 EFLAGS: 00000246
RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffff88807232bc00
RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffff88807992331a R08: ffffffff89b5d242 R09: fffff52000143158
R10: dffffc0000000000 R11: fffff52000143158 R12: ffff88805e6ae4d8
R13: 0000000000000000 R14: dffffc0000000000 R15: ffff88805e6ae508
 pie_calculate_probability+0x5b2/0x820 net/sched/sch_pie.c:417
 fq_pie_timer+0x26d/0x590 net/sched/sch_fq_pie.c:398
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:format_decode+0xb00/0x1bb0
Code: 0f 84 2c 05 00 00 48 8d bc 24 80 00 00 00 e8 27 51 4d f6 e9 1a 05 00 00 e8 7d 2c e9 f5 c7 44 24 48 00 00 00 00 e9 5a fe ff ff <e8> 6b 2c e9 f5 4c 8d ac 24 80 00 00 00 4c 89 ef e8 9b 90 00 00 41
RSP: 0018:ffffc90003b6eb20 EFLAGS: 00000206
RAX: 0000000000000000 RBX: 00000000fffffffb RCX: 00000000ffffff00
RDX: ffff88807232bc00 RSI: 00000000fffffffb RDI: 00000000fffffff6
RBP: ffffc90003b6ec10 R08: ffffffff8baa5c32 R09: ffffffff8baa5aaa
R10: 0000000000000005 R11: ffff88807232bc00 R12: ffffffff8beb9ac2
R13: ffffffff8beb9ac2 R14: dffffc0000000000 R15: 0000000000000035
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2911
 console_emit_next_record kernel/printk/printk.c:2951 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3050
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3119
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x870/0xd30 kernel/workqueue.c:3393
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
rcu: INFO: rcu_preempt self-detected stall on CPU
rcu: 	1-....: (1 GPs behind) idle=00fc/1/0x4000000000000000 softirq=47638/47639 fqs=5227
rcu: 	         hardirqs   softirqs   csw/system
rcu: 	 number:        2          0            0
rcu: 	cputime:    51111       1370         4868   ==> 52480(ms)
rcu: 	(t=10500 jiffies g=73429 q=1471 ncpus=2)
CPU: 1 UID: 0 PID: 5219 Comm: kworker/1:3 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2d/0x90 kernel/kcov.c:320
Code: fa 4c 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 65 8b 05 70 45 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 b9 1c 16 00 00 00 <74> 4e 8b 81 f8 15 00 00 83 f8 03 75 43 48 8b 91 00 16 00 00 44 8b
RSP: 0018:ffffc90000a18a98 EFLAGS: 00000246
RAX: 0000000000000100 RBX: 00028f5c28f5c28f RCX: ffff88807232bc00
RDX: ffff88807232bc00 RSI: 0000000000000000 RDI: 00028f5c28f5c28f
RBP: 0019999999999998 R08: ffffffff89b5ceb7 R09: fffff52000143158
R10: dffffc0000000000 R11: fffff52000143158 R12: 0000000225c17d04
R13: 0000000000000000 R14: 00000015798ee228 R15: 1ffff1100caf2263
FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33a17ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <IRQ>
 pie_calculate_probability+0x227/0x820 net/sched/sch_pie.c:347
 fq_pie_timer+0x26d/0x590 net/sched/sch_fq_pie.c:398
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:format_decode+0xb00/0x1bb0
Code: 0f 84 2c 05 00 00 48 8d bc 24 80 00 00 00 e8 27 51 4d f6 e9 1a 05 00 00 e8 7d 2c e9 f5 c7 44 24 48 00 00 00 00 e9 5a fe ff ff <e8> 6b 2c e9 f5 4c 8d ac 24 80 00 00 00 4c 89 ef e8 9b 90 00 00 41
RSP: 0018:ffffc90003b6eb20 EFLAGS: 00000206
RAX: 0000000000000000 RBX: 00000000fffffffb RCX: 00000000ffffff00
RDX: ffff88807232bc00 RSI: 00000000fffffffb RDI: 00000000fffffff6
RBP: ffffc90003b6ec10 R08: ffffffff8baa5c32 R09: ffffffff8baa5aaa
R10: 0000000000000005 R11: ffff88807232bc00 R12: ffffffff8beb9ac2
R13: ffffffff8beb9ac2 R14: dffffc0000000000 R15: 0000000000000035
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2911
 console_emit_next_record kernel/printk/printk.c:2951 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3050
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3119
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x870/0xd30 kernel/workqueue.c:3393
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 10819 jiffies s: 18989 root: 0x2/.
