Starting Load/Save RF Kill Switch Statu[ 13.208023][ C1] random: crng init done s... [ 13.212822][ C1] random: 7 urandom warning(s) missed due to ratelimiting [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.11' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 56.735966][ T68] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.016126][ T68] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 57.815872][ T68] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.825002][ T68] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.833033][ T68] usb 1-1: Product: syz [ 57.837248][ T68] usb 1-1: Manufacturer: syz [ 57.841823][ T68] usb 1-1: SerialNumber: syz [ 57.906777][ T68] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 58.515737][ T68] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 58.715886][ T354] udc-core: couldn't find an available UDC or it's busy [ 58.722938][ T354] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 59.575528][ T68] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 59.582588][ T68] ath9k_htc: Failed to initialize the device executing program [ 59.732573][ T12] usb 1-1: USB disconnect, device number 2 [ 59.748313][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 60.105497][ T12] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 60.385545][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 61.185530][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 61.194674][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.202760][ T12] usb 1-1: Product: syz [ 61.206972][ T12] usb 1-1: Manufacturer: syz [ 61.211548][ T12] usb 1-1: SerialNumber: syz [ 61.267709][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 61.845391][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 62.045571][ T359] udc-core: couldn't find an available UDC or it's busy [ 62.052529][ T359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 62.935213][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 62.942842][ T12] ath9k_htc: Failed to initialize the device executing program [ 63.063081][ T68] usb 1-1: USB disconnect, device number 3 [ 63.073966][ T68] usb 1-1: ath9k_htc: USB layer deinitialized [ 63.425183][ T68] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 63.715238][ T68] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 64.515169][ T68] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 64.524305][ T68] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.532355][ T68] usb 1-1: Product: syz [ 64.536629][ T68] usb 1-1: Manufacturer: syz [ 64.541253][ T68] usb 1-1: SerialNumber: syz [ 64.607415][ T68] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 65.175078][ T68] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 65.375240][ T365] udc-core: couldn't find an available UDC or it's busy [ 65.382255][ T365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 66.214917][ T68] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 66.221994][ T68] ath9k_htc: Failed to initialize the device executing program [ 66.391608][ T142] usb 1-1: USB disconnect, device number 4 [ 66.408231][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 66.764886][ T142] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 67.044959][ T142] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 67.854897][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 67.863927][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.871938][ T142] usb 1-1: Product: syz [ 67.876138][ T142] usb 1-1: Manufacturer: syz [ 67.880713][ T142] usb 1-1: SerialNumber: syz [ 67.927246][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 68.494838][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 68.695032][ T370] udc-core: couldn't find an available UDC or it's busy [ 68.702020][ T370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 69.574752][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 69.581688][ T142] ath9k_htc: Failed to initialize the device executing program [ 69.712391][ T21] usb 1-1: USB disconnect, device number 5 [ 69.723492][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 70.084729][ T21] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 70.364769][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 71.164699][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 71.173730][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.181748][ T21] usb 1-1: Product: syz [ 71.185955][ T21] usb 1-1: Manufacturer: syz [ 71.190543][ T21] usb 1-1: SerialNumber: syz [ 71.237121][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.804667][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 72.004872][ T376] udc-core: couldn't find an available UDC or it's busy [ 72.011963][ T376] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 72.854579][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 72.861507][ T21] ath9k_htc: Failed to initialize the device executing program [ 73.022000][ T68] usb 1-1: USB disconnect, device number 6 [ 73.036990][ T68] usb 1-1: ath9k_htc: USB layer deinitialized [ 73.394517][ T68] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 73.674572][ T68] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 74.494566][ T68] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.503602][ T68] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.511614][ T68] usb 1-1: Product: syz [ 74.515825][ T68] usb 1-1: Manufacturer: syz [ 74.520396][ T68] usb 1-1: SerialNumber: syz [ 74.566987][ T68] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.164493][ T68] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.364681][ T381] udc-core: couldn't find an available UDC or it's busy [ 75.371660][ T381] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 76.214326][ T68] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 76.221279][ T68] ath9k_htc: Failed to initialize the device executing program [ 76.381950][ T12] usb 1-1: USB disconnect, device number 7 [ 76.393016][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 76.744275][ T12] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 77.024286][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 77.844127][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.853162][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.861214][ T12] usb 1-1: Product: syz [ 77.865421][ T12] usb 1-1: Manufacturer: syz [ 77.869993][ T12] usb 1-1: SerialNumber: syz [ 77.936554][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.523952][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.724128][ T386] udc-core: couldn't find an available UDC or it's busy [ 78.731169][ T386] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.573737][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 79.580667][ T12] ath9k_htc: Failed to initialize the device executing program [ 79.740708][ T21] usb 1-1: USB disconnect, device number 8 [ 79.756403][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 80.113777][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 80.393692][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 81.193557][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 81.202591][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.210613][ T21] usb 1-1: Product: syz [ 81.214827][ T21] usb 1-1: Manufacturer: syz [ 81.219406][ T21] usb 1-1: SerialNumber: syz [ 81.275786][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 81.843425][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 82.043579][ T391] udc-core: couldn't find an available UDC or it's busy [ 82.050538][ T391] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.933186][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 82.940161][ T21] ath9k_htc: Failed to initialize the device executing program [ 83.060735][ T142] usb 1-1: USB disconnect, device number 9 [ 83.071981][ T142] usb 1-1: ath9k_htc: USB layer deinitialized [ 83.423137][ T142] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 83.703187][ T142] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 84.503028][ T142] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 84.512064][ T142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.520085][ T142] usb 1-1: Product: syz [ 84.524297][ T142] usb 1-1: Manufacturer: syz [ 84.528872][ T142] usb 1-1: SerialNumber: syz [ 84.573517][ T142] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.142968][ T142] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 85.343106][ T397] udc-core: couldn't find an available UDC or it's busy [ 85.350076][ T397] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.212707][ T142] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 86.219715][ T142] ath9k_htc: Failed to initialize the device executing program [ 86.359751][ T21] usb 1-1: USB disconnect, device number 10 [ 