[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.173' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 26.162045][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.169738][ T83] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.178984][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.181990][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.187676][ T387] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 26.201483][ T381] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.711784][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.721101][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.729166][ T12] usb 1-1: Product: syz [ 26.731918][ T17] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.733457][ T12] usb 1-1: Manufacturer: syz [ 26.742426][ T17] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.746988][ T12] usb 1-1: SerialNumber: syz [ 26.754986][ T17] usb 2-1: Product: syz [ 26.763782][ T17] usb 2-1: Manufacturer: syz [ 26.768376][ T17] usb 2-1: SerialNumber: syz [ 26.773114][ T83] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.782234][ T83] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.790215][ T83] usb 5-1: Product: syz [ 26.794639][ T83] usb 5-1: Manufacturer: syz [ 26.799221][ T83] usb 5-1: SerialNumber: syz [ 26.802836][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 26.804017][ T21] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.821126][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.829225][ T21] usb 4-1: Product: syz [ 26.833450][ T21] usb 4-1: Manufacturer: syz [ 26.838053][ T21] usb 4-1: SerialNumber: syz [ 26.842747][ T381] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.851831][ T381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.859988][ T381] usb 3-1: Product: syz [ 26.864194][ T381] usb 3-1: Manufacturer: syz [ 26.868783][ T381] usb 3-1: SerialNumber: syz [ 26.873531][ T387] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 26.882613][ T387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.890780][ T387] usb 6-1: Product: syz [ 26.895019][ T387] usb 6-1: Manufacturer: syz [ 26.899785][ T387] usb 6-1: SerialNumber: syz [ 26.952560][ T381] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 26.963335][ T83] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 26.973172][ T387] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 26.982130][ T21] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 26.992048][ T17] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 27.461273][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.591348][ T21] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.600436][ T83] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.611947][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.621176][ T387] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.631152][ T381] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 27.861656][ T372] udc-core: couldn't find an available UDC or it's busy [ 27.868834][ T372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.991355][ T378] udc-core: couldn't find an available UDC or it's busy [ 27.991358][ T384] udc-core: couldn't find an available UDC or it's busy [ 27.991407][ T384] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.998386][ T378] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.005630][ T385] udc-core: couldn't find an available UDC or it's busy [ 28.015829][ T379] udc-core: couldn't find an available UDC or it's busy [ 28.020255][ T385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.027234][ T379] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.036014][ T377] udc-core: couldn't find an available UDC or it's busy [ 28.057659][ T377] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.510677][ T12] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 28.518435][ T12] ath9k_htc: Failed to initialize the device [ 28.670893][ T381] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 28.677829][ T381] ath9k_htc: Failed to initialize the device [ 28.685632][ T387] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 28.693102][ T95] usb 1-1: USB disconnect, device number 2 [ 28.695274][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 28.705869][ T83] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 28.711206][ T95] usb 1-1: ath9k_htc: USB layer deinitialized executing program [ 28.712978][ T21] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 28.735457][ T83] ath9k_htc: Failed to initialize the device [ 28.741683][ T387] ath9k_htc: Failed