[ 12.736654][ C1] random: crng init done
[ 12.736685][ C1] random: 7 urandom warning(s) missed due to ratelimiting
Debian GNU/Linux 9 syzkaller ttyS0
syzkaller login: [ 24.069532][ T359] can: request_module (can-proto-0) failed.
[ 24.462940][ T359] can: request_module (can-proto-0) failed.
[ 24.472847][ T359] can: request_module (can-proto-7) failed.
[ 24.482625][ T359] can: request_module (can-proto-0) failed.
Warning: Permanently added '10.128.1.10' (ECDSA) to the list of known hosts.
2020/04/04 00:13:31 parsed 1 programs
2020/04/04 00:13:31 executed programs: 0
[ 32.060307][ T530] cgroup: Unknown subsys name 'perf_event'
[ 32.062074][ T529] cgroup: Unknown subsys name 'perf_event'
[ 32.073245][ T533] cgroup: Unknown subsys name 'perf_event'
[ 32.074172][ T536] cgroup: Unknown subsys name 'perf_event'
[ 32.085960][ T530] cgroup: Unknown subsys name 'net_cls'
[ 32.086053][ T534] cgroup: Unknown subsys name 'perf_event'
[ 32.094850][ T537] cgroup: Unknown subsys name 'perf_event'
[ 32.098759][ T533] cgroup: Unknown subsys name 'net_cls'
[ 32.103287][ T537] cgroup: Unknown subsys name 'net_cls'
[ 32.110245][ T529] cgroup: Unknown subsys name 'net_cls'
[ 32.121343][ T534] cgroup: Unknown subsys name 'net_cls'
[ 32.129421][ T536] cgroup: Unknown subsys name 'net_cls'
[ 40.030875][ T173] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 40.190692][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 40.240789][ T173] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.251519][ T173] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.264557][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 40.360680][ T3186] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 40.410728][ T5] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.421099][ T3248] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 40.428951][ T5] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.443304][ T173] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.452527][ T173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.460731][ T173] usb 3-1: Product: syz
[ 40.464903][ T173] usb 3-1: Manufacturer: syz
[ 40.469488][ T173] usb 3-1: SerialNumber: syz
[ 40.490738][ T3225] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 40.510815][ T12] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.522416][ T173] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 40.532306][ T12] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.600966][ T3186] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.611341][ T3186] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.640961][ T5] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.650082][ T5] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.658144][ T5] usb 5-1: Product: syz
[ 40.663382][ T5] usb 5-1: Manufacturer: syz
[ 40.668108][ T5] usb 5-1: SerialNumber: syz
[ 40.672806][ T3248] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.683381][ T3248] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.720724][ T12] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.729935][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.738122][ T12] usb 1-1: Product: syz
[ 40.742774][ T12] usb 1-1: Manufacturer: syz
[ 40.747391][ T12] usb 1-1: SerialNumber: syz
[ 40.752256][ T3225] usb 6-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[ 40.763050][ T5] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 40.775975][ T3225] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6