rcu: blocking rcu_node structures (internal RCU debug):
Sending NMI from CPU 0 to CPUs 1:
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5219 Comm: kworker/1:3 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:preempt_count arch/x86/include/asm/preempt.h:26 [inline]
RIP: 0010:preempt_latency_start kernel/sched/core.c:5633 [inline]
RIP: 0010:preempt_count_add+0x76/0x190 kernel/sched/core.c:5659
Code: c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 00 00 83 3d 1d da ac 18 00 75 11 65 8b 05 1c d7 a0 7e 0f b6 c0 3d f5 00 00 00 73 5e <65> 8b 05 0b d7 a0 7e 25 ff ff ff 7f 39 d8 75 44 4c 8b 74 24 18 4c
RSP: 0018:ffffc90000a17ec8 EFLAGS: 00000097
RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a0fd903
RDX: ffff88807232bc00 RSI: 0000000000000001 RDI: 0000000000000001
RBP: ffffc90000a17fc0 R08: ffffffff814127f1 R09: ffffc90000a180b0
R10: 0000000000000003 R11: ffffffff817f2f30 R12: ffff88807232bc00
R13: dffffc0000000000 R14: 0000000000000001 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33a17ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 unwind_next_frame+0xc1/0x2a00 arch/x86/kernel/unwind_orc.c:479
 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 kasan_save_free_info+0x40/0x50 mm/kasan/generic.c:579
 poison_slab_object+0xe0/0x150 mm/kasan/common.c:240
 __kasan_slab_free+0x37/0x60 mm/kasan/common.c:256
 kasan_slab_free include/linux/kasan.h:184 [inline]
 slab_free_hook mm/slub.c:2256 [inline]
 slab_free mm/slub.c:4477 [inline]
 kfree+0x149/0x360 mm/slub.c:4598
 dummy_timer+0x7ce/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1981
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:check_kcov_mode kernel/kcov.c:182 [inline]
RIP: 0010:write_comp_data kernel/kcov.c:245 [inline]
RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2d/0x90 kernel/kcov.c:320
Code: fa 4c 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 65 8b 05 70 45 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 b9 1c 16 00 00 00 <74> 4e 8b 81 f8 15 00 00 83 f8 03 75 43 48 8b 91 00 16 00 00 44 8b
RSP: 0018:ffffc90000a18a98 EFLAGS: 00000246
RAX: 0000000000000100 RBX: 00004189374bc6a7 RCX: ffff88807232bc00
RDX: ffff88807232bc00 RSI: 0000000000000000 RDI: 00004189374bc6a7
RBP: 0019999999999998 R08: ffffffff89b5ced5 R09: fffff52000143158
R10: dffffc0000000000 R11: fffff52000143158 R12: 0000000225c17d04
R13: 0000000000000000 R14: 00000015798ee228 R15: 1ffff1100e404c63
 pie_calculate_probability+0x245/0x820 net/sched/sch_pie.c:347
 fq_pie_timer+0x26d/0x590 net/sched/sch_fq_pie.c:398
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:format_decode+0xb00/0x1bb0
Code: 0f 84 2c 05 00 00 48 8d bc 24 80 00 00 00 e8 27 51 4d f6 e9 1a 05 00 00 e8 7d 2c e9 f5 c7 44 24 48 00 00 00 00 e9 5a fe ff ff <e8> 6b 2c e9 f5 4c 8d ac 24 80 00 00 00 4c 89 ef e8 9b 90 00 00 41
RSP: 0018:ffffc90003b6eb20 EFLAGS: 00000206
RAX: 0000000000000000 RBX: 00000000fffffffb RCX: 00000000ffffff00
RDX: ffff88807232bc00 RSI: 00000000fffffffb RDI: 00000000fffffff6
