[ OK ] Started Getty on tty4. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.61' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 72.582386][ T3015] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.102271][ T3015] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 73.111453][ T3015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.119951][ T3015] usb 1-1: Product: syz [ 73.124501][ T3015] usb 1-1: Manufacturer: syz [ 73.129095][ T3015] usb 1-1: SerialNumber: syz [ 73.174914][ T3015] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 73.812270][ T3015] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 74.232219][ C0] ================================================================== [ 74.240459][ C0] BUG: KASAN: slab-out-of-bounds in ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.248540][ C0] Read of size 49146 at addr ffff888019dd0000 by task swapper/0/0 [ 74.256329][ C0] [ 74.258640][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-syzkaller #0 [ 74.266361][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.276402][ C0] Call Trace: [ 74.279669][ C0] [ 74.282504][ C0] dump_stack+0x107/0x163 [ 74.286834][ C0] ? ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.292191][ C0] ? ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.297562][ C0] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 74.304574][ C0] ? ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.309949][ C0] ? ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.315307][ C0] kasan_report.cold+0x79/0xd5 [ 74.320064][ C0] ? rwlock_bug.part.0+0x70/0x90 [ 74.324990][ C0] ? ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.330353][ C0] check_memory_region+0x13d/0x180 [ 74.335513][ C0] memcpy+0x20/0x60 [ 74.339334][ C0] ath9k_hif_usb_rx_cb+0x3ab/0x1020 [ 74.344651][ C0] ? hif_usb_start+0xa0/0xa0 [ 74.349448][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 74.355002][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 74.359857][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 74.365226][ C0] usb_hcd_giveback_urb+0x38c/0x430 [ 74.370419][ C0] dummy_timer+0x11f4/0x32a0 [ 74.375021][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 74.379782][ C0] ? dummy_dequeu