Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 21.826511][ C1] random: crng init done [ 21.830795][ C1] random: 7 urandom warning(s) missed due to ratelimiting [ 24.579370][ T350] can: request_module (can-proto-0) failed. [ 24.865179][ T350] can: request_module (can-proto-0) failed. [ 24.875148][ T350] can: request_module (can-proto-7) failed. [ 24.885348][ T350] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.11' (ECDSA) to the list of known hosts. 2020/03/31 03:04:07 parsed 1 programs 2020/03/31 03:04:07 executed programs: 0 [ 32.372752][ T521] cgroup: Unknown subsys name 'perf_event' [ 32.382019][ T520] cgroup: Unknown subsys name 'perf_event' [ 32.383134][ T521] cgroup: Unknown subsys name 'net_cls' [ 32.391217][ T524] cgroup: Unknown subsys name 'perf_event' [ 32.396664][ T525] cgroup: Unknown subsys name 'perf_event' [ 32.404369][ T520] cgroup: Unknown subsys name 'net_cls' [ 32.411951][ T525] cgroup: Unknown subsys name 'net_cls' [ 32.413152][ T527] cgroup: Unknown subsys name 'perf_event' [ 32.419409][ T528] cgroup: Unknown subsys name 'perf_event' [ 32.423876][ T524] cgroup: Unknown subsys name 'net_cls' [ 32.433967][ T528] cgroup: Unknown subsys name 'net_cls' [ 32.446714][ T527] cgroup: Unknown subsys name 'net_cls' [ 40.586278][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.626112][ T12] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 40.633849][ T168] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.746033][ T95] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 40.826133][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 40.855976][ T3181] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 40.966186][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 40.975526][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.983705][ T5] usb 1-1: Product: syz [ 40.988207][ T5] usb 1-1: Manufacturer: syz [ 40.992929][ T5] usb 1-1: SerialNumber: syz [ 41.036163][ T12] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.045273][ T12] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.053906][ T12] usb 4-1: Product: syz [ 41.058175][ T12] usb 4-1: Manufacturer: syz [ 41.063103][ T12] usb 4-1: SerialNumber: syz [ 41.067891][ T168] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.077102][ T168] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.085088][ T168] usb 2-1: Product: syz [ 41.090452][ T168] usb 2-1: Manufacturer: syz [ 41.095046][ T168] usb 2-1: SerialNumber: syz [ 41.101056][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.136553][ T95] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.145759][ T95] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.154201][ T95] usb 6-1: Product: syz [ 41.156894][ T12] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.158467][ T95] usb 6-1: Manufacturer: syz [ 41.168218][ T168] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.171933][ T95] usb 6-1: SerialNumber: syz [ 41.226755][ T95] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.246298][ T21] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.255597][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.265140][ T21] usb 3-1: Product: syz [ 41.270213][ T21] usb 3-1: Manufacturer: syz [ 41.274987][ T21] usb 3-1: SerialNumber: syz [ 41.296409][ T3181] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 41.305495][ T3181] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.314305][ T3181] usb 5-1: Product: syz [ 41.319682][ T3181] usb 5-1: Manufacturer: syz [ 41.324860][ T3181] usb 5-1: SerialNumber: syz [ 41.326687][ T21] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.376499][ T3181] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 41.755987][ T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.776036][ T168] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.785629][ T12] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.826003][ T95] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.935860][ T21] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.965992][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 41.972395][ T3181] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 41.995834][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 42.002238][ C0] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 42.035887][ C1] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 42.155775][ C1] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 42.169558][ T3233] usb 1-1: USB