to initialize the device [ 28.748144][ T17] ath9k_htc: Failed to initialize the device [ 28.755309][ T21] ath9k_htc: Failed to initialize the device executing program executing program executing program [ 28.853584][ T389] usb 3-1: USB disconnect, device number 2 [ 28.853793][ T157] usb 4-1: USB disconnect, device number 2 [ 28.868700][ T402] usb 2-1: USB disconnect, device number 2 [ 28.878749][ T402] usb 2-1: ath9k_htc: USB layer deinitialized [ 28.883486][ T388] usb 6-1: USB disconnect, device number 2 [ 28.891865][ T404] usb 5-1: USB disconnect, device number 2 executing program executing program [ 28.905737][ T389] usb 3-1: ath9k_htc: USB layer deinitialized [ 28.905742][ T157] usb 4-1: ath9k_htc: USB layer deinitialized [ 28.919715][ T404] usb 5-1: ath9k_htc: USB layer deinitialized [ 28.949266][ T388] usb 6-1: ath9k_htc: USB layer deinitialized [ 29.150334][ T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.270277][ T157] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.280399][ T389] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.290434][ T404] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.310494][ T402] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.320313][ T388] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 29.670299][ T95] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.679439][ T95] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.687518][ T95] usb 1-1: Product: syz [ 29.691847][ T95] usb 1-1: Manufacturer: syz [ 29.696615][ T95] usb 1-1: SerialNumber: syz [ 29.741214][ T95] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 29.810281][ T389] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.819401][ T389] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.827530][ T389] usb 3-1: Product: syz [ 29.831750][ T389] usb 3-1: Manufacturer: syz [ 29.836758][ T389] usb 3-1: SerialNumber: syz [ 29.840356][ T404] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.841643][ T388] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.850557][ T404] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.859561][ T388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.867542][ T404] usb 5-1: Product: syz [ 29.875532][ T388] usb 6-1: Product: syz [ 29.875545][ T388] usb 6-1: Manufacturer: syz [ 29.880566][ T404] usb 5-1: Manufacturer: syz [ 29.880578][ T404] usb 5-1: SerialNumber: syz [ 29.880665][ T157] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.884735][ T388] usb 6-1: SerialNumber: syz [ 29.889313][ T157] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.920497][ T157] usb 4-1: Product: syz [ 29.924717][ T157] usb 4-1: Manufacturer: syz [ 29.929307][ T157] usb 4-1: SerialNumber: syz [ 29.935061][ T402] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 29.940709][ T389] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 29.944162][ T402] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.953700][ T388] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 29.960210][ T402] usb 2-1: Product: syz [ 29.960224][ T402] usb 2-1: Manufacturer: syz [ 29.960237][ T402] usb 2-1: SerialNumber: syz [ 30.020720][ T157] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 30.030726][ T404] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 30.040630][ T402] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 30.489893][ T95] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.569783][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.578861][ T388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.629785][ T404] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.638878][ T157] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.647989][ T402] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 30.890086][ T398] udc-core: couldn't find an available UDC or it's busy [ 30.897132][ T398] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.969968][ T411] udc-core: couldn't find an available UDC or it's busy [ 30.969971][ T409] udc-core: couldn't find an available UDC or it's busy [ 30.969989][ T409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.976998][ T411] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.029999][ T407] udc-core: couldn't find an available UDC or it's busy [ 31.030002][ T408] udc-core: couldn't find an available UDC or it's busy [ 31.030021][ T408] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.037068][ T407] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.047691][ T410] udc-core: couldn't find an available UDC or it's busy [ 31.066197][ T410] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.549313][ T95] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 31.556273][ T95] ath9k_htc: Failed to initialize the device [ 31.629215][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 31.636245][ T17] ath9k_htc: Failed to initialize the device [ 31.642324][ T388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 31.649527][ T388] ath9k_htc: Failed to initialize the device executing program [ 31.719341][ T402] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 31.726366][ T402] ath9k_htc: Failed to initialize the device [ 31.732599][ T404] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 31.733090][ T387] usb 1-1: USB disconnect, device number 3 [ 31.741850][ T157] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 31.752953][ T404] ath9k_htc: Failed to initialize the device [ 31.755083][ T387] usb 1-1: ath9k_htc: USB layer deinitialized [ 31.764350][ T157] ath9k_htc: Failed to initialize the device executing program executing program [ 31.810871][ T12] usb 3-1: USB disconnect, device number 3 [ 31.810876][ T21] usb 6-1: USB disconnect, device number 3 [ 31.834543][ T21] usb 6-1: ath9k_htc: USB layer deinitialized [ 31.841069][ T12] usb 3-1: ath9k_htc: USB layer deinitialized executing program executing program executing program [ 31.861281][ T406] usb 2-1: USB disconnect, device number 3 [ 31.862393][ T83] usb 4-1: USB disconnect, device number 3 [ 31.884270][ T389] usb 5-1: USB disconnect, device number 3 [ 31.885069][ T406] usb 2-1: ath9k_htc: USB layer deinitialized [ 31.891406][ T83] usb 4-1: ath9k_htc: USB layer deinitialized [ 31.911788][ T389] usb 5-1: ath9k_htc: USB layer deinitialized [ 32.128968][ T387] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 32.188979][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 32.218962][ T12] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.248959][ T406] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.278903][ T83] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.286497][ T389] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.658874][ T387] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.668005][ T387] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.676551][ T387] usb 1-1: Product: syz [ 32.680872][ T387] usb 1-1: Manufacturer: syz [ 32.685486][ T387] usb 1-1: SerialNumber: syz [ 32.728893][ T21] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.738094][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.746529][ T21] usb 6-1: Product: syz [ 32.750198][ T12] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.750767][ T21] usb 6-1: Manufacturer: syz [ 32.759801][ T12] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.764372][ T21] usb 6-1: SerialNumber: syz [ 32.772374][ T12] usb 3-1: Product: syz [ 32.777920][ T387] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.781170][ T12] usb 3-1: Manufacturer: syz [ 32.781184][ T12] usb 3-1: SerialNumber: syz [ 32.829119][ T406] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.838319][ T406] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.840258][ T21] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.846814][ T406] usb 2-1: Product: syz [ 32.855367][ T389] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.858977][ T406] usb 2-1: Manufacturer: syz [ 32.858995][ T406] usb 2-1: SerialNumber: syz [ 32.868006][ T389] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.874215][ T12] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.877198][ T389] usb 5-1: Product: syz [ 32.897602][ T389] usb 5-1: Manufacturer: syz [ 32.902252][ T389] usb 5-1: SerialNumber: syz [ 32.907060][ T83] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 32.916177][ T83] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.924248][ T83] usb 4-1: Product: syz [ 32.928391][ T83] usb 4-1: Manufacturer: syz [ 32.929461][ T406] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 32.933036][ T83] usb 4-1: SerialNumber: syz [ 32.999445][ T83] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 33.009509][ T389] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 33.418657][ T387] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.488585][ T12] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.518501][ T21] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.548538][ T406] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.588547][ T83] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.599746][ T389] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 33.819230][ T425] udc-core: couldn't find an available UDC or it's busy [ 33.826204][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.888729][ T429] udc-core: couldn't find an available UDC or it's busy [ 33.895748][ T429] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.918677][ T430] udc-core: couldn't find an available UDC or it's busy [ 33.925764][ T430] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.948745][ T433] udc-core: couldn't find an available UDC or it's busy [ 33.955755][ T433] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 33.988734][ T436] udc-core: couldn't find an available UDC or it's busy [ 33.988836][ T434] udc-core: couldn't find an available UDC or it's busy [ 33.995701][ T436] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.011019][ T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.508062][ T387] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 34.515146][ T387] ath9k_htc: Failed to initialize the device [ 34.518004][ T12] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 34.529167][ T12] ath9k_htc: Failed to initialize the device [ 34.588170][ T21] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 34.588195][ T406] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 34.595387][ T21] ath9k_htc: Failed to initialize the device [ 34.602298][ T406] ath9k_htc: Failed to initialize the device executing program [ 34.639533][ T402] usb 1-1: USB disconnect, device number 4 [ 34.659576][ T402] usb 1-1: ath9k_htc: USB layer deinitialized [ 34.668213][ T83] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 34.675369][ T389] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 34.683014][ T389] ath9k_htc: Failed to initialize the device [ 34.689412][ T83] ath9k_htc: Failed to initialize the device executing program executing program [ 34.730330][ T17] usb 3-1: USB disconnect, device number 4 [ 34.742418][ T388] usb 6-1: USB disconnect, device number 4 [ 34.761567][ T17] usb 3-1: ath9k_htc: USB layer deinitialized [ 34.769972][ T388] usb 6-1: ath9k_htc: USB layer deinitialized executing program [ 34.771209][ T157] usb 2-1: USB disconnect, device number 4 [ 34.790543][ T157] usb 2-1: ath9k_htc: USB layer deinitialized executing program executing program [ 34.830925][ T415] usb 4-1: USB disconnect, device number 4 [ 34.836885][ T381] usb 5-1: USB disconnect, device number 4 [ 34.853190][ T415] usb 4-1: ath9k_htc: USB layer deinitialized [ 34.860461][ T381] usb 5-1: ath9k_htc: USB layer deinitialized [ 35.037817][ T402] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.147787][ T17] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 35.155419][ T388] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 35.187783][ T157] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 35.227773][ T381] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 35.235369][ T415] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 35.577816][ T402] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.587035][ T402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.595104][ T402] usb 1-1: Product: syz [ 35.599351][ T402] usb 1-1: Manufacturer: syz [ 35.603937][ T402] usb 1-1: SerialNumber: syz [ 35.658759][ T402] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 35.669383][ T17] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.678632][ T17] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.689811][ T17] usb 3-1: Product: syz [ 35.694052][ T17] usb 3-1: Manufacturer: syz [ 35.698785][ T17] usb 3-1: SerialNumber: syz [ 35.704085][ T388] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.713852][ T388] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.722152][ T388] usb 6-1: Product: syz [ 35.726301][ T388] usb 6-1: Manufacturer: syz [ 35.730956][ T388] usb 6-1: SerialNumber: syz [ 35.742785][ T157] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.752001][ T157] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.760154][ T157] usb 2-1: Product: syz [ 35.764304][ T157] usb 2-1: Manufacturer: syz [ 35.768936][ T157] usb 2-1: SerialNumber: syz [ 35.777837][ T415] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.787560][ T415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.795617][ T415] usb 4-1: Product: syz [ 35.800052][ T415] usb 4-1: Manufacturer: syz [ 35.804640][ T415] usb 4-1: SerialNumber: syz [ 35.809344][ T381] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 35.818638][ T381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.826655][ T381] usb 5-1: Product: syz [ 35.828366][ T157] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 