[ 40.830799][ T3186] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.839916][ T3186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.848194][ T3186] usb 2-1: Product: syz
[ 40.852512][ T3186] usb 2-1: Manufacturer: syz
[ 40.857259][ T3186] usb 2-1: SerialNumber: syz
[ 40.862992][ T12] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 40.900738][ T3248] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.910083][ T3248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.918270][ T3248] usb 4-1: Product: syz
[ 40.922700][ T3248] usb 4-1: Manufacturer: syz
[ 40.927286][ T3248] usb 4-1: SerialNumber: syz
[ 40.932680][ T3186] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 40.941154][ T3225] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 40.950192][ T3225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.958288][ T3225] usb 6-1: Product: syz
[ 40.962757][ T3225] usb 6-1: Manufacturer: syz
[ 40.967443][ T3225] usb 6-1: SerialNumber: syz
[ 41.011305][ T3248] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 41.021475][ T3225] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 41.210555][ T173] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.380633][ T5] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.430841][ T173] haley: wmi 0xffff8881d33c8000, ath9k_htc_probe_device, 959
[ 41.438479][ T173] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 41.446446][ T173] haley: ath9k_deinit_wmi, 118
[ 41.452119][ T173] ath9k_htc: Failed to initialize the device
[ 41.460470][ T12] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.550545][ T3186] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.590627][ T5] haley: wmi 0xffff8881d427b000, ath9k_htc_probe_device, 959
[ 41.598265][ T5] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 41.606253][ T5] haley: ath9k_deinit_wmi, 118
[ 41.611376][ T3225] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.620547][ T3248] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 41.630468][ C0] ==================================================================
[ 41.638812][ C0] BUG: KASAN: use-after-free in ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.646258][ C0] Read of size 1 at addr ffff8881d33c817c by task kworker/0:7/3248
[ 41.654155][ C0]
[ 41.656496][ C0] CPU: 0 PID: 3248 Comm: kworker/0:7 Not tainted 5.6.0-rc7-syzkaller #0
[ 41.665073][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 41.675159][ C0] Workqueue: events request_firmware_work_func
[ 41.681295][ C0] Call Trace:
[ 41.684596][ C0]
[ 41.687634][ C0] dump_stack+0xef/0x16e
[ 41.692354][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.697593][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.702714][ C0] print_address_description.constprop.0.cold+0xd3/0x314
[ 41.709746][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.714852][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.720043][ C0] __kasan_report.cold+0x37/0x77
[ 41.725052][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.730158][ C0] ? ath9k_wmi_event_tasklet+0x440/0x440
[ 41.735778][ C0] kasan_report+0xe/0x20
[ 41.740008][ C0] ath9k_wmi_ctrl_rx+0x416/0x500
[ 41.745032][ C0] ? ath9k_wmi_event_tasklet+0x440/0x440
[ 41.750654][ C0] ath9k_htc_rx_msg+0x2d9/0xb00
[ 41.755519][ C0] ath9k_hif_usb_reg_in_cb+0x1a6/0x620
[ 41.761649][ C0] ? _raw_read_unlock+0x1a/0x30
[ 41.766495][ C0] ? led_trigger_blink_oneshot+0xb4/0xe0