disconnect, device number 2 [ 42.175824][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 42.196634][ T3237] usb 2-1: USB disconnect, device number 2 [ 42.209881][ T3245] usb 4-1: USB disconnect, device number 2 [ 42.242839][ T3248] usb 6-1: USB disconnect, device number 2 [ 42.362783][ T3251] usb 3-1: USB disconnect, device number 2 [ 42.381745][ T3246] usb 5-1: USB disconnect, device number 2 [ 42.825611][ T168] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 42.832701][ T12] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 42.839682][ T5] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 42.846711][ T5] ath9k_htc: Failed to initialize the device [ 42.853164][ T3233] usb 1-1: ath9k_htc: USB layer deinitialized [ 42.853231][ T168] ath9k_htc: Failed to initialize the device [ 42.865684][ T12] ath9k_htc: Failed to initialize the device [ 42.872338][ T3237] usb 2-1: ath9k_htc: USB layer deinitialized [ 42.881293][ T3245] usb 4-1: ath9k_htc: USB layer deinitialized [ 42.905633][ T95] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 42.912651][ T95] ath9k_htc: Failed to initialize the device [ 42.919897][ T3248] usb 6-1: ath9k_htc: USB layer deinitialized [ 42.985567][ T3181] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 42.985571][ T21] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 42.985668][ T21] ath9k_htc: Failed to initialize the device [ 42.992663][ T3181] ath9k_htc: Failed to initialize the device [ 43.001391][ T3251] usb 3-1: ath9k_htc: USB layer deinitialized [ 43.006194][ T3246] usb 5-1: ath9k_htc: USB layer deinitialized 2020/03/31 03:04:18 executed programs: 6 [ 43.225553][ T3237] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.236194][ T3233] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 43.255572][ T3245] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.295571][ T3248] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 43.345896][ T3233] usb 1-1: device descriptor read/8, error -71 [ 43.365581][ T3251] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 43.385696][ T3245] usb 4-1: device descriptor read/8, error -71 [ 43.405658][ T3237] usb 2-1: device descriptor read/all, error -71 [ 43.416206][ T3246] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.536197][ T3248] usb 6-1: unable to read config index 0 descriptor/all [ 43.543503][ T3248] usb 6-1: can't read configurations, error -71 [ 43.565532][ T3233] usb 1-1: device descriptor read/8, error -71 [ 43.595649][ T3245] usb 4-1: device descriptor read/8, error -71 [ 43.601986][ T3251] usb 3-1: unable to read config index 0 descriptor/all [ 43.609035][ T3251] usb 3-1: can't read configurations, error -71 [ 43.645496][ T3246] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 43.653616][ T3246] usb 5-1: can't read configurations, error -71 [ 43.785398][ T3237] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 43.915425][ T3248] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.995701][ T3251] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 44.025359][ T3246] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.075423][ T3233] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 44.095463][ T3245] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.155493][ T3237] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.164608][ T3237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.172771][ T3237] usb 2-1: Product: syz [ 44.177101][ T3237] usb 2-1: Manufacturer: syz [ 44.181691][ T3237] usb 2-1: SerialNumber: syz [ 44.236383][ T3237] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.305544][ T3248] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.314874][ T3248] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.323006][ T3248] usb 6-1: Product: syz [ 44.327430][ T3248] usb 6-1: Manufacturer: syz [ 44.332034][ T3248] usb 6-1: SerialNumber: syz [ 44.376265][ T3248] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.386509][ T3251] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.396931][ T3251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.405011][ T3251] usb 3-1: Product: syz [ 44.409241][ T3251] usb 3-1: Manufacturer: syz [ 44.413838][ T3251] usb 3-1: SerialNumber: syz [ 44.445473][ T3246] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.454582][ T3246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.455753][ T3233] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.462882][ T3246] usb 5-1: Product: syz [ 