Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts.
executing program
[   25.935084][  T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   26.454251][  T126] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   26.463374][  T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.471533][  T126] usb 1-1: Product: syz
[   26.475745][  T126] usb 1-1: Manufacturer: syz
[   26.480336][  T126] usb 1-1: SerialNumber: syz
[   26.525028][  T126] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[   27.203557][  T126] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[   27.643181][    C0] ==================================================================
[   27.651331][    C0] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.658946][    C0] Read of size 49238 at addr ffff8881c3018000 by task swapper/0/0
[   27.666736][    C0] 
[   27.669047][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.8.0-syzkaller #0
[   27.676558][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   27.686602][    C0] Call Trace:
[   27.689859][    C0]  <IRQ>
[   27.692730][    C0]  dump_stack+0xf6/0x16e
[   27.696953][    C0]  ? ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.702219][    C0]  ? ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.707483][    C0]  print_address_description.constprop.0+0x1a/0x210
[   27.714048][    C0]  ? ath9k_hif_usb_rx_cb+0x23e/0xf80
[   27.719325][    C0]  ? vprintk_func+0x93/0x133
[   27.723902][    C0]  ? ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.729162][    C0]  kasan_report.cold+0x37/0x7c
[   27.733897][    C0]  ? rwlock_bug.part.0+0x90/0x90
[   27.738816][    C0]  ? ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.744071][    C0]  check_memory_region+0xf4/0x1c0
[   27.749082][    C0]  memcpy+0x20/0x60
[   27.752877][    C0]  ath9k_hif_usb_rx_cb+0x3a8/0xf80
[   27.757974][    C0]  ? kcov_remote_start+0xd6/0x3d0
[   27.762983][    C0]  ? __usb_hcd_giveback_urb+0x302/0x560
[   27.768534][    C0]  ? hif_usb_start+0xa0/0xa0
[   27.773099][    C0]  ? lock_downgrade+0x740/0x740
[   27.777933][    C0]  ? trace_hardirqs_off+0x27/0x1f0
[   27.783021][    C0]  __usb_hcd_giveback_urb+0x32d/0x560
[   27.788546][    C0]  usb_hcd_giveback_urb+0x367/0x410
[   27.793729][    C0]  dummy_timer+0x11f2/0x3240
[   27.798295][    C0]  ? lock_downgrade+0x740/0x740
[   27.803119][    C0]  ? dummy_dequeue+0x490/0x490
[   27.807868][    C0]  call_timer_fn+0x1ac/0x6e0
[   27.812450][    C0]  ? dummy_dequeue+0x490/0x490
[   27.817186][    C0]  ? timer_fixup_init+0x60/0x60
[   27.822020][    C0]  ? lock_downgrade+0x740/0x740
[   27.825412][   T72] usb 1-1: USB disconnect, device number 2
[   27.826865][    C0]  ? _raw_spin_unlock_irq+0x1f/0x30
[   27.837827][    C0]  ? lockdep_hardirqs_on_prepare+0x19c/0x4f0
[