86.375249][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 86.732659][ T21] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 87.012679][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 87.812568][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.821690][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.829726][ T21] usb 1-1: Product: syz [ 87.834056][ T21] usb 1-1: Manufacturer: syz [ 87.838634][ T21] usb 1-1: SerialNumber: syz [ 87.884952][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.452571][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.652686][ T402] udc-core: couldn't find an available UDC or it's busy [ 88.659701][ T402] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.492214][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 89.499264][ T21] ath9k_htc: Failed to initialize the device executing program [ 89.669451][ T12] usb 1-1: USB disconnect, device number 11 [ 89.685025][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 90.042192][ T12] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 90.322224][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 91.142115][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.151155][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.159184][ T12] usb 1-1: Product: syz [ 91.163394][ T12] usb 1-1: Manufacturer: syz [ 91.167970][ T12] usb 1-1: SerialNumber: syz [ 91.222744][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.792051][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.992482][ T407] udc-core: couldn't find an available UDC or it's busy [ 91.999451][ T407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 92.851863][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 92.858973][ T12] ath9k_htc: Failed to initialize the device executing program [ 93.009685][ T68] usb 1-1: USB disconnect, device number 12 [ 93.020695][ T68] usb 1-1: ath9k_htc: USB layer deinitialized [ 93.371776][ T68] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 93.651841][ T68] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 94.471707][ T68] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 94.480760][ T68] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.488841][ T68] usb 1-1: Product: syz [ 94.493054][ T68] usb 1-1: Manufacturer: syz [ 94.497630][ T68] usb 1-1: SerialNumber: syz [ 94.562619][ T68] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 95.161637][ T68] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 95.361863][ T413] udc-core: couldn't find an available UDC or it's busy [ 95.368871][ T413] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 96.211412][ T68] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 96.218367][ T68] ath9k_htc: Failed to initialize the device executing program [ 96.378775][ T12] usb 1-1: USB disconnect, device number 13 [ 96.389655][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 96.751356][ T12] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 97.031452][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 97.851344][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 97.860384][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.868481][ T12] usb 1-1: Product: syz [ 97.872700][ T12] usb 1-1: Manufacturer: syz [ 97.877334][ T12] usb 1-1: SerialNumber: syz [ 97.923849][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.491261][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 98.691435][ T418] udc-core: couldn't find an available UDC or it's busy [ 98.698401][ T418] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 99.571122][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 99.578047][ T12] ath9k_htc: Failed to initialize the device executing program [ 99.708350][ T21] usb 1-1: USB disconnect, device number 14 [ 99.716386][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 100.081009][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 100.361101][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 101.161014][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.170150][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.178176][ T21] usb 1-1: Product: syz [ 101.182387][ T21] usb 1-1: Manufacturer: syz [ 101.186962][ T21] usb 1-1: SerialNumber: syz [ 101.231617][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.810950][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 102.011117][ T423] udc-core: couldn't find