44.471876][ T3233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.476040][ T3246] usb 5-1: Manufacturer: syz [ 44.484000][ T3233] usb 1-1: Product: syz [ 44.488630][ T3246] usb 5-1: SerialNumber: syz [ 44.492773][ T3233] usb 1-1: Manufacturer: syz [ 44.502035][ T3233] usb 1-1: SerialNumber: syz [ 44.507292][ T3251] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.535471][ T3245] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 44.544568][ T3245] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.552654][ T3245] usb 4-1: Product: syz [ 44.556442][ T3246] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.556946][ T3245] usb 4-1: Manufacturer: syz [ 44.569635][ T3245] usb 4-1: SerialNumber: syz [ 44.576113][ T3233] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.636036][ T3245] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 44.895399][ T3237] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.055367][ T3248] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.095340][ T3251] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.105277][ C0] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.155348][ T3233] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.175348][ T3246] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.205218][ T3245] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 45.275290][ C1] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.312285][ T21] usb 2-1: USB disconnect, device number 4 [ 45.318431][ C1] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.375255][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.395219][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.425192][ C1] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 45.476019][ T95] usb 6-1: USB disconnect, device number 4 [ 45.519363][ T3253] usb 3-1: USB disconnect, device number 4 [ 45.576063][ T3298] usb 1-1: USB disconnect, device number 4 [ 45.597403][ T168] usb 5-1: USB disconnect, device number 4 [ 45.626111][ T3301] usb 4-1: USB disconnect, device number 4 [ 45.945086][ T3237] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 45.952055][ T3237] ath9k_htc: Failed to initialize the device [ 45.959132][ T21] usb 2-1: ath9k_htc: USB layer deinitialized [ 46.115537][ T3248] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 46.122470][ T3248] ath9k_htc: Failed to initialize the device [ 46.129803][ T95] usb 6-1: ath9k_htc: USB layer deinitialized [ 46.185193][ T3233] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 46.192193][ T3233] ath9k_htc: Failed to initialize the device [ 46.199033][ T3251] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 46.206678][ T3251] ath9k_htc: Failed to initialize the device [ 46.212946][ T3253] usb 3-1: ath9k_htc: USB layer deinitialized [ 46.220778][ T3298] usb 1-1: ath9k_htc: USB layer deinitialized [ 46.265027][ T3246] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 46.265169][ T3245] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 46.272326][ T3246] ath9k_htc: Failed to initialize the device [ 46.281003][ T3245] ath9k_htc: Failed to initialize the device [ 46.286059][ T168] usb 5-1: ath9k_htc: USB layer deinitialized [ 46.293489][ T3301] usb 4-1: ath9k_htc: USB layer deinitialized [ 46.355034][ T21] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 46.535015][ T95] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 46.585067][ T3298] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 46.592706][ T3253] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 46.655017][ T168] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 46.675100][ T3301] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 46.844925][ T21] usb 2-1: device not accepting address 5, error -71 [ 47.014892][ T95] usb 6-1: device not accepting address 5, error -71 [ 47.084877][ T3253] usb 3-1: device not accepting address 5, error -71 [ 47.091792][ T3298] usb 1-1: device not accepting address 5, error -71 [ 47.134932][ T168] usb 5-1: device not accepting address 5, error -71 [ 47.164877][ T3301] usb 4-1: device not accepting address 5, error -71 [ 47.214885][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 47.385037][ T95] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 47.475005][ T3298] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 47.482596][ T3253] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 47.504855][ T168] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 47.534931][ T3301] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 47.594998][ T21] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.604207][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.612388][ T21] usb 2-1: Product: syz [ 47.616660][ T21] usb 2-1: Manufacturer: syz [ 47.621281][ T21] usb 2-1: SerialNumber: syz [ 47.666034][ T21] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.785182][ T95] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.794310][ T95] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.802458][ T95] usb 6-1: Product: syz [ 47.806887][ T95] usb 6-1: Manufacturer: syz [ 47.811474][ T95] usb 6-1: SerialNumber: syz [ 47.856118][ T95] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.866011][ T3298] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.875162][ T3298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.883146][ T3298] usb 1-1: Product: syz [ 47.887366][ T3298] usb 1-1: Manufacturer: syz [ 47.891952][ T3298] usb 1-1: SerialNumber: syz [ 47.894939][ T168] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.896788][ T3253] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.905609][ T168] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.914615][ T3253] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.922612][ T168] usb 5-1: Product: syz [ 47.922623][ T168] usb 5-1: Manufacturer: syz [ 47.922634][ T168] usb 5-1: SerialNumber: syz [ 47.944214][ T3253] usb 3-1: Product: syz [ 47.948464][ T3253] usb 3-1: Manufacturer: syz [ 47.953067][ T3253] usb 3-1: SerialNumber: syz [ 47.957901][ T3301] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.965550][ T168] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.967176][ T3301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.983903][ T3301] usb 4-1: Product: syz [ 47.988260][ T3301] usb 4-1: Manufacturer: syz [ 47.992865][ T3301] usb 4-1: SerialNumber: syz [ 48.035679][ T3301] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.045424][ T3298] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.055994][ T3253] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 48.324922][ T21] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.544895][ C1] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.554832][ T168] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.564853][ T95] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.644851][ T3298] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.653990][ T3301] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.663050][ T3253] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 48.745601][ T3251] usb 2-1: USB disconnect, device number 6 [ 48.774725][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.784745][ C1] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.854695][ C1] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.864751][ C1] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.870714][ C1] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 48.975496][ T3246] usb 5-1: USB disconnect, device number 6 [ 48.991637][ T3245] usb 6-1: USB disconnect, device number 6 [ 49.061559][ T3237] usb 4-1: USB disconnect, device number 6 [ 49.071907][ T5] usb 3-1: USB disconnect, device number 6 [ 49.081076][ T3181] usb 1-1: USB disconnect, device number 6 [ 49.384622][ T21] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 49.391792][ T21] ath9k_htc: Failed to initialize the device [ 49.398061][ T3251] usb 2-1: ath9k_htc: USB layer deinitialized [ 49.624646][ T95] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 49.624675][ T168] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 49.632023][ T95] ath9k_htc: Failed to initialize the device [ 49.640201][ T168] ath9k_htc: Failed to initialize the device [ 49.645539][ T3245] usb 6-1: ath9k_htc: USB layer deinitialized [ 49.653080][ T3246] usb 5-1: ath9k_htc: USB layer deinitialized 2020/03/31 03:04:24 executed programs: 18 [ 49.714576][ T3253] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 49.721825][ T3298] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 49.728904][ T3301] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 49.736108][ T3301] ath9k_htc: Failed to initialize the device [ 49.742375][ T3181] usb 1-1: ath9k_htc: USB layer deinitialized [ 49.742418][ T3298] ath9k_htc: Failed to initialize the device [ 49.764627][ T3253] ath9k_htc: Failed to initialize the device [ 49.771080][ T3237] usb 4-1: ath9k_htc: USB layer deinitialized [ 49.777544][ T5] usb 3-1: ath9k_htc: USB layer deinitialized [ 49.804601][ T3251] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 50.014556][ T3246] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 50.044540][ T3245] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 50.114587][ T3181] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 50.284526][ T3251] usb 2-1: device not accepting address 7, error -71 [ 50.364512][ T3237] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 50.444462][ T5] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 50.494584][ T3246] usb 5-1: device not accepting address 7, error -71 [ 50.524452][ T3245] usb 6-1: device not accepting address 7, error -71 [ 50.604586][ T3181] usb 1-1: device not accepting address 7, error -71 [ 50.654498][ T3251] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 50.764597][ T3237] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.773902][ T3237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.782111][ T3237] usb 4-1: Product: syz [ 50.786340][ T3237] usb 4-1: Manufacturer: syz [ 50.791058][ T3237] usb 4-1: SerialNumber: syz [ 50.835533][ T3237] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.874547][ T5] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 50.884019][ T5] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.892287][ T5] usb 3-1: Product: syz [ 50.896521][ T5] usb 3-1: Manufacturer: syz [ 50.901278][ T5] usb 3-1: SerialNumber: syz [ 50.904482][ T3245] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 50.905956][ T3246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 50.955460][ T5] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 50.984558][ T3181] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.054585][ T3251] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.063711][ T3251] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.071944][ T3251] usb 2-1: Product: syz [ 51.076358][ T3251] usb 2-1: Manufacturer: syz [ 51.081016][ T3251] usb 2-1: SerialNumber: syz [ 51.125344][ T3251] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.284608][ T3246] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.293787][ T3246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.294565][ T3245] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.301912][ T3246] usb 5-1: Product: syz [ 51.310839][ T3245] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.315011][ T3246] usb 5-1: Manufacturer: syz [ 51.322954][ T3245] usb 6-1: Product: syz [ 51.327553][ T3246] usb 5-1: SerialNumber: syz [ 51.336334][ T3245] usb 6-1: Manufacturer: syz [ 51.340933][ T3245] usb 6-1: SerialNumber: syz [ 51.375001][ T3246] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.386735][ T3245] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.394618][ T3181] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 51.404030][ T3181] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.412189][ T3181] usb 1-1: Product: syz [ 51.416456][ T3181] usb 1-1: Manufacturer: syz [ 51.421045][ T3181] usb 1-1: SerialNumber: syz [ 51.464979][ T3181] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 51.474535][ T3237] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.584566][ T5] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.694423][ C0] usb 4-1: ath9k_htc: over RX MAX_PKT_NUM [ 51.794480][ T3251] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 51.804415][ C0] usb 3-1: ath9k_htc: over RX MAX_PKT_NUM [ 51.901298][ T3301] usb 4-1: USB disconnect, device number 7 [ 51.944444][ T3246] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.005215][ T95] usb 3-1: USB disconnect, device number 7 [ 52.014396][ C1] usb 2-1: ath9k_htc: over RX MAX_PKT_NUM [ 52.021187][ T3245] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.064371][ T3181] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.154365][ C0] usb 5-1: ath9k_htc: over RX MAX_PKT_NUM [ 52.215086][ T21] usb 2-1: USB disconnect, device number 8 [ 52.224339][ C1] usb 6-1: ath9k_htc: over RX MAX_PKT_NUM [ 52.274339][ C0] usb 1-1: ath9k_htc: over RX MAX_PKT_NUM [ 52.355022][ T3298] usb 5-1: USB disconnect, device number 8 [ 52.428439][ T3253] usb 6-1: USB disconnect, device number 8 [ 52.481183][ T3233] usb 1-1: USB disconnect, device number 8 [ 52.664219][ T5] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 52.671257][ T5] ath9k_htc: Failed to initialize the device [ 52.677631][ T95] usb 3-1: ath9k_htc: USB layer