Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ 16.016088][ C1] random: crng init done [ 16.020383][ C1] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.184' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 23.342962][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.712648][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 23.721835][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.729957][ T21] usb 1-1: Product: syz [ 23.734206][ T21] usb 1-1: Manufacturer: syz [ 23.738798][ T21] usb 1-1: SerialNumber: syz [ 23.783519][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 24.391832][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 24.611611][ C1] ================================================================== [ 24.619829][ C1] BUG: KASAN: use-after-free in __wake_up_common+0x634/0x650 [ 24.627233][ C1] Read of size 8 at addr ffff8881cec10000 by task swapper/1/0 [ 24.634685][ C1] [ 24.637009][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.6.0-rc5-syzkaller #0 [ 24.646456][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.656512][ C1] Call Trace: [ 24.659917][ C1] [ 24.662764][ C1] dump_stack+0xef/0x16e [ 24.667011][ C1] ? __wake_up_common+0x634/0x650 [ 24.672043][ C1] ? __wake_up_common+0x634/0x650 [ 24.677129][ C1] print_address_description.constprop.0.cold+0xd3/0x314 [ 24.684163][ C1] ? __wake_up_common+0x634/0x650 [ 24.689206][ C1] ? __wake_up_common+0x634/0x650 [ 24.694243][ C1] __kasan_report.cold+0x37/0x77 [ 24.699195][ C1] ? __wake_up_common+0x634/0x650 [ 24.704413][ C1] kasan_report+0xe/0x20 [ 24.708659][ C1] __wake_up_common+0x634/0x650 [ 24.713520][ C1] complete+0x51/0x70 [ 24.717494][ C1] ath9k_htc_rx_msg+0x7c2/0xaf0 [ 24.722350][ C1] ath9k_hif_usb_reg_in_cb+0x1ba/0x630 [ 24.727830][ C1] ? trace_hardirqs_off+0x50/0x200 [ 24.732959][ C1] __usb_hcd_giveback_urb+0x29a/0x550 [ 24.738356][ C1] usb_hcd_giveback_urb+0x368/0x420 [ 24.743564][ C1] dummy_timer+0x1258/0x32ae [ 24.748151][ C1] ? dummy_udc_probe+0x930/0x930 [ 24.753082][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 24.758633][ C1] ? rcu_read_lock_bh_