Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. [ OK ] Started Update UTMP about System Runlevel Changes. [ 13.234931][ C1] random: crng init done [ 13.239232][ C1] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.233' (ECDSA) to the list of known hosts. 2020/08/07 17:46:49 parsed 1 programs 2020/08/07 17:46:49 executed programs: 0 syzkaller login: [ 34.076760][ T347] cgroup: Unknown subsys name 'perf_event' [ 34.083280][ T347] cgroup: Unknown subsys name 'net_cls' [ 34.091714][ T348] cgroup: Unknown subsys name 'perf_event' [ 34.101737][ T348] cgroup: Unknown subsys name 'net_cls' [ 34.107725][ T351] cgroup: Unknown subsys name 'perf_event' [ 34.121116][ T357] cgroup: Unknown subsys name 'perf_event' [ 34.122402][ T353] cgroup: Unknown subsys name 'perf_event' [ 34.127519][ T357] cgroup: Unknown subsys name 'net_cls' [ 34.134411][ T356] cgroup: Unknown subsys name 'perf_event' [ 34.145067][ T351] cgroup: Unknown subsys name 'net_cls' [ 34.149313][ T353] cgroup: Unknown subsys name 'net_cls' [ 34.154651][ T356] cgroup: Unknown subsys name 'net_cls' [ 42.073361][ T72] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.073370][ T73] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.088515][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 42.123498][ T3044] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 42.131071][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 42.173481][ T3049] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 42.353480][ T72] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 42.413454][ T21] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 42.421470][ T73] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 42.433344][ T72] usb 4-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.473503][ T3044] usb 6-1: too many configurations: 160, using maximum allowed: 8 [ 42.481530][ T17] usb 5-1: too many configurations: 160, using maximum allowed: 8 [ 42.503659][ T3049] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 42.514065][ T72] usb 4-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.534136][ T21] usb 3-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.542572][ T73] usb 1-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.593392][ T3044] usb 6-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.593423][ T72] usb 4-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.603283][ T17] usb 5-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.620153][ T3049] usb 2-1: config index 0 descriptor too short (expected 65204, got 72) [ 42.673620][ T21] usb 3-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.682226][ T73] usb 1-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.683323][ T72] usb 4-1: config index 3 descriptor too short (expected 65204, got 72) [ 42.733468][ T3044] usb 6-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.742020][ T3049] usb 2-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.750814][ T17] usb 5-1: config index 1 descriptor too short (expected 65204, got 72) [ 42.773276][ T72] usb 4-1: config index 4 descriptor too short (expected 65204, got 72) [ 42.813996][ T21] usb 3-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.823216][ T73] usb 1-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.853412][ T72] usb 4-1: config index 5 descriptor too short (expected 65204, got 72) [ 42.883349][ T3049] usb 2-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.891812][ T3044] usb 6-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.900352][ T17] usb 5-1: config index 2 descriptor too short (expected 65204, got 72) [ 42.933450][ T72] usb 4-1: config index 6 descriptor too short (expected 65204, got 72) [ 42.953911][ T73] usb 1-1: config index 3 descriptor too short (expected 65204, got 72) [ 42.962425][ T21] usb 3-1: config index 3 descriptor too short (expected 65204, got 72) [ 43.013324][ T72] usb 4-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.013333][ T3049] usb 2-1: config index 3 descriptor too short (expected 65204, got 72) [ 43.013453][ T3044] usb 6-1: config index 3 descriptor too short (expected 65204, got 72) [ 43.038681][ T17] usb 5-1: config index 3 descriptor too short (expected 65204, got 72) [ 43.093307][ T73] usb 1-1: config index 4 descriptor too short (expected 65204, got 72) [ 43.101751][ T21] usb 3-1: config index 4 descriptor too