[ 41.772125][ C0] __usb_hcd_giveback_urb+0x1f2/0x470
[ 41.777611][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 41.782810][ C0] dummy_timer+0x1258/0x32ae
[ 41.787559][ C0] ? dummy_udc_probe+0x930/0x930
[ 41.792488][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 41.798021][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 41.803324][ C0] call_timer_fn+0x195/0x6f0
[ 41.807912][ C0] ? dummy_udc_probe+0x930/0x930
[ 41.812833][ C0] ? msleep_interruptible+0x130/0x130
[ 41.818185][ C0] ? mark_held_locks+0x9f/0xe0
[ 41.822946][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 41.828235][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 41.833438][ C0] ? dummy_udc_probe+0x930/0x930
[ 41.834407][ T17] usb 3-1: USB disconnect, device number 2
[ 41.838370][ C0] run_timer_softirq+0x5f9/0x1500
[ 41.838388][ C0] ? add_timer+0x7a0/0x7a0
[ 41.853599][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 41.859163][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 41.864452][ C0] ? mark_held_locks+0x9f/0xe0
[ 41.869218][ C0] __do_softirq+0x21e/0x950
[ 41.873725][ C0] irq_exit+0x178/0x1a0
[ 41.878209][ C0] smp_apic_timer_interrupt+0x141/0x540
[ 41.883742][ C0] apic_timer_interrupt+0xf/0x20
[ 41.888656][ C0]
[ 41.891695][ C0] RIP: 0010:unwind_next_frame+0x20c/0x19e0
[ 41.897495][ C0] Code: 53 ff 39 d0 0f 83 91 04 00 00 48 ba 00 00 00 00 00 fc ff df 89 c6 48 8d 3c b5 78 76 89 88 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 32 45 84 c0 74 2d 48 89 74
[ 41.917096][ C0] RSP: 0018:ffff8881cc6a7738 EFLAGS: 00000a07 ORIG_RAX: ffffffffffffff13
[ 41.925495][ C0] RAX: 0000000000002f45 RBX: ffff8881cc6a7810 RCX: ffffffff812f451b
[ 41.933463][ C0] RDX: dffffc0000000000 RSI: 0000000000002f45 RDI: ffffffff888a338c
[ 41.941426][ C0] RBP: 1ffff110398d4eef R08: 0000000000000000 R09: 0000000000000001
[ 41.949375][ C0] R10: 000000000000322d R11: 000000000004c01a R12: ffff8881cc6a7845
[ 41.957356][ C0] R13: ffff8881cc6a7860 R14: ffff8881cc6a7858 R15: 0000000000000001
[ 41.971949][ C0] ? stack_trace_save+0x8b/0xc0
[ 41.976789][ C0] ? stack_trace_save+0x8c/0xc0
[ 41.981620][ C0] ? __unwind_start+0x474/0x820
[ 41.986454][ C0] ? deref_stack_reg+0xe0/0xe0
[ 41.992153][ C0] ? unwind_next_frame+0x316/0x19e0
[ 41.997383][ C0] ? ret_from_fork+0x24/0x30
[ 42.001982][ C0] ? profile_setup.cold+0xc1/0xc1
[ 42.007144][ C0] arch_stack_walk+0x74/0xd0
[ 42.011724][ C0] ? stack_trace_save+0x8c/0xc0
[ 42.016570][ C0] stack_trace_save+0x8c/0xc0
[ 42.021289][ C0] ? stack_trace_consume_entry+0x160/0x160
[ 42.027076][ C0] ? ret_from_fork+0x24/0x30
[ 42.031644][ C0] ? stack_trace_save+0x8c/0xc0
[ 42.036489][ C0] ? stack_trace_consume_entry+0x160/0x160
[ 42.042287][ C0] save_stack+0x1b/0x80
[ 42.046444][ C0] ? mark_lock+0xbc/0x1160
[ 42.050841][ C0] ? save_stack+0x1b/0x80
[ 42.055151][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 42.060957][ C0] ? ath9k_hif_usb_alloc_urbs+0xb0f/0x1030
[ 42.066749][ C0] ? __lock_acquire+0x145e/0x3b60
[ 42.071753][ C0] ? find_held_lock+0x2d/0x110
[ 42.076498][ C0] ? fs_reclaim_release+0xa/0x20
[ 42.081416][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 42.086246][ C0] ? fault_create_debugfs_attr+0x140/0x140
[ 42.092048][ C0] ? kasan_unpoison_shadow+0x30/0x40
[ 42.097315][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 42.102929][ C0] ? usb_alloc_urb+0x65/0xb0
[ 42.107505][ C0] __kmalloc+0xfe/0x370
[ 42.111640][ C0] ? kasan_unpoison_shadow+0x30/0x40