deinitialized [ 52.744247][ T3237] usb 4-1: Service connection timeout for: 256 [ 52.750653][ T3237] ================================================================== [ 52.758811][ T3237] BUG: KASAN: use-after-free in kfree_skb+0x32/0x3d0 [ 52.765470][ T3237] Read of size 4 at addr ffff8881c7ec2d54 by task kworker/0:5/3237 [ 52.773337][ T3237] [ 52.775654][ T3237] CPU: 0 PID: 3237 Comm: kworker/0:5 Not tainted 5.6.0-rc7-syzkaller #0 [ 52.783951][ T3237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.794082][ T3237] Workqueue: events request_firmware_work_func [ 52.800222][ T3237] Call Trace: [ 52.803501][ T3237] dump_stack+0xef/0x16e [ 52.807796][ T3237] ? kfree_skb+0x32/0x3d0 [ 52.812166][ T3237] ? kfree_skb+0x32/0x3d0 [ 52.816635][ T3237] print_address_description.constprop.0.cold+0xd3/0x314 [ 52.823665][ T3237] ? kfree_skb+0x32/0x3d0 [ 52.827996][ T3237] ? kfree_skb+0x32/0x3d0 [ 52.832396][ T3237] __kasan_report.cold+0x37/0x77 [ 52.837499][ T3237] ? kfree_skb+0x32/0x3d0 [ 52.841998][ T3237] kasan_report+0xe/0x20 [ 52.846238][ T3237] check_memory_region+0x152/0x1c0 [ 52.851436][ T3237] kfree_skb+0x32/0x3d0 [ 52.855602][ T3237] htc_connect_service.cold+0xa9/0x109 [ 52.861180][ T3237] ath9k_wmi_connect+0xd2/0x1a0 [ 52.866040][ T3237] ? ath9k_fatal_work+0x20/0x20 [ 52.870959][ T3237] ? ath9k_hif_usb_firmware_cb.cold+0xdb/0xdb [ 52.877008][ T3237] ? ath9k_wmi_event_tasklet+0x440/0x440 [ 52.882625][ T3237] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 52.889024][ T3237] ? ath9k_reg_rmw_flush+0x2d0/0x2d0 [ 52.894296][ T3237] ? lockdep_init_map+0x1b0/0x5e0 [ 52.899364][ T3237] ? lockdep_init_map+0x1b0/0x5e0 [ 52.906382][ T3237] ? tasklet_init+0x69/0x110 [ 52.910963][ T3237] ath9k_htc_probe_device+0x25a/0x1d80 [ 52.916424][ T3237] ? ath9k_init_htc_services.constprop.0+0x650/0x650 [ 52.923100][ T3237] ? usb_submit_urb+0x6ed/0x1460 [ 52.928040][ T3237] ? usb_free_urb.part.0+0x52/0x110 [ 52.933248][ T3237] ? usb_free_urb+0x1b/0x30 [ 52.937760][ T3237] ath9k_htc_hw_init+0x31/0x60 [ 52.942536][ T3237] ath9k_hif_usb_firmware_cb+0x26b/0x500 [ 52.948205][ T3237] ? ath9k_hif_usb_resume+0x320/0x320 [ 52.953570][ T3237] request_firmware_work_func+0x126/0x242 [ 52.959294][ T3237] ? request_firmware_into_buf+0x90/0x90 [ 52.964912][ T3237] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 52.970444][ T3237] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 52.975719][ T3237] process_one_work+0x94b/0x1620 [ 52.980656][ T3237] ? pwq_dec_nr_in_flight+0x310/0x310 [ 52.986211][ T3237] ? do_raw_spin_lock+0x129/0x290 [ 52.991247][ T3237] worker_thread+0x96/0xe20 [ 52.995762][ T3237] ? process_one_work+0x1620/0x1620 [ 53.000958][ T3237] kthread+0x318/0x420 [ 53.005186][ T3237] ? kthread_create_on_node+0xf0/0xf0 [ 53.010545][ T3237] ret_from_fork+0x24/0x30 [ 53.015077][ T3237] [ 53.017518][ T3237] Allocated by task 3237: [ 53.021853][ T3237] save_stack+0x1b/0x80 [ 53.026003][ T3237] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 53.031635][ T3237] kmem_cache_alloc_node+0xdc/0x330 [ 53.036848][ T3237] __alloc_skb+0xba/0x5a0 [ 53.041170][ T3237] htc_connect_service+0x2cc/0x840 [ 53.046262][ T3237] ath9k_wmi_connect+0xd2/0x1a0 [ 53.051097][ T3237] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 53.057517][ T3237] ath9k_htc_probe_device+0x25a/0x1d80 [ 53.063156][ T3237] ath9k_htc_hw_init+0x31/0x60 [ 53.067931][ T3237] ath9k_hif_usb_firmware_cb+0x26b/0x500 [ 53.073574][ T3237] request_firmware_work_func+0x126/0x242 [ 53.079305][ T3237] process_one_work+0x94b/0x1620 [ 53.084256][ T3237] worker_thread+0x96/0xe20 [ 53.088764][ T3237] kthread+0x318/0x420 [ 53.092842][ T3237] ret_from_fork+0x24/0x30 [ 53.097253][ T3237] [ 53.099589][ T3237] Freed by task 0: [ 53.103318][ T3237] save_stack+0x1b/0x80 [ 53.107500][ T3237] __kasan_slab_free+0x117/0x160 [ 53.112451][ T3237] kmem_cache_free+0x9b/0x360 [ 53.117141][ T3237] kfree_skbmem+0xef/0x1b0 [ 53.121568][ T3237] kfree_skb+0x102/0x3d0 [ 53.125826][ T3237] ath9k_htc_txcompletion_cb+0x1f8/0x2b0 [ 53.131998][ T3237] hif_usb_regout_cb+0x10b/0x1b0 [ 53.136953][ T3237] __usb_hcd_giveback_urb+0x1f2/0x470 [ 53.142332][ T3237] usb_hcd_giveback_urb+0x368/0x420 [ 53.147535][ T3237] dummy_timer+0x1258/0x32ae [ 53.152135][ T3237] call_timer_fn+0x195/0x6f0 [ 53.156731][ T3237] run_timer_softirq+0x5f9/0x1500 [ 53.161776][ T3237] __do_softirq+0x21e/0x950 [ 53.166276][ T3237] [ 53.168593][ T3237] The buggy address belongs to the object at ffff8881c7ec2c80 [ 53.168593][ T3237] which belongs to the cache skbuff_head_cache of size 224 [ 53.183217][ T3237] The buggy address is located 212 bytes inside of [ 53.183217][ T3237] 224-byte region [ffff8881c7ec2c80, ffff8881c7ec2d60) [ 53.196590][ T3237] The buggy address belongs to the page: [ 53.202324][ T3237] page:ffffea00071fb080 refcount:1 mapcount:0 mapping:ffff8881da16b400 index:0x0 [ 53.211428][ T3237] flags: 0x200000000000200(slab) [ 53.216366][ T3237] raw: 0200000000000200 dead000000000100 dead000000000122 ffff8881da16b400 [ 53.224949][ T3237] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 53.233525][ T3237] page dumped because: kasan: bad access detected [ 53.239929][ T3237] [ 53.242249][ T3237] Memory state around the buggy address: [ 53.247873][ T3237] ffff8881c7ec2c00: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 53.255913][ T3237] ffff8881c7ec2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.263963][ T3237] >ffff8881c7ec2d00: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 53.272037][ T3237] ^ [ 53.278718][ T3237] ffff8881c7ec2d80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 53.287030][ T3237] ffff8881c7ec2e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 53.295082][ T3237] ================================================================== [ 53.303126][ T3237] Disabling lock debugging due to kernel taint [ 53.309442][ T3237] Kernel panic - not syncing: panic_on_warn set ... [ 53.314281][ T3251] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 53.316032][ T3237] CPU: 0 PID: 3237 Comm: kworker/0:5 Tainted: G B 5.6.0-rc7-syzkaller #0 [ 53.322942][ T3251] ath9k_htc: Failed to initialize the device [ 53.332574][ T3237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 53.332592][ T3237] Workqueue: events request_firmware_work_func [ 53.332597][ T3237] Call Trace: [ 53.332617][ T3237] dump_stack+0xef/0x16e [ 53.332627][ T3237] panic+0x2aa/0x6e1 [ 53.332635][ T3237] ? add_taint.cold+0x16/0x16 [ 53.332652][ T3237] ? kfree_skb+0x32/0x3d0 [ 53.338647][ T3245] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 53.348675][ T3237] ? trace_hardirqs_on+0x55/0x200 [ 53.348687][ T3237] ? kfree_skb+0x32/0x3d0 [ 53.348697][ T3237] end_report+0x43/0x49 [ 53.348714][ T3237] ? kfree_skb+0x32/0x3d0 [ 53.402633][ T3237] __kasan_report.cold+0x55/0x77 [ 53.404977][ T3245] ath9k_htc: Failed to initialize the device [ 53.407670][ T3237] ? kfree_skb+0x32/0x3d0 [ 53.407684][ T3237] kasan_report+0xe/0x20 [ 53.407696][ T3237] check_memory_region+0x152/0x1c0 [ 53.407713][ T3237] kfree_skb+0x32/0x3d0 [ 53.431486][ T3237] htc_connect_service.cold+0xa9/0x109 [ 53.434294][ T3253] usb 6-1: ath9k_htc: USB layer deinitialized [ 53.436948][ T3237] ath9k_wmi_connect+0xd2/0x1a0 [ 53.436959][ T3237] ? ath9k_fatal_work+0x20/0x20 [ 53.436975][ T3237] ? ath9k_hif_usb_firmware_cb.cold+0xdb/0xdb [ 53.458814][ T3237] ? ath9k_wmi_event_tasklet+0x440/0x440 [ 53.462430][ T21] usb 2-1: ath9k_htc: USB layer deinitialized [ 53.464457][ T3237] ath9k_init_htc_services.constprop.0+0xb4/0x650 [ 53.464470][ T3237] ? ath9k_reg_rmw_flush+0x2d0/0x2d0 [ 53.464480][ T3237] ? lockdep_init_map+0x1b0/0x5e0 [ 53.464489][ T3237] ? lockdep_init_map+0x1b0/0x5e0 [ 53.464507][ T3237] ? tasklet_init+0x69/0x110 [ 53.496843][ T3237] ath9k_htc_probe_device+0x25a/0x1d80 [ 53.502291][ T3237] ? ath9k_init_htc_services.constprop.0+0x650/0x650 [ 53.508944][ T3237] ? usb_submit_urb+0x6ed/0x1460 [ 53.513859][ T3237] ? usb_free_urb.part.0+0x52/0x110 [ 53.519124][ T3237] ? usb_free_urb+0x1b/0x30 [ 53.523606][ T3237] ath9k_htc_hw_init+0x31/0x60 [ 53.528364][ T3237] ath9k_hif_usb_firmware_cb+0x26b/0x500 [ 53.533974][ T3237] ? ath9k_hif_usb_resume+0x320/0x320 [ 53.539329][ T3237] request_firmware_work_func+0x126/0x242 [ 53.545040][ T3237] ? request_firmware_into_buf+0x90/0x90 [ 53.550657][ T3237] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 53.556183][ T3237] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 53.561459][ T3237] process_one_work+0x94b/0x1620 [ 53.566388][ T3237] ? pwq_dec_nr_in_flight+0x310/0x310 [ 53.571743][ T3237] ? do_raw_spin_lock+0x129/0x290 [ 53.576763][ T3237] worker_thread+0x96/0xe20 [ 53.581248][ T3237] ? process_one_work+0x1620/0x1620 [ 53.586433][ T3237] kthread+0x318/0x420 [ 53.590482][ T3237] ? kthread_create_on_node+0xf0/0xf0 [ 53.595832][ T3237] ret_from_fork+0x24/0x30 [ 53.600930][ T3237] Kernel Offset: disabled [ 53.605264][ T3237] Rebooting in 86400 seconds..