an available UDC or it's busy [ 102.018076][ T423] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 102.850840][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 102.857772][ T21] ath9k_htc: Failed to initialize the device executing program [ 103.027881][ T12] usb 1-1: USB disconnect, device number 15 [ 103.035690][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 103.400706][ T12] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 103.680781][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 104.480713][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 104.489751][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.497775][ T12] usb 1-1: Product: syz [ 104.501987][ T12] usb 1-1: Manufacturer: syz [ 104.506557][ T12] usb 1-1: SerialNumber: syz [ 104.571257][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 105.140672][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 105.340856][ T428] udc-core: couldn't find an available UDC or it's busy [ 105.347812][ T428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.210445][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 106.217402][ T12] ath9k_htc: Failed to initialize the device executing program [ 106.357886][ T21] usb 1-1: USB disconnect, device number 16 [ 106.374675][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 106.730459][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 107.010531][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 107.810436][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 107.819482][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.827528][ T21] usb 1-1: Product: syz [ 107.831744][ T21] usb 1-1: Manufacturer: syz [ 107.836319][ T21] usb 1-1: SerialNumber: syz [ 107.880953][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.450371][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.650541][ T434] udc-core: couldn't find an available UDC or it's busy [ 108.657499][ T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 109.490221][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 109.497151][ T21] ath9k_htc: Failed to initialize the device executing program [ 109.667908][ T12] usb 1-1: USB disconnect, device number 17 [ 109.684018][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 110.040169][ T12] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 110.330272][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 111.130190][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.139292][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.147310][ T12] usb 1-1: Product: syz [ 111.151523][ T12] usb 1-1: Manufacturer: syz [ 111.156101][ T12] usb 1-1: SerialNumber: syz [ 111.202618][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 111.780113][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 111.980307][ T440] udc-core: couldn't find an available UDC or it's busy [ 111.987261][ T440] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 112.849920][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 112.856899][ T12] ath9k_htc: Failed to initialize the device executing program [ 112.997375][ T21] usb 1-1: USB disconnect, device number 18 [ 113.013847][ T21] usb 1-1: ath9k_htc: USB layer deinitialized [ 113.369928][ T21] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 113.650022][ T21] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 114.449913][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 114.458972][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.467002][ T21] usb 1-1: Product: syz [ 114.471224][ T21] usb 1-1: Manufacturer: syz [ 114.475805][ T21] usb 1-1: SerialNumber: syz [ 114.522378][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 115.089849][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 115.290059][ T446] udc-core: couldn't find an available UDC or it's busy [ 115.297145][ T446] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.129724][ T21] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 116.136688][ T21] ath9k_htc: Failed to initialize the device executing program [ 116.306327][ T12] usb 1-1: USB disconnect, device number 19 [ 116.322315][ T12] usb 1-1: ath9k_htc: USB layer deinitialized [ 116.679659][ T12] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 116.959737][ T12] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 117.769668][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 