[ 42.116909][ C0] usb_alloc_urb+0x65/0xb0
[ 42.121321][ C0] ath9k_hif_usb_alloc_urbs+0xb2c/0x1030
[ 42.126944][ C0] ath9k_hif_usb_firmware_cb+0x142/0x500
[ 42.132565][ C0] ? ath9k_hif_usb_resume+0x320/0x320
[ 42.137938][ C0] request_firmware_work_func+0x126/0x242
[ 42.143669][ C0] ? request_firmware_into_buf+0x90/0x90
[ 42.149300][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 42.154833][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 42.160106][ C0] process_one_work+0x94b/0x1620
[ 42.165026][ C0] ? pwq_dec_nr_in_flight+0x310/0x310
[ 42.170377][ C0] ? do_raw_spin_lock+0x129/0x290
[ 42.175387][ C0] worker_thread+0x96/0xe20
[ 42.179885][ C0] ? process_one_work+0x1620/0x1620
[ 42.185063][ C0] kthread+0x318/0x420
[ 42.189113][ C0] ? kthread_create_on_node+0xf0/0xf0
[ 42.194473][ C0] ret_from_fork+0x24/0x30
[ 42.198873][ C0]
[ 42.201185][ C0] Allocated by task 173:
[ 42.205412][ C0] save_stack+0x1b/0x80
[ 42.209551][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 42.215182][ C0] ath9k_init_wmi+0x40/0x310
[ 42.219755][ C0] ath9k_htc_probe_device+0x21b/0x300
[ 42.225106][ C0] ath9k_htc_hw_init+0x31/0x60
[ 42.229855][ C0] ath9k_hif_usb_firmware_cb+0x26b/0x500
[ 42.235501][ C0] request_firmware_work_func+0x126/0x242
[ 42.241203][ C0] process_one_work+0x94b/0x1620
[ 42.246119][ C0] worker_thread+0x96/0xe20
[ 42.250603][ C0] kthread+0x318/0x420
[ 42.254691][ C0] ret_from_fork+0x24/0x30
[ 42.259107][ C0]
[ 42.261469][ C0] Freed by task 173:
[ 42.265369][ C0] save_stack+0x1b/0x80
[ 42.269844][ C0] __kasan_slab_free+0x117/0x160
[ 42.274769][ C0] kfree+0xd5/0x300
[ 42.278559][ C0] ath9k_htc_probe_device.cold+0x53/0x2103
[ 42.284358][ C0] ath9k_htc_hw_init+0x31/0x60
[ 42.289100][ C0] ath9k_hif_usb_firmware_cb+0x26b/0x500
[ 42.294721][ C0] request_firmware_work_func+0x126/0x242
[ 42.300441][ C0] process_one_work+0x94b/0x1620
[ 42.305365][ C0] worker_thread+0x96/0xe20
[ 42.309850][ C0] kthread+0x318/0x420
[ 42.313922][ C0] ret_from_fork+0x24/0x30
[ 42.318323][ C0]
[ 42.320648][ C0] The buggy address belongs to the object at ffff8881d33c8000
[ 42.320648][ C0] which belongs to the cache kmalloc-2k of size 2048
[ 42.334812][ C0] The buggy address is located 380 bytes inside of
[ 42.334812][ C0] 2048-byte region [ffff8881d33c8000, ffff8881d33c8800)
[ 42.348160][ C0] The buggy address belongs to the page:
[ 42.353781][ C0] page:ffffea00074cf200 refcount:1 mapcount:0 mapping:ffff8881da00c000 index:0x0 compound_mapcount: 0
[ 42.364697][ C0] flags: 0x200000000010200(slab|head)
[ 42.370064][ C0] raw: 0200000000010200 0000000000000000 0000000300000001 ffff8881da00c000
[ 42.378649][ C0] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000
[ 42.387318][ C0] page dumped because: kasan: bad access detected
[ 42.393714][ C0]
[ 42.396039][ C0] Memory state around the buggy address:
[ 42.402188][ C0] ffff8881d33c8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.410247][ C0] ffff8881d33c8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.418305][ C0] >ffff8881d33c8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.426476][ C0] ^
[ 42.434464][ C0] ffff8881d33c8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.442514][ C0] ffff8881d33c8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 42.450564][ C0] ==================================================================
[ 42.458611][ C0] Disabling lock debugging due to kernel taint
[ 42.464750][ C0] Kernel panic - not syncing: panic_on_warn set ...