35.830887][ T381] usb 5-1: Manufacturer: syz [ 35.844145][ T381] usb 5-1: SerialNumber: syz [ 35.849567][ T388] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 35.858914][ T17] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 35.918624][ T415] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 35.928225][ T381] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 36.277755][ T402] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.427523][ T157] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.439303][ T388] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.448794][ T17] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.497606][ T83] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.506713][ T381] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 36.677936][ T448] udc-core: couldn't find an available UDC or it's busy [ 36.684963][ T448] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.827749][ T455] udc-core: couldn't find an available UDC or it's busy [ 36.834991][ T455] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.839533][ T451] udc-core: couldn't find an available UDC or it's busy [ 36.844808][ T452] udc-core: couldn't find an available UDC or it's busy [ 36.849836][ T451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.856674][ T452] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.897725][ T464] udc-core: couldn't find an available UDC or it's busy [ 36.904797][ T464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 36.904942][ T463] udc-core: couldn't find an available UDC or it's busy [ 36.919621][ T463] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.307230][ T402] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 37.314331][ T402] ath9k_htc: Failed to initialize the device [ 37.467196][ T157] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 37.467245][ T388] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 37.474601][ T157] ath9k_htc: Failed to initialize the device [ 37.481240][ T17] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 37.487395][ C0] ================================================================== [ 37.494571][ T17] ath9k_htc: Failed to initialize the device [ 37.502346][ C0] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xad3/0xf90 executing program [ 37.502358][ C0] Read of size 4 at addr ffff8881c937c0dc by task kworker/0:3/157 [ 37.502362][ C0] [ 37.502375][ C0] CPU: 0 PID: 157 Comm: kworker/0:3 Not tainted 5.7.0-rc5-syzkaller #0 [ 37.502382][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.502399][ C0] Workqueue: events request_firmware_work_func [ 37.502405][ C0] Call Trace: [ 37.502415][ C0] [ 37.509914][ T388] ath9k_htc: Failed to initialize the device [ 37.516177][ C0] dump_stack+0xef/0x16e [ 37.516194][ C0] print_address_description.constprop.0.cold+0xd3/0x314 [ 37.516208][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 37.516223][ C0] __kasan_report.cold+0x37/0x92 [ 37.524661][ T415] usb 1-1: USB disconnect, device number 5 [ 37.526337][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 37.526350][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 37.526362][ C0] kasan_report+0x33/0x50 [ 37.526372][ C0] ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 37.526389][ C0] ? find_held_lock+0x2d/0x110 [ 37.614843][ C0] ? hif_usb_mgmt_cb+0x310/0x310 [ 37.619770][ C0] ? usb_hcd_unmap_urb_setup_for_dma+0x8a/0x470 [ 37.626010][ C0] ? do_raw_read_unlock+0x3b/0x70 [ 37.631023][ C0] ? _raw_read_unlock+0x1a/0x30 [ 37.635865][ C0] __usb_hcd_giveback_urb+0x1f2/0x470 [ 37.641242][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 37.646419][ C0] dummy_timer+0x125e/0x32b4 [ 37.651013][ C0] ? dummy_udc_probe+0x980/0x980 [ 37.655929][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 37.661534][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 37.666812][ C0] call_timer_fn+0x1ac/0x700 [ 37.671383][ C0] ? dummy_udc_probe+0x980/0x980 [ 37.676294][ C0] ? timer_fixup_init+0x60/0x60 [ 37.681129][ C0] ? lock_downgrade+0x720/0x720 [ 37.685977][ C0] ? mark_held_locks+0x9f/0xe0 [ 37.690731][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 37.696011][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.701204][ C0] ? dummy_udc_probe+0x980/0x980 [ 37.706812][ C0] run_timer_softirq+0x5f9/0x1500 [ 37.711834][ C0] ? add_timer+0x7a0/0x7a0 [ 37.716253][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 37.721781][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 37.727048][ C0] ? mark_held_locks+0x9f/0xe0 [ 37.731917][ C0] __do_softirq+0x21e/0x9aa [ 37.736641][ C0] irq_exit+0x178/0x1a0 [ 37.740792][ C0] smp_apic_timer_interrupt+0x141/0x540 [ 37.746318][ C0] apic_timer_interrupt+0xf/0x20 [ 37.749137][ T389] usb 2-1: USB disconnect, device number 5 [ 37.751324][ C0] [ 37.760047][ C0] RIP: 0010:console_unlock+0xbb4/0xca0 [ 37.765509][ C0] Code: 0d fe ff ff e8 1d 5e 16 00 48 8b bc 24 80 00 00 00 e8 50 dc ff ff e9 f9 fa ff ff e8 06 5e 16 00 e8 e1 b9 1b 00 ff 74 24 30 9d e5 fa ff ff e8 12 cd 3f 00 e9 93 f6 ff ff e8 18 cd 3f 00 e9 4d [ 37.785266][ C0] RSP: 0018:ffff8881cf637a30 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 37.793829][ C0] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffffffff1270ae0 [ 37.801777][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881d277d2bc [ 37.809725][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff126c8c8 [ 37.817672][ C0] R10: ffffffff8936463f R11: fffffbfff126c8c7 R12: ffffffff82aba0b0 [ 37.825649][ C0] R13: ffffffff874ee290 R14: 0000000000000042 R15: dffffc0000000000 [ 37.833650][ C0] ? netconsole_netdev_event+0x2a0/0x2a0 [ 37.839795][ C0] vprintk_emit+0x16d/0x3e0 [ 37.844294][ C0] vprintk_func+0x75/0x113 [ 37.848704][ C0] printk+0xba/0xed [ 37.852494][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 37.857948][ C0] ? usb_free_urb.part.0+0x52/0x110 [ 37.863125][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 37.868478][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 37.873395][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 37.878590][ C0] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 37.884202][ C0] ? ath9k_hif_usb_resume+0x320/0x320 [ 37.889557][ C0] request_firmware_work_func+0x126/0x242 [ 37.895271][ C0] ? request_firmware_into_buf+0x90/0x90 [ 37.900885][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 37.906410][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 37.911681][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 37.916881][ C0] process_one_work+0x965/0x1630 [ 37.921821][ C0] ? lock_release+0x720/0x720 [ 37.926575][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 37.931961][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 37.936892][ C0] worker_thread+0x96/0xe20 [ 37.941390][ C0] ? process_one_work+0x1630/0x1630 [ 37.946575][ C0] kthread+0x326/0x430 [ 37.950631][ C0] ? kthread_create_on_node+0xf0/0xf0 [ 37.955984][ C0] ret_from_fork+0x24/0x30 [ 37.960399][ C0] [ 37.962741][ C0] general protection fault, probably for non-canonical address 0xdead000000000400: 0000 [#1] SMP KASAN [ 37.973749][ C0] CPU: 0 PID: 157 Comm: kworker/0:3 Not tainted 5.7.0-rc5-syzkaller #0 [ 37.981971][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.992018][ C0] Workqueue: events request_firmware_work_func [ 37.998154][ C0] RIP: 0010:print_address_description.constprop.0.cold+0x124/0x314 [ 38.007157][ C0] Code: 00 f6 c4 02 0f 84 0f ff ff ff 48 89 e9 48 2b 0d 1c 00 85 05 4c 89 e0 4c 8b 6d 18 48 c1 f9 06 48 c1 e1 0c 48 03 0d 16 00 85 05 <41> 8b 7d 18 48 29 c8 48 99 48 f7 ff 4c 89 e0 48 29 d0 48 89 c2 0f [ 38.026828][ C0] RSP: 0018:ffff8881db209858 EFLAGS: 00010086 [ 38.033405][ C0] RAX: ffff8881c937c0dc RBX: 0000000000000004 RCX: ffff8881c937c000 [ 38.041354][ C0] RDX: 0000000000000000 RSI: ffffffff812a31fd RDI: ffffed103b6412fd [ 38.049307][ C0] RBP: ffffea000724df00 R08: 0000000000000000 R09: ffffed103b6443c9 [ 38.057271][ C0] R10: ffff8881db221e43 R11: ffffed103b6443c8 R12: ffff8881c937c0dc [ 38.065320][ C0] R13: dead000000000400 R14: ffff8881c9a52700 R15: ffff8881c9f74000 [ 38.073291][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 38.082243][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.088809][ C0] CR2: 0000000000000000 CR3: 00000001c2ff5000 CR4: 00000000001406f0 [ 38.096774][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.104722][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.112689][ C0] Call Trace: [ 38.115965][ C0] [ 38.118831][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 38.124093][ C0] __kasan_report.cold+0x37/0x92 [ 38.129010][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 38.134273][ C0] ? ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 38.139531][ C0] kasan_report+0x33/0x50 [ 38.143842][ C0] ath9k_hif_usb_rx_cb+0xad3/0xf90 [ 38.148931][ C0] ? find_held_lock+0x2d/0x110 [ 38.153669][ C0] ? hif_usb_mgmt_cb+0x310/0x310 [ 38.158602][ C0] ? usb_hcd_unmap_urb_setup_for_dma+0x8a/0x470 [ 38.164874][ C0] ? do_raw_read_unlock+0x3b/0x70 [ 38.169895][ C0] ? _raw_read_unlock+0x1a/0x30 [ 38.175534][ C0] __usb_hcd_giveback_urb+0x1f2/0x470 [ 38.180899][ C0] usb_hcd_giveback_urb+0x368/0x420 [ 38.186856][ C0] dummy_timer+0x125e/0x32b4 [ 38.191440][ C0] ? dummy_udc_probe+0x980/0x980 [ 38.196356][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.201878][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.207141][ C0] call_timer_fn+0x1ac/0x700 [ 38.211709][ C0] ? dummy_udc_probe+0x980/0x980 [ 38.216632][ C0] ? timer_fixup_init+0x60/0x60 [ 38.221546][ C0] ? lock_downgrade+0x720/0x720 [ 38.226373][ C0] ? mark_held_locks+0x9f/0xe0 [ 38.231113][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.236373][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 38.241810][ C0] ? dummy_udc_probe+0x980/0x980 [ 38.246723][ C0] run_timer_softirq+0x5f9/0x1500 [ 38.251726][ C0] ? add_timer+0x7a0/0x7a0 [ 38.256126][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.261907][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.267169][ C0] ? mark_held_locks+0x9f/0xe0 [ 38.271909][ C0] __do_softirq+0x21e/0x9aa [ 38.276392][ C0] irq_exit+0x178/0x1a0 [ 38.281236][ C0] smp_apic_timer_interrupt+0x141/0x540 [ 38.286775][ C0] apic_timer_interrupt+0xf/0x20 [ 38.291688][ C0] [ 38.294620][ C0] RIP: 0010:console_unlock+0xbb4/0xca0 [ 38.300066][ C0] Code: 0d fe ff ff e8 1d 5e 16 00 48 8b bc 24 80 00 00 00 e8 50 dc ff ff e9 f9 fa ff ff e8 06 5e 16 00 e8 e1 b9 1b 00 ff 74 24 30 9d e5 fa ff ff e8 12 cd 3f 00 e9 93 f6 ff ff e8 18 cd 3f 00 e9 4d [ 38.321755][ C0] RSP: 0018:ffff8881cf637a30 EFLAGS: 00000293 ORIG_RAX: ffffffffffffff13 [ 38.330228][ C0] RAX: 0000000000000007 RBX: 0000000000000200 RCX: 1ffffffff1270ae0 [ 38.338176][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881d277d2bc [ 38.346124][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: fffffbfff126c8c8 [ 38.354074][ C0] R10: ffffffff8936463f R11: fffffbfff126c8c7 R12: ffffffff82aba0b0 [ 38.362034][ C0] R13: ffffffff874ee290 R14: 0000000000000042 R15: dffffc0000000000 [ 38.370167][ C0] ? netconsole_netdev_event+0x2a0/0x2a0 [ 38.375782][ C0] vprintk_emit+0x16d/0x3e0 [ 38.380286][ C0] vprintk_func+0x75/0x113 [ 38.384679][ C0] printk+0xba/0xed [ 38.388464][ C0] ? kmsg_dump_rewind_nolock+0xd9/0xd9 [ 38.393901][ C0] ? usb_free_urb.part.0+0x52/0x110 [ 38.399424][ C0] ? ath9k_htc_hw_init.cold+0x5/0x2a [ 38.404687][ C0] ? ath9k_htc_hw_init+0x3d/0x60 [ 38.409983][ C0] ath9k_htc_hw_init.cold+0x17/0x2a [ 38.415186][ C0] ath9k_hif_usb_firmware_cb+0x274/0x510 [ 38.420837][ C0] ? ath9k_hif_usb_resume+0x320/0x320 [ 38.426197][ C0] request_firmware_work_func+0x126/0x242 [ 38.431907][ C0] ? request_firmware_into_buf+0x90/0x90 [ 38.437535][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 38.443059][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 38.448322][ C0] ? _raw_spin_unlock_irq+0x1f/0x30 [ 38.453513][ C0] process_one_work+0x965/0x1630 [ 38.459063][ C0] ? lock_release+0x720/0x720 [ 38.463733][ C0] ? pwq_dec_nr_in_flight+0x310/0x310 [ 38.469109][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 38.474241][ C0] worker_thread+0x96/0xe20 [ 38.478738][ C0] ? process_one_work+0x1630/0x1630 [ 38.483921][ C0] kthread+0x326/0x430 [ 38.487972][ C0] ? kthread_create_on_node+0xf0/0xf0 [ 38.494921][ C0] ret_from_fork+0x24/0x30 [ 38.499317][ C0] Modules linked in: [ 38.503312][ C0] ---[ end trace c882caa42ec8d9b7 ]--- [ 38.508788][ C0] RIP: 0010:print_address_description.constprop.0.cold+0x124/0x314 [ 38.517361][ C0] Code: 00 f6 c4 02 0f 84 0f ff ff ff 48 89 e9 48 2b 0d 1c 00 85 05 4c 89 e0 4c 8b 6d 18 48 c1 f9 06 48 c1 e1 0c 48 03 0d 16 00 85 05 <41> 8b 7d 18 48 29 c8 48 99 48 f7 ff 4c 89 e0 48 29 d0 48 89 c2 0f [ 38.537046][ C0] RSP: 0018:ffff8881db209858 EFLAGS: 00010086 [ 38.543089][ C0] RAX: ffff8881c937c0dc RBX: 0000000000000004 RCX: ffff8881c937c000 [ 38.551052][ C0] RDX: 0000000000000000 RSI: ffffffff812a31fd RDI: ffffed103b6412fd [ 38.559014][ C0] RBP: ffffea000724df00 R08: 0000000000000000 R09: ffffed103b6443c9 [ 38.567058][ C0] R10: ffff8881db221e43 R11: ffffed103b6443c8 R12: ffff8881c937c0dc [ 38.575021][ C0] R13: dead000000000400 R14: ffff8881c9a52700 R15: ffff8881c9f74000 [ 38.582970][ C0] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 38.591893][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.598455][ C0] CR2: 0000000000000000 CR3: 00000001c2ff5000 CR4: 00000000001406f0 [ 38.606688][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 38.614997][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 38.624099][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 38.631936][ C0] Kernel Offset: disabled [ 38.636260][ C0] Rebooting in 86400 seconds..