[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. [ 12.977088][ C1] random: crng init done [ 12.981400][ C1] random: 7 urandom warning(s) missed due to ratelimiting Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 19.867400][ T149] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 20.386638][ T149] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 20.395784][ T149] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 20.403818][ T149] usb 1-1: Product: syz [ 20.408041][ T149] usb 1-1: Manufacturer: syz [ 20.412628][ T149] usb 1-1: SerialNumber: syz [ 20.457367][ T149] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 21.065734][ T149] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 21.285455][ C0] ================================================================== [ 21.293606][ C0] BUG: KASAN: slab-out-of-bounds in ath9k_htc_rx_msg+0xa25/0xaf0 [ 21.301295][ C0] Write of size 2 at addr ffff8881cc8c27f0 by task swapper/0/0 [ 21.308804][ C0] [ 21.311126][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.7.0-rc6-syzkaller #0 [ 21.318996][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 21.329036][ C0] Call Trace: [ 21.332294][ C0] [ 21.335139][ C0] dump_stack+0xef/0x16e [ 21.339373][ C0] print_address_description.constprop.0.cold+0xd3/0x415 [ 21.346381][ C0] ? vprintk_func+0x7d/0x113 [ 21.350944][ C0] ? ath9k_htc_rx_msg+0xa25/0xaf0 [ 21.355949][ C0] __kasan_report.cold+0x37/0x7d [ 21.360860][ C0] ? ath9k_htc_rx_msg+0xa25/0xaf0 [ 21.365891][ C0] ? ath9k_htc_rx_msg+0xa25/0xaf0 [ 21.370892][ C0] kasan_report+0x33/0x50 [ 21.375209][ C0] ath9k_htc_rx_msg+0xa25/0xaf0 [ 21.380047][ C0] ath9k_hif_usb_reg_in_cb+0x1c0/0x630 [ 21.385477][ C0] ? _raw_read_unlock+0x1a/0x30 [ 21.390302][ C0] ? led_trigger_blink_oneshot+0xb4/0xe0 [ 21.395903][ C0] __usb_hcd_giveback_urb+0x1f2/0x470 [ 21.401259][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 21.406429][ C0] dummy_timer+0x125e/0x32b4 [ 21.410999][ C0] ? dummy_udc_probe+0x980/0x980 [ 21.415911][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 21.421630][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 21.426901][ C0] call_timer_fn+0x1ac/0x700 [ 21.431463][ C0] ? dummy_udc_probe+0x980/0x980