[ 42.471329][ C0] CPU: 0 PID: 3248 Comm: kworker/0:7 Tainted: G B 5.6.0-rc7-syzkaller #0
[ 42.481050][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 42.491120][ C0] Workqueue: events request_firmware_work_func
[ 42.497253][ C0] Call Trace:
[ 42.500515][ C0]
[ 42.503425][ C0] dump_stack+0xef/0x16e
[ 42.507647][ C0] panic+0x2aa/0x6e1
[ 42.511524][ C0] ? add_taint.cold+0x16/0x16
[ 42.516179][ C0] ? print_shadow_for_address+0xb8/0x114
[ 42.521795][ C0] ? trace_hardirqs_off+0x50/0x200
[ 42.526892][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 42.532094][ C0] end_report+0x43/0x49
[ 42.536230][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 42.541422][ C0] __kasan_report.cold+0x55/0x77
[ 42.546340][ C0] ? ath9k_wmi_ctrl_rx+0x416/0x500
[ 42.551438][ C0] ? ath9k_wmi_event_tasklet+0x440/0x440
[ 42.557166][ C0] kasan_report+0xe/0x20
[ 42.561398][ C0] ath9k_wmi_ctrl_rx+0x416/0x500
[ 42.566320][ C0] ? ath9k_wmi_event_tasklet+0x440/0x440
[ 42.571927][ C0] ath9k_htc_rx_msg+0x2d9/0xb00
[ 42.576767][ C0] ath9k_hif_usb_reg_in_cb+0x1a6/0x620
[ 42.582278][ C0] ? _raw_read_unlock+0x1a/0x30
[ 42.587207][ C0] ? led_trigger_blink_oneshot+0xb4/0xe0
[ 42.592824][ C0] __usb_hcd_giveback_urb+0x1f2/0x470
[ 42.598179][ C0] usb_hcd_giveback_urb+0x368/0x420
[ 42.603382][ C0] dummy_timer+0x1258/0x32ae
[ 42.607965][ C0] ? dummy_udc_probe+0x930/0x930
[ 42.612897][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 42.618424][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 42.623688][ C0] call_timer_fn+0x195/0x6f0
[ 42.628269][ C0] ? dummy_udc_probe+0x930/0x930
[ 42.633188][ C0] ? msleep_interruptible+0x130/0x130
[ 42.638547][ C0] ? mark_held_locks+0x9f/0xe0
[ 42.643297][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 42.648560][ C0] ? _raw_spin_unlock_irq+0x1f/0x30
[ 42.653741][ C0] ? dummy_udc_probe+0x930/0x930
[ 42.658657][ C0] run_timer_softirq+0x5f9/0x1500
[ 42.663675][ C0] ? add_timer+0x7a0/0x7a0
[ 42.668076][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 42.673606][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 42.678866][ C0] ? mark_held_locks+0x9f/0xe0
[ 42.683617][ C0] __do_softirq+0x21e/0x950
[ 42.688109][ C0] irq_exit+0x178/0x1a0
[ 42.692245][ C0] smp_apic_timer_interrupt+0x141/0x540
[ 42.697766][ C0] apic_timer_interrupt+0xf/0x20
[ 42.702675][ C0]
[ 42.705601][ C0] RIP: 0010:unwind_next_frame+0x20c/0x19e0
[ 42.711393][ C0] Code: 53 ff 39 d0 0f 83 91 04 00 00 48 ba 00 00 00 00 00 fc ff df 89 c6 48 8d 3c b5 78 76 89 88 49 89 f8 49 c1 e8 03 45 0f b6 04 10 <48> 89 fa 83 e2 07 83 c2 03 44 38 c2 7c 32 45 84 c0 74 2d 48 89 74
[ 42.730982][ C0] RSP: 0018:ffff8881cc6a7738 EFLAGS: 00000a07 ORIG_RAX: ffffffffffffff13
[ 42.739385][ C0] RAX: 0000000000002f45 RBX: ffff8881cc6a7810 RCX: ffffffff812f451b