RBP: ffffc90003b6ec10 R08: ffffffff8baa5c32 R09: ffffffff8baa5aaa
R10: 0000000000000005 R11: ffff88807232bc00 R12: ffffffff8beb9ac2
R13: ffffffff8beb9ac2 R14: dffffc0000000000 R15: 0000000000000035
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2911
 console_emit_next_record kernel/printk/printk.c:2951 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3050
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3119
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x870/0xd30 kernel/workqueue.c:3393
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
NMI backtrace for cpu 1
CPU: 1 UID: 0 PID: 5219 Comm: kworker/1:3 Not tainted 6.11.0-rc7-syzkaller-00133-ge936e7d4a83b #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
Workqueue: events request_firmware_work_func
RIP: 0010:unwind_next_frame+0x6cc/0x2a00 arch/x86/kernel/unwind_orc.c:505
Code: 04 28 84 c0 0f 85 93 1b 00 00 0f b6 5d 01 83 e3 07 48 89 df 48 c7 c6 80 3d 5a 8e e8 ce 63 52 00 48 85 db 74 16 83 fb 01 75 1e <e8> 3f 5e 52 00 4d 89 f7 48 8b 2c 24 e9 8c 14 00 00 e8 2e 5e 52 00
RSP: 0018:ffffc90000a17c08 EFLAGS: 00000046
RAX: 0000000000010100 RBX: 0000000000000001 RCX: ffff88807232bc00
RDX: 0000000000000002 RSI: ffffffff8e5a3d80 RDI: 0000000000000001
RBP: ffffffff907730aa R08: 0000000000000003 R09: ffffffff81412e12
R10: 0000000000000002 R11: ffff88807232bc00 R12: ffffffff90043d3c
R13: dffffc0000000000 R14: 1ffff92000142f9c R15: ffffffff907730a6
FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000001b33a17ff8 CR3: 000000000e534000 CR4: 00000000003526f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <NMI>
 </NMI>
 <IRQ>
 arch_stack_walk+0x151/0x1b0 arch/x86/kernel/stacktrace.c:25
 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122
 kasan_save_stack mm/kasan/common.c:47 [inline]
 kasan_save_track+0x3f/0x80 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:370 [inline]
 __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387
 kasan_kmalloc include/linux/kasan.h:211 [inline]
 __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4193
 kmalloc_noprof include/linux/slab.h:681 [inline]
 dummy_urb_enqueue+0x7d/0x760 drivers/usb/gadget/udc/dummy_hcd.c:1271
 usb_hcd_submit_urb+0x36c/0x1e80 drivers/usb/core/hcd.c:1533
 ath9k_hif_usb_reg_in_cb+0x472/0x650 drivers/net/wireless/ath/ath9k/hif_usb.c:792
 __usb_hcd_giveback_urb+0x42c/0x6e0 drivers/usb/core/hcd.c:1650
 dummy_timer+0x830/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1987
 __run_hrtimer kernel/time/hrtimer.c:1689 [inline]
 __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753
 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815
 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline]
 __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:rcu_read_unlock_special+0x88/0x550 kernel/rcu/tree_plugin.h:692
Code: f1 f1 f1 00 f2 f2 f2 49 89 04 17 66 41 c7 44 17 09 f3 f3 41 c6 44 17 0b f3 65 44 8b 25 99 39 89 7e 41 f7 c4 00 00 f0 00 74 49 <48> c7 44 24 20 0e 36 e0 45 4a c7 04 3a 00 00 00 00 66 42 c7 44 3a