short (expected 65204, got 72) [ 43.110309][ T3049] usb 2-1: config index 4 descriptor too short (expected 65204, got 72) [ 43.153324][ T17] usb 5-1: config index 4 descriptor too short (expected 65204, got 72) [ 43.161881][ T3044] usb 6-1: config index 4 descriptor too short (expected 65204, got 72) [ 43.173193][ T72] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.182285][ T72] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.183130][ T73] usb 1-1: config index 5 descriptor too short (expected 65204, got 72) [ 43.190353][ T72] usb 4-1: Product: syz [ 43.202873][ T72] usb 4-1: Manufacturer: syz [ 43.207505][ T72] usb 4-1: SerialNumber: syz [ 43.213366][ T21] usb 3-1: config index 5 descriptor too short (expected 65204, got 72) [ 43.221820][ T3049] usb 2-1: config index 5 descriptor too short (expected 65204, got 72) [ 43.264150][ T72] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 43.283316][ T73] usb 1-1: config index 6 descriptor too short (expected 65204, got 72) [ 43.292584][ T17] usb 5-1: config index 5 descriptor too short (expected 65204, got 72) [ 43.301079][ T3044] usb 6-1: config index 5 descriptor too short (expected 65204, got 72) [ 43.363246][ T21] usb 3-1: config index 6 descriptor too short (expected 65204, got 72) [ 43.371774][ T3049] usb 2-1: config index 6 descriptor too short (expected 65204, got 72) [ 43.413318][ T3044] usb 6-1: config index 6 descriptor too short (expected 65204, got 72) [ 43.421762][ T17] usb 5-1: config index 6 descriptor too short (expected 65204, got 72) [ 43.431241][ T73] usb 1-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.493226][ T3049] usb 2-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.501751][ T21] usb 3-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.523656][ T3044] usb 6-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.543241][ T17] usb 5-1: config index 7 descriptor too short (expected 65204, got 72) [ 43.663199][ T73] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.672310][ T73] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.680388][ T73] usb 1-1: Product: syz [ 43.684695][ T73] usb 1-1: Manufacturer: syz [ 43.689297][ T73] usb 1-1: SerialNumber: syz [ 43.743224][ T3049] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.752513][ T3049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.760722][ T3049] usb 2-1: Product: syz [ 43.764993][ T3049] usb 2-1: Manufacturer: syz [ 43.769847][ T3049] usb 2-1: SerialNumber: syz [ 43.775024][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.784148][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.792371][ T21] usb 3-1: Product: syz [ 43.796656][ T21] usb 3-1: Manufacturer: syz [ 43.801261][ T21] usb 3-1: SerialNumber: syz [ 43.805981][ T3044] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.815187][ T3044] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.823230][ T3044] usb 6-1: Product: syz [ 43.827388][ T3044] usb 6-1: Manufacturer: syz [ 43.831963][ T3044] usb 6-1: SerialNumber: syz [ 43.838719][ T73] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 43.853203][ T72] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 43.873238][ T17] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 43.882525][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.891747][ T17] usb 5-1: Product: syz [ 43.896073][ T17] usb 5-1: Manufacturer: syz [ 43.900676][ T17] usb 5-1: SerialNumber: syz [ 43.906017][ T3044] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 43.915091][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 43.924436][ T3049] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 43.973810][ T17] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.602942][ T73] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 44.652952][ T3044] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 44.662075][ T3049] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 44.671303][ T21] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 2020/08/07 17:47:00 executed programs: 6 [ 44.732915][ T17] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 44.767666][ T136] usb 1-1: USB disconnect, device number 2 [ 44.789312][ T5] usb 3-1: USB disconnect, device number 2 [ 44.826477][ T3076] usb 6-1: USB disconnect, device number 2 [ 44.837681][ T3060] usb 5-1: USB disconnect, device number 2 [ 44.903637][ T72] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 44.911029][ T72] ath9k_htc: Failed to initialize the device [ 45.622578][ T73] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 45.629626][ T73] ath9k_htc: Failed to initialize the device [ 45.637791][ T136] usb 1-1: ath9k_htc: USB layer deinitialized [ 45.702572][ T21] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 45.709552][ T21] ath9k_htc: Failed to initialize the device [ 45.715784][ T3049] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 45.722778][ T3044] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 45.729727][ T3044] ath9k_htc: Failed to initialize the device [ 45.736016][ T3049] ath9k_htc: Failed to initialize the device [ 45.742216][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 45.748678][ T3076] usb 6-1: ath9k_htc: USB layer deinitialized [ 45.792685][ T17] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 45.799810][ T17] ath9k_htc: Failed to initialize the device [ 45.807109][ T3060] usb 5-1: ath9k_htc: USB layer deinitialized [ 46.002588][ T136] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 46.051368][ T3083] usb 4-1: USB disconnect, device number 2 [ 46.066653][ T3083] usb 4-1: ath9k_htc: USB layer deinitialized [ 46.112598][ T5] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 46.120201][ T3076] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.182559][ T3060] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 46.282541][ T136] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 46.362705][ T136] usb 1-1: config index 0 descriptor too short (expected 65204, got 72) [ 46.402585][ T5] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 46.410565][ T3076] usb 6-1: too many configurations: 160, using maximum allowed: 8 [ 46.452624][ T3083] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.452647][ T136] usb 1-1: config index 1 descriptor too short (expected 65204, got 72) [ 46.472621][ T3060] usb 5-1: too many configurations: 160, using maximum allowed: 8 [ 46.482744][ T5] usb 3-1: config index 0 descriptor too short (expected 65204, got 72) [ 46.502650][ T3076] usb 6-1: config index 0 descriptor too short (expected 65204, got 72) [ 46.542594][ T136] usb 1-1: config index 2 descriptor too short (expected 65204, got 72) [ 46.553083][ T3060] usb 5-1: config index 0 descriptor too short (expected 65204, got 72) [ 46.562585][ T5] usb 3-1: config index 1 descriptor too short (expected 65204, got 72) [ 46.582648][ T3076] usb 6-1: config index 1 descriptor too short (expected 65204, got 72) [ 46.622551][ T136] usb 1-1: config index 3 descriptor too short (expected 65204, got 72) [ 46.642574][ T5] usb 3-1: config index 2 descriptor too short (expected 65204, got 72) [ 46.642705][ T3060] usb 5-1: config index 1 descriptor too short (expected 65204, got 72) [ 46.662555][ T3076] usb 6-1: config index 2 descriptor too short (expected 65204, got 72) [ 46.702606][ T136] usb 1-1: config index 4 descriptor too short (expected 65204, got 72) [ 46.722557][ T5] usb 3-1: config index 3 descriptor too short (expected 65204, got 72) [ 46.742494][ T3076] usb 6-1: config index 3 descriptor too short (expected 65204, got 72) [ 46.752654][ T3083] usb 4-1: too many configurations: 160, using maximum allowed: 8 [ 46.760599][ T3060] usb 5-1: config index 2 descriptor too short (expected 65204, got 72) [ 46.782610][ T136] usb 1-1: config index 5 descriptor too short (expected 65204, got 72) [ 46.802567][ T5] usb 3-1: config index 4 descriptor too short (expected 65204, got 72) [ 46.822482][ T3076] usb 6-1: config index 4 descriptor too short (expected 65204, got 72) [ 46.862525][ T3083] usb 4-1: config index 0 descriptor too short (expected 65204, got 72) [ 46.862535][ T136] usb 1-1: config index 6 descriptor too short (expected 65204, got 72) [ 46.877073][ T3081] usb 2-1: USB disconnect, device number 2 [ 46.882057][ T3060] usb 5-1: config index 3 descriptor too short (expected 65204, got 72) [ 46.888784][ T5] usb 3-1: config index 5 descriptor too short (expected 65204, got 72) [ 46.907094][ T3076] usb 6-1: config index 5 descriptor too short (expected 65204, got 72) [ 46.919860][ T3081] usb 2-1: ath9k_htc: USB layer deinitialized [ 46.942591][ T136] usb 1-1: config index 7 descriptor too short (expected 65204, got 72) [ 47.002471][ T3076] usb 6-1: config index 6 descriptor too short (expected 65204, got 72) [ 47.011004][ T5] usb 3-1: config index 6 descriptor too short (expected 65204, got 72) [ 47.022456][ T3060] usb 5-1: config index 4 descriptor too short (expected 65204, got 72) [ 47.030974][ T3083] usb 4-1: config index 1 descriptor too short (expected 65204, got 72) [ 47.082403][ T3076] usb 6-1: config index 7 descriptor too short (expected 65204, got 72) [ 47.092443][ T5] usb 3-1: config index 7 descriptor too short (expected 65204, got 72) [ 47.102464][ T136] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.111507][ T136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.119591][ T136] usb 1-1: Product: syz [ 47.123903][ T136] usb 1-1: Manufacturer: syz [ 47.128509][ T136] usb 1-1: SerialNumber: syz [ 47.142445][ T3060] usb 5-1: config index 5 descriptor too short (expected 65204, got 72) [ 47.150921][ T3083] usb 4-1: config index 2 descriptor too short (expected 65204, got 72) [ 47.175247][ T136] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.232571][ T3060] usb 5-1: config index 6 descriptor too short (expected 65204, got 72) [ 47.252398][ T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.261495][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.262328][ T3083] usb 4-1: config index 3 descriptor too short (expected 65204, got 72) [ 47.269646][ T5] usb 3-1: Product: syz [ 47.282085][ T5] usb 3-1: Manufacturer: syz [ 47.286745][ T5] usb 3-1: SerialNumber: syz [ 47.291352][ T3081] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 47.299004][ T3076] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.308207][ T3076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.316253][ T3076] usb 6-1: Product: syz [ 47.320435][ T3076] usb 6-1: Manufacturer: syz [ 47.325094][ T3076] usb 6-1: SerialNumber: syz [ 47.336085][ T3060] usb 5-1: config index 7 descriptor too short (expected 65204, got 72) [ 47.363598][ T3083] usb 4-1: config index 4 descriptor too short (expected 65204, got 72) [ 47.363914][ T3076] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.381082][ T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.462389][ T3083] usb 4-1: config index 5 descriptor too short (expected 65204, got 72) [ 47.542336][ T3060] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.551436][ T3060] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.559514][ T3060] usb 5-1: Product: syz [ 47.563806][ T3060] usb 5-1: Manufacturer: syz [ 47.568412][ T3060] usb 5-1: SerialNumber: syz [ 47.573113][ T3083] usb 4-1: config index 6 descriptor too short (expected 65204, got 72) [ 47.622383][ T3081] usb 2-1: too many configurations: 160, using maximum allowed: 8 [ 47.636246][ T3060] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.692307][ T3083] usb 4-1: config index 7 descriptor too short (expected 65204, got 72) [ 47.702260][ T3081] usb 2-1: config index 0 descriptor too short (expected 65204, got 72) [ 47.778846][ T3101] usb 1-1: USB disconnect, device number 3 [ 47.784947][ T136] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 47.797581][ T3081] usb 2-1: config index 1 descriptor too short (expected 65204, got 72) [ 47.810039][ T3101] usb 1-1: ath9k_htc: USB layer deinitialized [ 47.816541][ T5] usb 3-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 47.831464][ T17] usb 6-1: USB disconnect, device number 3 [ 47.832294][ T3076] usb 6-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 47.852779][ T3060] usb 5-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 47.855384][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 47.871148][ T17] usb 6-1: ath9k_htc: USB layer deinitialized [ 47.877891][ T3083] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.879033][ T12] usb 5-1: USB disconnect, device number 3 [ 47.887012][ T3083] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.887031][ T3083] usb 4-1: Product: syz [ 47.893889][ T3116] usb 3-1: USB disconnect, device number 3 [ 47.900850][ T3083] usb 4-1: Manufacturer: syz [ 47.915469][ T3083] usb 4-1: SerialNumber: syz [ 47.930496][ T12] usb 5-1: ath9k_htc: USB layer deinitialized [ 47.942564][ T3081] usb 2-1: config index 2 descriptor too short (expected 65204, got 72) [ 48.022359][ T3081] usb 2-1: config index 3 descriptor too short (expected 65204, got 72) [ 48.033389][ T3083] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.102258][ T3081] usb 2-1: config