117.778755][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.786779][ T12] usb 1-1: Product: syz [ 117.790992][ T12] usb 1-1: Manufacturer: syz [ 117.795649][ T12] usb 1-1: SerialNumber: syz [ 117.842153][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 118.419641][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 118.619793][ T452] udc-core: couldn't find an available UDC or it's busy [ 118.626749][ T452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 119.489519][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 119.496452][ T12] ath9k_htc: Failed to initialize the device executing program [ 119.637196][ T68] usb 1-1: USB disconnect, device number 20 [ 119.652502][ T68] usb 1-1: ath9k_htc: USB layer deinitialized [ 120.009476][ T68] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 120.289537][ T68] usb 1-1: too many configurations: 86, using maximum allowed: 8 [ 121.099493][ T68] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 121.108633][ T68] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.116672][ T68] usb 1-1: Product: syz [ 121.120886][ T68] usb 1-1: Manufacturer: syz [ 121.125462][ T68] usb 1-1: SerialNumber: syz [ 121.171923][ T68] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 121.749408][ T68] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 121.949614][ T458] udc-core: couldn't find an available UDC or it's busy [ 121.956574][ T458] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 122.769323][ T68] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 122.776280][ T68] ath9k_htc: Failed to initialize the device [ 122.782474][ C0] ================================================================== [ 122.782533][ C0] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782544][ C0] Read of size 4 at addr ffff8881c8d04090 by task kworker/0:2/68 [ 122.782548][ C0] [ 122.782560][ C0] CPU: 0 PID: 68 Comm: kworker/0:2 Not tainted 5.8.0-rc6-syzkaller #0 [ 122.782567][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.782584][ C0] Workqueue: events request_firmware_work_func [ 122.782600][ C0] Call Trace: [ 122.782605][ C0] [ 122.782620][ C0] dump_stack+0xf6/0x16e [ 122.782633][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782646][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782662][ C0] print_address_description.constprop.0+0x1a/0x210 [ 122.782673][ C0] ? vprintk_func+0x93/0x133 [ 122.782688][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782700][ C0] kasan_report.cold+0x37/0x7c [ 122.782715][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782730][ C0] ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.782747][ C0] ? __usb_hcd_giveback_urb+0x302/0x560 [ 122.782761][ C0] ? hif_usb_start+0xa0/0xa0 [ 122.782787][ C0] ? lock_downgrade+0x730/0x730 [ 122.782802][ C0] ? trace_hardirqs_off+0x27/0x1f0 [ 122.782817][ C0] __usb_hcd_giveback_urb+0x32d/0x560 [ 122.782832][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 122.782847][ C0] dummy_timer+0x11f2/0x3240 [ 122.782860][ C0] ? lock_downgrade+0x730/0x730 [ 122.782872][ C0] ? dummy_dequeue+0x490/0x490 [ 122.782885][ C0] call_timer_fn+0x1ac/0x6e0 [ 122.782899][ C0] ? dummy_dequeue+0x490/0x490 [ 122.782912][ C0] ? msleep_interruptible+0x130/0x130 [ 122.782926][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 122.782940][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550 [ 122.782955][ C0] ? trace_hardirqs_on+0x5f/0x200 [ 122.782967][ C0] ? dummy_dequeue+0x490/0x490 [ 122.782978][ C0] __run_timers.part.0+0x54c/0x9e0 [ 122.782991][ C0] ? call_timer_fn+0x6e0/0x6e0 [ 122.783004][ C0] ? mark_lock+0xbc/0x1590 [ 122.783019][ C0] ? clockevents_program_event+0x12b/0x350 [ 122.783032][ C0] ? mark_held_locks+0x9f/0xe0 [ 122.783044][ C0] run_timer_softirq+0x80/0x120 [ 122.783058][ C0] __do_softirq+0x222/0x95b [ 122.783072][ C0] asm_call_on_stack+0xf/0x20 [ 122.783078][ C0] [ 122.783095][ C0] do_softirq_own_stack+0xed/0x140 [ 122.783111][ C0] irq_exit_rcu+0x150/0x1f0 [ 122.783127][ C0] sysvec_apic_timer_interrupt+0x49/0xc0 [ 122.783143][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 122.783161][ C0] RIP: 0010:console_unlock+0xa99/0xcd0 [ 122.783176][ C0] Code: 00 89 ee 48 c7 c7 20 ec 34 87 e8 c2 b8 03 00 65 ff 0d 8b 77 d8 7e e9 87 f9 ff ff e8 41 32 16 00 e8 8c bd 1b 00 ff 74 24 30 9d 20 fe ff ff e8 2d 32 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 122.783184][ C0] RSP: 0018:ffff8881d583fa18 EFLAGS: 00000293 [ 122.783197][ C0] RAX: 000000000000d4ab RBX: 0000000000000200 RCX: 0000000000000006 [ 122.783206][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81297784 [ 122.783215][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.783223][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82b04d70 [ 122.783232][ C0] R13: ffffffff876f5370 R14: 0000000000000042 R15: dffffc0000000000 [ 122.783246][ C0] ? netconsole_netdev_event+0x2b0/0x2b0 [ 122.783261][ C0] ? console_unlock+0xa94/0xcd0 [ 122.783274][ C0] vprintk_emit+0x1b2/0x460 [ 122.783286][ C0] vprintk_func+0x8b/0x133 [ 122.783297][ C0] printk+0xba/0xed [ 122.783310][ C0] ? log_store.cold+0x16/0x16 [ 122.783323][ C0] ? usb_submit_urb+0xb56/0x13e0 [ 122.783336][ C0] ? usb_free_urb+0x5c/0x110 [ 122.783351][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 122.783366][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 122.783381][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 122.783398][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 122.783415][ C0] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 122.783432][ C0] request_firmware_work_func+0x126/0x250 [ 122.783445][ C0] ? do_raw_spin_lock+0x120/0x260 [ 122.783461][ C0] ? request_firmware_into_buf+0x90/0x90 [ 122.783476][ C0] ? lockdep_hardirqs_on_prepare+0x370/0x550 [ 122.783489][ C0] process_one_work+0x94c/0x15f0 [ 122.783503][ C0] ? lock_release+0x7e0/0x7e0 [ 122.783516][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 122.783532][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 122.783545][ C0] worker_thread+0x64c/0x1120 [ 122.783557][ C0] ? __kthread_parkme+0x118/0x1d0 [ 122.783568][ C0] ? process_one_work+0x15f0/0x15f0 [ 122.783580][ C0] kthread+0x392/0x470 [ 122.783595][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 122.783611][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 122.783624][ C0] ret_from_fork+0x1f/0x30 [ 122.783628][ C0] [ 122.783659][ C0] general protection fault, probably for non-canonical address 0xdead000000000400: 0000 [#1] SMP KASAN [ 122.783671][ C0] CPU: 0 PID: 68 Comm: kworker/0:2 Not tainted 5.8.0-rc6-syzkaller #0 [ 122.783677][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 122.783691][ C0] Workqueue: events request_firmware_work_func [ 122.783707][ C0] RIP: 0010:print_address_description.constprop.0+0x18e/0x210 [ 122.783719][ C0] Code: c4 60 5b 5d 41 5c 41 5d c3 4c 89 e6 48 2b 35 11 df a3 05 48 89 e8 49 8b 5c 24 18 48 c1 fe 06 48 c1 e6 0c 48 03 35 0a df a3 05 <8b> 4b 18 48 29 f0 48 99 48 89 cf 48 f7 f9 41 0f b7 44 24 2a 48 89 [ 122.783726][ C0] RSP: 0018:ffff8881db209838 EFLAGS: 00010086 [ 122.783736][ C0] RAX: ffff8881c8d04090 RBX: dead000000000400 RCX: 0000000000000000 [ 122.783744][ C0] RDX: 0000000000000001 RSI: ffff8881c8d04000 RDI: ffffed103b6412f9 [ 122.783752][ C0] RBP: ffff8881c8d04090 R08: 0000000000000000 R09: ffff8881db21fe8b [ 122.783759][ C0] R10: 0000000000000000 R11: 0000000000000005 R12: ffffea0007234100 [ 122.783767][ C0] R13: ffffffff82e215dd R14: ffffffff82e215dd R15: ffff8881c8d03100 [ 122.783777][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 122.783795][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.783803][ C0] CR2: 00007fe523140008 CR3: 00000001d2710000 CR4: 00000000001406f0 [ 122.783809][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.783815][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.783818][ C0] Call Trace: [ 122.783822][ C0] [ 122.783832][ C0] ? vprintk_func+0x93/0x133 [ 122.783846][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.783859][ C0] kasan_report.cold+0x37/0x7c [ 122.783872][ C0] ? ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.783886][ C0] ath9k_hif_usb_rx_cb+0xd7d/0xf80 [ 122.783901][ C0] ? __usb_hcd_giveback_urb+0x302/0x560 [ 122.783912][ C0] ? hif_usb_start+0xa0/0xa0 [ 122.783924][ C0] ? lock_downgrade+0x730/0x730 [ 122.783937][ C0] ? trace_hardirqs_off+0x27/0x1f0 [ 122.783951][ C0] __usb_hcd_giveback_urb+0x32d/0x560 [ 122.783965][ C0] usb_hcd_giveback_urb+0x367/0x410 [ 122.783975][ C0] dummy_timer+0x11f2/0x3240 [ 122.783990][ C0] ? lock_downgrade+0x730/0x730 [ 122.784001][ C0] ? dummy_dequeue+0x490/0x490 [ 122.784012][ C0] call_timer_fn+0x1ac/0x6e0 [ 122.784023][ C0] ? dummy_dequeue+0x490/0x490 [ 122.784034][ C0] ? msleep_interruptible+0x130/0x130 [ 122.784046][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 