[ 42.747424][ C0] RDX: dffffc0000000000 RSI: 0000000000002f45 RDI: ffffffff888a338c
[ 42.755374][ C0] RBP: 1ffff110398d4eef R08: 0000000000000000 R09: 0000000000000001
[ 42.763335][ C0] R10: 000000000000322d R11: 000000000004c01a R12: ffff8881cc6a7845
[ 42.771296][ C0] R13: ffff8881cc6a7860 R14: ffff8881cc6a7858 R15: 0000000000000001
[ 42.779311][ C0] ? stack_trace_save+0x8b/0xc0
[ 42.784169][ C0] ? stack_trace_save+0x8c/0xc0
[ 42.789009][ C0] ? __unwind_start+0x474/0x820
[ 42.793844][ C0] ? deref_stack_reg+0xe0/0xe0
[ 42.798587][ C0] ? unwind_next_frame+0x316/0x19e0
[ 42.803763][ C0] ? ret_from_fork+0x24/0x30
[ 42.808330][ C0] ? profile_setup.cold+0xc1/0xc1
[ 42.813344][ C0] arch_stack_walk+0x74/0xd0
[ 42.817925][ C0] ? stack_trace_save+0x8c/0xc0
[ 42.822773][ C0] stack_trace_save+0x8c/0xc0
[ 42.827435][ C0] ? stack_trace_consume_entry+0x160/0x160
[ 42.833221][ C0] ? ret_from_fork+0x24/0x30
[ 42.837789][ C0] ? stack_trace_save+0x8c/0xc0
[ 42.842716][ C0] ? stack_trace_consume_entry+0x160/0x160
[ 42.848524][ C0] save_stack+0x1b/0x80
[ 42.852668][ C0] ? mark_lock+0xbc/0x1160
[ 42.857101][ C0] ? save_stack+0x1b/0x80
[ 42.861410][ C0] ? __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 42.867197][ C0] ? ath9k_hif_usb_alloc_urbs+0xb0f/0x1030
[ 42.872986][ C0] ? __lock_acquire+0x145e/0x3b60
[ 42.878025][ C0] ? find_held_lock+0x2d/0x110
[ 42.882785][ C0] ? fs_reclaim_release+0xa/0x20
[ 42.887718][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 42.892558][ C0] ? fault_create_debugfs_attr+0x140/0x140
[ 42.898386][ C0] ? kasan_unpoison_shadow+0x30/0x40
[ 42.903664][ C0] __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 42.909383][ C0] ? usb_alloc_urb+0x65/0xb0
[ 42.913963][ C0] __kmalloc+0xfe/0x370
[ 42.918111][ C0] ? kasan_unpoison_shadow+0x30/0x40
[ 42.923380][ C0] usb_alloc_urb+0x65/0xb0
[ 42.927778][ C0] ath9k_hif_usb_alloc_urbs+0xb2c/0x1030
[ 42.933394][ C0] ath9k_hif_usb_firmware_cb+0x142/0x500
[ 42.939005][ C0] ? ath9k_hif_usb_resume+0x320/0x320
[ 42.944361][ C0] request_firmware_work_func+0x126/0x242
[ 42.950061][ C0] ? request_firmware_into_buf+0x90/0x90
[ 42.955675][ C0] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 42.961197][ C0] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 42.966463][ C0] process_one_work+0x94b/0x1620
[ 42.971382][ C0] ? pwq_dec_nr_in_flight+0x310/0x310
[ 42.976734][ C0] ? do_raw_spin_lock+0x129/0x290
[ 42.981741][ C0] worker_thread+0x96/0xe20
[ 42.986223][ C0] ? process_one_work+0x1620/0x1620
[ 42.991422][ C0] kthread+0x318/0x420
[ 42.995472][ C0] ? kthread_create_on_node+0xf0/0xf0
[ 43.000825][ C0] ret_from_fork+0x24/0x30
[ 43.006125][ C0] Kernel Offset: disabled
[ 43.010438][ C0] Rebooting in 86400 seconds..