index 4 descriptor too short (expected 65204, got 72) [ 48.182470][ T3081] usb 2-1: config index 5 descriptor too short (expected 65204, got 72) [ 48.222132][ T3101] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.252081][ T3116] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 48.262814][ T3081] usb 2-1: config index 6 descriptor too short (expected 65204, got 72) [ 48.282135][ T12] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.332187][ T17] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 48.342972][ T3081] usb 2-1: config index 7 descriptor too short (expected 65204, got 72) [ 48.502236][ T3101] usb 1-1: too many configurations: 160, using maximum allowed: 8 [ 48.510294][ T3081] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 48.519459][ T3081] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.527504][ T3081] usb 2-1: Product: syz [ 48.531660][ T3081] usb 2-1: Manufacturer: syz [ 48.536381][ T3081] usb 2-1: SerialNumber: syz [ 48.541092][ T3116] usb 3-1: too many configurations: 160, using maximum allowed: 8 [ 48.572231][ T12] usb 5-1: too many configurations: 160, using maximum allowed: 8 [ 48.595087][ T3081] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.622172][ T3101] usb 1-1: config index 0 descriptor too short (expected 65204, got 72) [ 48.630651][ T3116] usb 3-1: config index 0 descriptor too short (expected 65204, got 72) [ 48.652170][ T12] usb 5-1: config index 0 descriptor too short (expected 65204, got 72) [ 48.663012][ T17] usb 6-1: too many configurations: 160, using maximum allowed: 8 [ 48.712177][ T3116] usb 3-1: config index 1 descriptor too short (expected 65204, got 72) [ 48.720663][ T3101] usb 1-1: config index 1 descriptor too short (expected 65204, got 72) [ 48.732156][ T12] usb 5-1: config index 1 descriptor too short (expected 65204, got 72) [ 48.762379][ T17] usb 6-1: config index 0 descriptor too short (expected 65204, got 72) [ 48.782207][ T3083] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.802269][ T3116] usb 3-1: config index 2 descriptor too short (expected 65204, got 72) [ 48.810851][ T3101] usb 1-1: config index 2 descriptor too short (expected 65204, got 72) [ 48.820481][ T12] usb 5-1: config index 2 descriptor too short (expected 65204, got 72) [ 48.852300][ T17] usb 6-1: config index 1 descriptor too short (expected 65204, got 72) [ 48.922204][ T3116] usb 3-1: config index 3 descriptor too short (expected 65204, got 72) [ 48.931397][ T3101] usb 1-1: config index 3 descriptor too short (expected 65204, got 72) [ 48.939885][ T12] usb 5-1: config index 3 descriptor too short (expected 65204, got 72) [ 48.952234][ T17] usb 6-1: config index 2 descriptor too short (expected 65204, got 72) [ 49.022137][ T3101] usb 1-1: config index 4 descriptor too short (expected 65204, got 72) [ 49.030640][ T12] usb 5-1: config index 4 descriptor too short (expected 65204, got 72) [ 49.039138][ T3116] usb 3-1: config index 4 descriptor too short (expected 65204, got 72) [ 49.052108][ T17] usb 6-1: config index 3 descriptor too short (expected 65204, got 72) [ 49.122214][ T3101] usb 1-1: config index 5 descriptor too short (expected 65204, got 72) [ 49.130671][ T12] usb 5-1: config index 5 descriptor too short (expected 65204, got 72) [ 49.140313][ T3116] usb 3-1: config index 5 descriptor too short (expected 65204, got 72) [ 49.152090][ T17] usb 6-1: config index 4 descriptor too short (expected 65204, got 72) [ 49.162210][ T3081] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 49.222321][ T3101] usb 1-1: config index 6 descriptor too short (expected 65204, got 72) [ 49.230796][ T12] usb 5-1: config index 6 descriptor too short (expected 65204, got 72) [ 49.239292][ T3116] usb 3-1: config index 6 descriptor too short (expected 65204, got 72) [ 49.252035][ T17] usb 6-1: config index 5 descriptor too short (expected 65204, got 72) [ 49.302107][ T3101] usb 1-1: config index 7 descriptor too short (expected 65204, got 72) [ 49.322093][ T12] usb 5-1: config index 7 descriptor too short (expected 65204, got 72) [ 49.330545][ T3116] usb 3-1: config index 7 descriptor too short (expected 65204, got 72) [ 49.372122][ T17] usb 6-1: config index 6 descriptor too short (expected 65204, got 72) [ 49.462097][ T3101] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.471161][ T3101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.472290][ T17] usb 6-1: config index 7 descriptor too short (expected 65204, got 72) [ 49.479304][ T3101] usb 1-1: Product: syz [ 49.491986][ T3101] usb 1-1: Manufacturer: syz [ 49.496611][ T3101] usb 1-1: SerialNumber: syz [ 49.501278][ T12] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.510437][ T12] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.518494][ T12] usb 5-1: Product: syz [ 49.522748][ T12] usb 5-1: Manufacturer: syz [ 49.527360][ T12] usb 5-1: SerialNumber: syz [ 49.532086][ T3116] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.541296][ T3116] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.549429][ T3116] usb 3-1: Product: syz [ 49.553680][ T3116] usb 3-1: Manufacturer: syz [ 49.558281][ T3116] usb 3-1: SerialNumber: syz [ 49.602670][ T3101] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 49.612789][ T3116] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 49.622607][ T12] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 49.682130][ T17] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 49.691216][ T17] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.699262][ T17] usb 6-1: Product: syz [ 49.703495][ T17] usb 6-1: Manufacturer: syz [ 49.708101][ T17] usb 6-1: SerialNumber: syz [ 49.772787][ T17] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 49.871945][ T3083] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 49.879081][ T3083] ath9k_htc: Failed to initialize the device [ 50.181790][ T3081] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 50.188745][ T3081] ath9k_htc: Failed to initialize the device [ 50.194996][ C0] ================================================================== [ 50.195054][ C0] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195067][ C0] Read of size 4 at addr ffff8881c07ec0a4 by task kworker/0:5/3081 [ 50.195072][ C0] [ 50.195088][ C0] CPU: 0 PID: 3081 Comm: kworker/0:5 Not tainted 5.8.0-syzkaller #0 [ 50.195096][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.195111][ C0] Workqueue: events request_firmware_work_func [ 50.195118][ C0] Call Trace: [ 50.195124][ C0] [ 50.195138][ C0] dump_stack+0xf6/0x16e [ 50.195153][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195166][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195192][ C0] print_address_description.constprop.0+0x1a/0x210 [ 50.195205][ C0] ? vprintk_func+0x93/0x133 [ 50.195218][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195231][ C0] kasan_report.cold+0x37/0x7c [ 50.195246][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195259][ C0] ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.195276][ C0] ? __usb_hcd_giveback_urb+0x302/0x560 [ 50.195288][ C0] ? hif_usb_start+0xa0/0xa0 [ 50.195303][ C0] ? lock_downgrade+0x740/0x740 [ 50.195316][ C0] ? trace_hardirqs_off+0x27/0x1f0 [ 50.195328][ C0] __usb_hcd_giveback_urb+0x32d/0x560 [ 50.195342][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 50.195357][ C0] dummy_timer+0x11f2/0x3240 [ 50.195372][ C0] ? lock_downgrade+0x740/0x740 [ 50.195383][ C0] ? dummy_dequeue+0x490/0x490 [ 50.195396][ C0] call_timer_fn+0x1ac/0x6e0 [ 50.195409][ C0] ? dummy_dequeue+0x490/0x490 [ 50.195420][ C0] ? timer_fixup_init+0x60/0x60 [ 50.195434][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 50.195448][ C0] ? lockdep_hardirqs_on_prepare+0x19c/0x4f0 [ 50.195460][ C0] ? trace_hardirqs_on+0x5f/0x200 [ 50.195472][ C0] ? dummy_dequeue+0x490/0x490 [ 50.195486][ C0] __run_timers.part.0+0x67c/0xa60 [ 50.195499][ C0] ? call_timer_fn+0x6e0/0x6e0 [ 50.195512][ C0] ? mark_lock+0xbc/0x1590 [ 50.195528][ C0] ? clockevents_program_event+0x12b/0x350 [ 50.195542][ C0] ? mark_held_locks+0x9f/0xe0 [ 50.195555][ C0] run_timer_softirq+0x80/0x120 [ 50.195570][ C0] __do_softirq+0x1af/0x91c [ 50.195584][ C0] asm_call_on_stack+0xf/0x20 [ 50.195590][ C0] [ 50.195607][ C0] do_softirq_own_stack+0x73/0x90 [ 50.195620][ C0] irq_exit_rcu+0x107/0x1a0 [ 50.195636][ C0] sysvec_apic_timer_interrupt+0x43/0x90 [ 50.195651][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 50.195665][ C0] RIP: 0010:console_unlock+0xa99/0xcd0 [ 50.195678][ C0] Code: 00 89 ee 48 c7 c7 a0 0c 35 87 e8 12 b9 03 00 65 ff 0d 0b 46 d8 7e e9 87 f9 ff ff e8 e1 54 16 00 e8 1c f0 1b 00 ff 74 24 30 9d 20 fe ff ff e8 cd 54 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 50.195688][ C0] RSP: 0018:ffff8881c0367a18 