122.784059][ C0] ? lockdep_hardirqs_on_prepare+0x1bc/0x550 [ 122.784072][ C0] ? trace_hardirqs_on+0x5f/0x200 [ 122.784083][ C0] ? dummy_dequeue+0x490/0x490 [ 122.784095][ C0] __run_timers.part.0+0x54c/0x9e0 [ 122.784113][ C0] ? call_timer_fn+0x6e0/0x6e0 [ 122.784126][ C0] ? mark_lock+0xbc/0x1590 [ 122.784140][ C0] ? clockevents_program_event+0x12b/0x350 [ 122.784152][ C0] ? mark_held_locks+0x9f/0xe0 [ 122.784164][ C0] run_timer_softirq+0x80/0x120 [ 122.784177][ C0] __do_softirq+0x222/0x95b [ 122.784188][ C0] asm_call_on_stack+0xf/0x20 [ 122.784191][ C0] [ 122.784203][ C0] do_softirq_own_stack+0xed/0x140 [ 122.784214][ C0] irq_exit_rcu+0x150/0x1f0 [ 122.784229][ C0] sysvec_apic_timer_interrupt+0x49/0xc0 [ 122.784243][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 122.784258][ C0] RIP: 0010:console_unlock+0xa99/0xcd0 [ 122.784269][ C0] Code: 00 89 ee 48 c7 c7 20 ec 34 87 e8 c2 b8 03 00 65 ff 0d 8b 77 d8 7e e9 87 f9 ff ff e8 41 32 16 00 e8 8c bd 1b 00 ff 74 24 30 9d 20 fe ff ff e8 2d 32 16 00 48 8d 7d 08 48 89 f8 48 c1 e8 03 42 [ 122.784277][ C0] RSP: 0018:ffff8881d583fa18 EFLAGS: 00000293 [ 122.784285][ C0] RAX: 000000000000d4ab RBX: 0000000000000200 RCX: 0000000000000006 [ 122.784292][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff81297784 [ 122.784298][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.784306][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82b04d70 [ 122.784321][ C0] R13: ffffffff876f5370 R14: 0000000000000042 R15: dffffc0000000000 [ 122.784335][ C0] ? netconsole_netdev_event+0x2b0/0x2b0 [ 122.784348][ C0] ? console_unlock+0xa94/0xcd0 [ 122.784360][ C0] vprintk_emit+0x1b2/0x460 [ 122.784371][ C0] vprintk_func+0x8b/0x133 [ 122.784381][ C0] printk+0xba/0xed [ 122.784392][ C0] ? log_store.cold+0x16/0x16 [ 122.784403][ C0] ? usb_submit_urb+0xb56/0x13e0 [ 122.784415][ C0] ? usb_free_urb+0x5c/0x110 [ 122.784429][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 122.784442][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 122.784457][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 122.784472][ C0] ath9k_hif_usb_firmware_cb+0x274/0x530 [ 122.784487][ C0] ? ath9k_hif_usb_alloc_urbs+0x1010/0x1010 [ 122.784502][ C0] request_firmware_work_func+0x126/0x250 [ 122.784514][ C0] ? do_raw_spin_lock+0x120/0x260 [ 122.784528][ C0] ? request_firmware_into_buf+0x90/0x90 [ 122.784549][ C0] ? lockdep_hardirqs_on_prepare+0x370/0x550 [ 122.784561][ C0] process_one_work+0x94c/0x15f0 [ 122.784574][ C0] ? lock_release+0x7e0/0x7e0 [ 122.784585][ C0] ? pwq_dec_nr_in_flight+0x2d0/0x2d0 [ 122.784600][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 122.784611][ C0] worker_thread+0x64c/0x1120 [ 122.784625][ C0] ? __kthread_parkme+0x118/0x1d0 [ 122.784636][ C0] ? process_one_work+0x15f0/0x15f0 [ 122.784649][ C0] kthread+0x392/0x470 [ 122.784663][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 122.784678][ C0] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 122.784689][ C0] ret_from_fork+0x1f/0x30 [ 122.784693][ C0] Modules linked in: [ 122.784710][ C0] ---[ end trace 3522f088ac1457aa ]--- [ 122.784726][ C0] RIP: 0010:print_address_description.constprop.0+0x18e/0x210 [ 122.784739][ C0] Code: c4 60 5b 5d 41 5c 41 5d c3 4c 89 e6 48 2b 35 11 df a3 05 48 89 e8 49 8b 5c 24 18 48 c1 fe 06 48 c1 e6 0c 48 03 35 0a df a3 05 <8b> 4b 18 48 29 f0 48 99 48 89 cf 48 f7 f9 41 0f b7 44 24 2a 48 89 [ 122.784746][ C0] RSP: 0018:ffff8881db209838 EFLAGS: 00010086 [ 122.784755][ C0] RAX: ffff8881c8d04090 RBX: dead000000000400 RCX: 0000000000000000 [ 122.784769][ C0] RDX: 0000000000000001 RSI: ffff8881c8d04000 RDI: ffffed103b6412f9 [ 122.784778][ C0] RBP: ffff8881c8d04090 R08: 0000000000000000 R09: ffff8881db21fe8b [ 122.784791][ C0] R10: 0000000000000000 R11: 0000000000000005 R12: ffffea0007234100 [ 122.784799][ C0] R13: ffffffff82e215dd R14: ffffffff82e215dd R15: ffff8881c8d03100 [ 122.784809][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 122.784820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.784827][ C0] CR2: 00007fe523140008 CR3: 00000001d2710000 CR4: 00000000001406f0 [ 122.784834][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.784841][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.784848][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 122.785576][ C0] Kernel Offset: disabled [ 123.913733][ C0] Rebooting in 86400 seconds..