RSP: 0018:ffffc90000a18aa0 EFLAGS: 00000206
RAX: 0cd3b0c44c5e7500 RBX: 1ffff9200014315c RCX: ffffffff81703f9a
RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3fbb00
RBP: ffffc90000a18b78 R08: ffffffff93fa69c7 R09: 1ffffffff27f4d38
R10: dffffc0000000000 R11: fffffbfff27f4d39 R12: ffffffff8e73cf00
R13: ffff88807232c060 R14: ffffc90000a18ae0 R15: 1ffff92000143158
 __rcu_read_unlock+0xa1/0x110 kernel/rcu/tree_plugin.h:436
 call_timer_fn+0x18e/0x650 kernel/time/timer.c:1792
 expire_timers kernel/time/timer.c:1843 [inline]
 __run_timers kernel/time/timer.c:2417 [inline]
 __run_timer_base+0x66a/0x8e0 kernel/time/timer.c:2428
 run_timer_base kernel/time/timer.c:2437 [inline]
 run_timer_softirq+0xb7/0x170 kernel/time/timer.c:2447
 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
 __do_softirq kernel/softirq.c:588 [inline]
 invoke_softirq kernel/softirq.c:428 [inline]
 __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
 sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:format_decode+0xb00/0x1bb0
Code: 0f 84 2c 05 00 00 48 8d bc 24 80 00 00 00 e8 27 51 4d f6 e9 1a 05 00 00 e8 7d 2c e9 f5 c7 44 24 48 00 00 00 00 e9 5a fe ff ff <e8> 6b 2c e9 f5 4c 8d ac 24 80 00 00 00 4c 89 ef e8 9b 90 00 00 41
RSP: 0018:ffffc90003b6eb20 EFLAGS: 00000206
RAX: 0000000000000000 RBX: 00000000fffffffb RCX: 00000000ffffff00
RDX: ffff88807232bc00 RSI: 00000000fffffffb RDI: 00000000fffffff6
RBP: ffffc90003b6ec10 R08: ffffffff8baa5c32 R09: ffffffff8baa5aaa
R10: 0000000000000005 R11: ffff88807232bc00 R12: ffffffff8beb9ac2
R13: ffffffff8beb9ac2 R14: dffffc0000000000 R15: 0000000000000035
 vsnprintf+0x14f/0x1da0 lib/vsprintf.c:2776
 sprintf+0xda/0x120 lib/vsprintf.c:3028
 print_time kernel/printk/printk.c:1330 [inline]
 info_print_prefix+0x16b/0x310 kernel/printk/printk.c:1356
 record_print_text kernel/printk/printk.c:1405 [inline]
 printk_get_next_message+0x6da/0xbe0 kernel/printk/printk.c:2911
 console_emit_next_record kernel/printk/printk.c:2951 [inline]
 console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3050
 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3119
 vprintk_emit+0x5dc/0x7c0 kernel/printk/printk.c:2348
 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4912
 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4923
 _dev_err+0x122/0x170 drivers/base/core.c:4978
 ath9k_htc_wait_for_target+0x132/0x160 drivers/net/wireless/ath/ath9k/htc_drv_init.c:91
 ath9k_htc_probe_device+0x1a5/0x2240 drivers/net/wireless/ath/ath9k/htc_drv_init.c:949
 ath9k_htc_hw_init+0x34/0x80 drivers/net/wireless/ath/ath9k/htc_hst.c:529
 ath9k_hif_usb_firmware_cb+0x255/0x4b0 drivers/net/wireless/ath/ath9k/hif_usb.c:1273
 request_firmware_work_func+0x1a4/0x280 drivers/base/firmware_loader/main.c:1167
 process_one_work kernel/workqueue.c:3231 [inline]
 process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312
 worker_thread+0x870/0xd30 kernel/workqueue.c:3393
 kthread+0x2f0/0x390 kernel/kthread.c:389
 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>