EFLAGS: 00000293 [ 50.195700][ C0] RAX: 0000000000001a7f RBX: 0000000000000200 RCX: 0000000000000006 [ 50.195709][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8129a904 [ 50.195718][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff895c1627 [ 50.195728][ C0] R10: fffffbfff12b82c4 R11: 0000000038303354 R12: ffffffff82b32f00 [ 50.195738][ C0] R13: ffffffff876f9d70 R14: 0000000000000042 R15: dffffc0000000000 [ 50.195753][ C0] ? netconsole_netdev_event+0x2b0/0x2b0 [ 50.195764][ C0] ? console_unlock+0xa94/0xcd0 [ 50.195787][ C0] vprintk_emit+0x1b2/0x460 [ 50.195800][ C0] vprintk_func+0x8b/0x133 [ 50.195811][ C0] printk+0xba/0xed [ 50.195822][ C0] ? log_store.cold+0x16/0x16 [ 50.195834][ C0] ? usb_submit_urb+0xb56/0x13e0 [ 50.195846][ C0] ? usb_free_urb+0x5c/0x110 [ 50.195860][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 50.195874][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 50.195888][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 50.195904][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 50.195920][ C0] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 50.195934][ C0] request_firmware_work_func+0x126/0x250 [ 50.195947][ C0] ? do_raw_spin_lock+0x120/0x260 [ 50.195961][ C0] ? request_firmware_into_buf+0x90/0x90 [ 50.195976][ C0] ? lockdep_hardirqs_on_prepare+0x322/0x4f0 [ 50.195989][ C0] process_one_work+0x94c/0x15f0 [ 50.196003][ C0] ? lock_release+0x7f0/0x7f0 [ 50.196013][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 50.196023][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 50.196034][ C0] worker_thread+0x64c/0x1120 [ 50.196049][ C0] ? __kthread_parkme+0x118/0x1d0 [ 50.196061][ C0] ? process_one_work+0x15f0/0x15f0 [ 50.196075][ C0] kthread+0x392/0x470 [ 50.196090][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 50.196103][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 50.196115][ C0] ret_from_fork+0x1f/0x30 [ 50.196120][ C0] [ 50.196153][ C0] general protection fault, probably for non-canonical address 0xdead000000000400: 0000 [#1] SMP KASAN [ 50.196166][ C0] CPU: 0 PID: 3081 Comm: kworker/0:5 Not tainted 5.8.0-syzkaller #0 [ 50.196171][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.196192][ C0] Workqueue: events request_firmware_work_func [ 50.196211][ C0] RIP: 0010:print_address_description.constprop.0+0x18e/0x210 [ 50.196223][ C0] Code: c4 60 5b 5d 41 5c 41 5d c3 4c 89 e6 48 2b 35 b9 c6 a3 05 48 89 e8 49 8b 5c 24 18 48 c1 fe 06 48 c1 e6 0c 48 03 35 b2 c6 a3 05 <8b> 4b 18 48 29 f0 48 99 48 89 cf 48 f7 f9 41 0f b7 44 24 2a 48 89 [ 50.196230][ C0] RSP: 0018:ffff8881db209828 EFLAGS: 00010086 [ 50.196239][ C0] RAX: ffff8881c07ec0a4 RBX: dead000000000400 RCX: 0000000000000000 [ 50.196247][ C0] RDX: 0000000000000001 RSI: ffff8881c07ec000 RDI: ffffed103b6412f7 [ 50.196254][ C0] RBP: ffff8881c07ec0a4 R08: 0000000000000000 R09: ffff8881db21fe8b [ 50.196261][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea000701fb00 [ 50.196269][ C0] R13: ffffffff82e49887 R14: ffffffff82e49887 R15: ffff8881c6277840 [ 50.196279][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 50.196291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.196298][ C0] CR2: 0000000020c85000 CR3: 00000001d218f000 CR4: 00000000001506f0 [ 50.196306][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.196312][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.196316][ C0] Call Trace: [ 50.196320][ C0] [ 50.196330][ C0] ? vprintk_func+0x93/0x133 [ 50.196341][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.196351][ C0] kasan_report.cold+0x37/0x7c [ 50.196361][ C0] ? ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.196372][ C0] ath9k_hif_usb_rx_cb+0xc67/0xf80 [ 50.196384][ C0] ? __usb_hcd_giveback_urb+0x302/0x560 [ 50.196393][ C0] ? hif_usb_start+0xa0/0xa0 [ 50.196404][ C0] ? lock_downgrade+0x740/0x740 [ 50.196413][ C0] ? trace_hardirqs_off+0x27/0x1f0 [ 50.196424][ C0] __usb_hcd_giveback_urb+0x32d/0x560 [ 50.196434][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 50.196444][ C0] dummy_timer+0x11f2/0x3240 [ 50.196455][ C0] ? lock_downgrade+0x740/0x740 [ 50.196464][ C0] ? dummy_dequeue+0x490/0x490 [ 50.196473][ C0] call_timer_fn+0x1ac/0x6e0 [ 50.196482][ C0] ? dummy_dequeue+0x490/0x490 [ 50.196492][ C0] ? timer_fixup_init+0x60/0x60 [ 50.196502][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 50.196512][ C0] ? lockdep_hardirqs_on_prepare+0x19c/0x4f0 [ 50.196521][ C0] ? trace_hardirqs_on+0x5f/0x200 [ 50.196530][ C0] ? dummy_dequeue+0x490/0x490 [ 50.196539][ C0] __run_timers.part.0+0x67c/0xa60 [ 50.196548][ C0] ? call_timer_fn+0x6e0/0x6e0 [ 50.196558][ C0] ? mark_lock+0xbc/0x1590 [ 50.196569][ C0] ? clockevents_program_event+0x12b/0x350 [ 50.196578][ C0] ? mark_held_locks+0x9f/0xe0 [ 50.196587][ C0] run_timer_softirq+0x80/0x120 [ 50.196597][ C0] __do_softirq+0x1af/0x91c [ 50.196608][ C0] asm_call_on_stack+0xf/0x20 [ 50.196611][ C0] [ 50.196622][ C0] do_softirq_own_stack+0x73/0x90 [ 50.196630][ C0] irq_exit_rcu+0x107/0x1a0 [ 50.196641][ C0] sysvec_apic_timer_interrupt+0x43/0x90 [ 50.196653][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 50.196662][ C0] RIP: 0010:console_unlock+0xa99/0xcd0 [ 50.196672][ C0] Code: 00 89 ee 48 c7 c7 a0 0c 35 87 e8 12 b9 03 00 65 ff 0d 0b 46 d8 7e e9 87 f9 ff ff e8 e1 54 16 00 e8 1c f0 1b 00 ff 74 24 30 9d 20 fe ff ff e8 cd 54 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 50.196678][ C0] RSP: 0018:ffff8881c0367a18 EFLAGS: 00000293 [ 50.196687][ C0] RAX: 0000000000001a7f RBX: 0000000000000200 RCX: 0000000000000006 [ 50.196693][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8129a904 [ 50.196699][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffffff895c1627 [ 50.196706][ C0] R10: fffffbfff12b82c4 R11: 0000000038303354 R12: ffffffff82b32f00 [ 50.196713][ C0] R13: ffffffff876f9d70 R14: 0000000000000042 R15: dffffc0000000000 [ 50.196723][ C0] ? netconsole_netdev_event+0x2b0/0x2b0 [ 50.196733][ C0] ? console_unlock+0xa94/0xcd0 [ 50.196744][ C0] vprintk_emit+0x1b2/0x460 [ 50.196755][ C0] vprintk_func+0x8b/0x133 [ 50.196764][ C0] printk+0xba/0xed [ 50.196774][ C0] ? log_store.cold+0x16/0x16 [ 50.196784][ C0] ? usb_submit_urb+0xb56/0x13e0 [ 50.196794][ C0] ? usb_free_urb+0x5c/0x110 [ 50.196806][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 50.196817][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 50.196829][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 50.196842][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 50.196855][ C0] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 50.196869][ C0] request_firmware_work_func+0x126/0x250 [ 50.196878][ C0] ? do_raw_spin_lock+0x120/0x260 [ 50.196889][ C0] ? request_firmware_into_buf+0x90/0x90 [ 50.196903][ C0] ? lockdep_hardirqs_on_prepare+0x322/0x4f0 [ 50.196913][ C0] process_one_work+0x94c/0x15f0 [ 50.196926][ C0] ? lock_release+0x7f0/0x7f0 [ 50.196935][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 50.196945][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 50.196956][ C0] worker_thread+0x64c/0x1120 [ 50.196968][ C0] ? __kthread_parkme+0x118/0x1d0 [ 50.196978][ C0] ? process_one_work+0x15f0/0x15f0 [ 50.196991][ C0] kthread+0x392/0x470 [ 50.197004][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 50.197016][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 50.197026][ C0] ret_from_fork+0x1f/0x30 [ 50.197030][ C0] Modules linked in: [ 50.197047][ C0] ---[ end trace 2aebdc58adb555bb ]--- [ 50.197063][ C0] RIP: 0010:print_address_description.constprop.0+0x18e/0x210 [ 50.197075][ C0] Code: c4 60 5b 5d 41 5c 41 5d c3 4c 89 e6 48 2b 35 b9 c6 a3 05 48 89 e8 49 8b 5c 24 18 48 c1 fe 06 48 c1 e6 0c 48 03 35 b2 c6 a3 05 <8b> 4b 18 48 29 f0 48 99 48 89 cf 48 f7 f9 41 0f b7 44 24 2a 48 89 [ 50.197082][ C0] RSP: 0018:ffff8881db209828 EFLAGS: 00010086 [ 50.197093][ C0] RAX: ffff8881c07ec0a4 RBX: dead000000000400 RCX: 0000000000000000 [ 50.197101][ C0] RDX: 0000000000000001 RSI: ffff8881c07ec000 RDI: ffffed103b6412f7 [ 50.197109][ C0] RBP: ffff8881c07ec0a4 R08: 0000000000000000 R09: ffff8881db21fe8b [ 50.197117][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: ffffea000701fb00 [ 50.197124][ C0] R13: ffffffff82e49887 R14: ffffffff82e49887 R15: ffff8881c6277840 [ 50.197132][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 50.197139][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.197145][ C0] CR2: 0000000020c85000 CR3: 00000001d218f000 CR4: 00000000001506f0 [ 50.197151][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.197157][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.197163][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 50.197572][ C0] Kernel Offset: disabled [ 51.326525][ C0] Rebooting in 86400 seconds..