Warning: Permanently added '10.128.10.28' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 31.934556][ T2657] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.945695][ T17] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.974489][ T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.982357][ T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 31.990374][ T4411] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 31.998142][ T2202] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.294445][ T2657] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 32.302914][ T2657] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.317550][ T17] usb 5-1: config index 0 descriptor too short (expected 72, got 36) [ 32.326465][ T17] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.414532][ T2202] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 32.422680][ T2202] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.435763][ T7] usb 2-1: config index 0 descriptor too short (expected 72, got 36) [ 32.443898][ T7] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.457197][ T4411] usb 6-1: config index 0 descriptor too short (expected 72, got 36) [ 32.465650][ T5] usb 4-1: config index 0 descriptor too short (expected 72, got 36) [ 32.474266][ T4411] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.487302][ T5] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 32.495590][ T2657] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.509421][ T2657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.517619][ T2657] usb 1-1: Product: syz [ 32.521798][ T2657] usb 1-1: Manufacturer: syz [ 32.526531][ T2657] usb 1-1: SerialNumber: syz [ 32.531365][ T17] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.540777][ T17] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.548838][ T17] usb 5-1: Product: syz [ 32.553013][ T17] usb 5-1: Manufacturer: syz [ 32.557744][ T17] usb 5-1: SerialNumber: syz [ 32.605780][ T17] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.615544][ T2657] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.694628][ T2202] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.704418][ T2202] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.712441][ T2202] usb 3-1: Product: syz [ 32.716721][ T2202] usb 3-1: Manufacturer: syz [ 32.721493][ T2202] usb 3-1: SerialNumber: syz [ 32.726254][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.735708][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.743759][ T7] usb 2-1: Product: syz [ 32.748153][ T7] usb 2-1: Manufacturer: syz [ 32.752777][ T7] usb 2-1: SerialNumber: syz [ 32.757519][ T4411] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.766678][ T4411] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.775023][ T4411] usb 6-1: Product: syz [ 32.779204][ T4411] usb 6-1: Manufacturer: syz [ 32.783801][ T4411] usb 6-1: SerialNumber: syz [ 32.788579][ T5] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.797881][ T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.806055][ T5] usb 4-1: Product: syz [ 32.810360][ T5] usb 4-1: Manufacturer: syz [ 32.815103][ T5] usb 4-1: SerialNumber: syz [ 32.854865][ T4411] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.868999][ T5] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.878586][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.887828][ T2202] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 33.224067][ T17] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.233995][ T2657] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.384485][ T17] usb 1-1: ath9k_htc: Unable to allocate URBs [ 33.393349][ T17] usb 1-1: ath9k_htc: USB layer deinitialized [ 33.404145][ T2657] usb 5-1: ath9k_htc: Unable to allocate URBs [ 33.411082][ T2657] usb 5-1: ath9k_htc: USB layer deinitialized executing program executing program [ 33.635279][ T2622] usb 1-1: USB disconnect, device number 2 [ 33.648205][ T4417] usb 5-1: USB disconnect, device number 2 [ 33.664183][ T2202] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.673946][ T4411] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.683561][ T5] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.693133][ T7] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.883927][ C0] general protection fault, probably for non-canonical address 0xdffffc00000001f3: 0000 [#1] SMP KASAN [ 33.895844][ C0] KASAN: null-ptr-deref in range [0x0000000000000f98-0x0000000000000f9f] [ 33.904264][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.10.0-rc7-syzkaller #0 [ 33.912238][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.922345][ C0] RIP: 0010:ath9k_hif_usb_rx_cb+0x86c/0x1020 [ 33.928410][ C0] Code: 00 00 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 56 05 00 00 4d 8b 7f 08 49 8d bf 98 0f 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 29 05 00 00 48 8b 44 24 30 [ 33.949741][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010006 [ 33.955805][ C0] RAX: 00000000000001f3 RBX: 0000000000000000 RCX: ffffffff84a4bb29 [ 33.963783][ C0] RDX: ffffffff87031000 RSI: ffffffff82f4b081 RDI: 0000000000000f98 [ 33.971752][ C0] RBP: ffff888102f12000 R08: 0000000000000001 R09: ffff888101087ee3 [ 33.980009][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 33.987964][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000000 [ 33.993553][ T2622] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.995949][ C0] FS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000 [ 33.995961][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.995980][ C0] CR2: 000055646a5c0160 CR3: 0000000101369000 CR4: 00000000001506f0 [ 34.027171][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.035353][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.044026][ C0] Call Trace: [ 34.047308][ C0] [ 34.050159][ C0] ? hif_usb_start+0xa0/0xa0 [ 34.054843][ C0] ? __usb_hcd_giveback_urb+0x413/0x5c0 [ 34.060377][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 34.065245][ C0] __usb_hcd_giveback_urb+0x2b0/0x5c0 [ 34.070185][ T17] usb 6-1: USB disconnect, device number 2 [ 34.070716][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 34.076695][ T2657] usb 4-1: USB disconnect, device number 2 [ 34.081718][ C0] dummy_timer+0x11f4/0x3280 [ 34.092279][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 34.097061][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 34.101846][ C0] call_timer_fn+0x1a5/0x630 [ 34.106448][ C0] ? timer_fixup_init+0x60/0x60 [ 34.111313][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 34.115147][ T4461] usb 2-1: USB disconnect, device number 2 [ 34.116266][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 34.116296][ C0] ? lockdep_hardirqs_on_prepare+0x129/0x3e0 executing program executing program [ 34.133617][ C0] ? dummy_dequeue+0x4c0/0x4c0 [ 34.138495][ C0] __run_timers.part.0+0x67c/0xa10 [ 34.143747][ C0] ? call_timer_fn+0x630/0x630 [ 34.148820][ C0] ? clockevents_program_event+0x12b/0x350 [ 34.155350][ C0] ? tick_program_event+0xa8/0x130 [ 34.160555][ C0] run_timer_softirq+0x80/0x120 [ 34.165424][ C0] __do_softirq+0x1b2/0x945 [ 34.169946][ C0] asm_call_irq_on_stack+0xf/0x20 [ 34.174970][ C0] [ 34.177927][ C0] do_softirq_own_stack+0x80/0xa0 [ 34.182972][ C0] irq_exit_rcu+0x110/0x1a0 [ 34.187493][ C0] sysvec_apic_timer_interrupt+0x43/0xa0 [ 34.193141][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 34.199316][ C0] RIP: 0010:acpi_idle_do_entry+0x1c9/0x250 [ 34.205142][ C0] Code: cd 60 a1 fb 84 db 75 ac e8 74 68 a1 fb e8 cf 0e a7 fb e9 0c 00 00 00 e8 65 68 a1 fb 0f 00 2d 5e 27 6a 00 e8 59 68 a1 fb fb f4 <9c> 5b 81 e3 00 02 00 00 fa 31 ff 48 89 de e8 f4 60 a1 fb 48 85 db [ 34.225409][ C0] RSP: 0018:ffffffff87007d60 EFLAGS: 00000293 [ 34.231571][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 1ffffffff10798e1 [ 34.240140][ C0] RDX: ffffffff87031000 RSI: ffffffff859d5d07 RDI: ffffffff859d5cf1 [ 34.248115][ C0] RBP: ffff8881032af064 R08: 0000000000000001 R09: 0000000000000001 [ 34.256164][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000001 [ 34.264137][ C0] R13: ffff8881032af000 R14: ffff8881032af064 R15: ffff888106430804 [ 34.272119][ C0] ? acpi_idle_do_entry+0x1c7/0x250 [ 34.277521][ C0] ? acpi_idle_do_entry+0x1b1/0x250 [ 34.282743][ C0] acpi_idle_enter+0x355/0x4f0 [ 34.287494][ C0] cpuidle_enter_state+0x1b1/0xc80 [ 34.292654][ C0] cpuidle_enter+0x4a/0xa0 [ 34.297097][ C0] do_idle+0x3d5/0x580 [ 34.301162][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 34.306198][ C0] ? schedule+0xdf/0x270 [ 34.310452][ C0] ? trace_init_perf_perm_irq_work_exit+0xe/0xe [ 34.316783][ C0] cpu_startup_entry+0x14/0x20 [ 34.321554][ C0] start_kernel+0x472/0x493 [ 34.326061][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 34.332065][ C0] Modules linked in: [ 34.335958][ C0] ---[ end trace 68cc900535795c50 ]--- [ 34.341680][ C0] RIP: 0010:ath9k_hif_usb_rx_cb+0x86c/0x1020 [ 34.347681][ C0] Code: 00 00 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 80 3c 28 00 0f 85 56 05 00 00 4d 8b 7f 08 49 8d bf 98 0f 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 74 08 3c 03 0f 8e 29 05 00 00 48 8b 44 24 30 [ 34.353464][ T2622] usb 1-1: config index 0 descriptor too short (expected 72, got 36) [ 34.367304][ C0] RSP: 0018:ffffc90000007928 EFLAGS: 00010006 [ 34.367317][ C0] RAX: 00000000000001f3 RBX: 0000000000000000 RCX: ffffffff84a4bb29 [ 34.367325][ C0] RDX: ffffffff87031000 RSI: ffffffff82f4b081 RDI: 0000000000000f98 [ 34.367332][ C0] RBP: ffff888102f12000 R08: 0000000000000001 R09: ffff888101087ee3 [ 34.367338][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 34.367344][ C0] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000000 [ 34.367353][ C0] FS: 0000000000000000(0000) GS:ffff8881f6a00000(0000) knlGS:0000000000000000 [ 34.367365][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 34.367372][ C0] CR2: 000055646a5c0160 CR3: 0000000101369000 CR4: 00000000001506f0 [ 34.367378][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 34.367398][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 34.376166][ T2622] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 34.381950][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 34.382667][ C0] Kernel Offset: disabled [ 34.489204][ C0] Rebooting in 86400 seconds..