usb 1-1: ath: unknown panic pattern! ================================================================== BUG: KASAN: use-after-free in instrument_atomic_read include/linux/instrumented.h:71 [inline] BUG: KASAN: use-after-free in atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] BUG: KASAN: use-after-free in refcount_read include/linux/refcount.h:147 [inline] BUG: KASAN: use-after-free in skb_unref include/linux/skbuff.h:1359 [inline] BUG: KASAN: use-after-free in kfree_skb_reason+0x2a/0xf0 net/core/skbuff.c:772 Read of size 4 at addr ffff8880214ffea4 by task swapper/1/0 CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.19.0-rc4-syzkaller-00187-g089866061428 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 Call Trace: __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x1e3/0x2cb lib/dump_stack.c:106 print_address_description+0x65/0x4b0 mm/kasan/report.c:313 print_report+0xf4/0x210 mm/kasan/report.c:429 kasan_report+0xfb/0x130 mm/kasan/report.c:491 kasan_check_range+0x2a7/0x2e0 mm/kasan/generic.c:189 instrument_atomic_read include/linux/instrumented.h:71 [inline] atomic_read include/linux/atomic/atomic-instrumented.h:27 [inline] refcount_read include/linux/refcount.h:147 [inline] skb_unref include/linux/skbuff.h:1359 [inline] kfree_skb_reason+0x2a/0xf0 net/core/skbuff.c:772 kfree_skb include/linux/skbuff.h:1375 [inline] ath9k_hif_usb_reg_in_cb+0x48f/0x630 drivers/net/wireless/ath/ath9k/hif_usb.c:770 __usb_hcd_giveback_urb+0x369/0x530 drivers/usb/core/hcd.c:1670 dummy_timer+0x86b/0x3110 drivers/usb/gadget/udc/dummy_hcd.c:1988