[ 415.084725][ T2536] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.094579][ T2536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.103294][ T2536] usb 4-1: Product: syz [ 415.112955][ T2536] usb 4-1: Manufacturer: syz [ 415.118178][ T2536] usb 4-1: SerialNumber: syz [ 415.185505][ T2536] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 415.204777][ T2968] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 415.334501][ T4122] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 415.380326][ T5897] UDC core: couldn't find an available UDC or it's busy: -16 [ 415.388186][ T5897] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 415.724759][ T2968] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.733974][ T2968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.742174][ T2968] usb 2-1: Product: syz [ 415.746455][ T2968] usb 2-1: Manufacturer: syz [ 415.751030][ T2968] usb 2-1: SerialNumber: syz [ 415.795720][ T2968] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 415.854599][ T2536] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 415.854602][ T4122] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 415.854610][ T4122] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.881492][ T3984] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 415.888797][ T3984] ath9k_htc: Failed to initialize the device [ 415.894980][ T4122] usb 1-1: Product: syz [ 415.899215][ T4122] usb 1-1: Manufacturer: syz [ 415.903870][ T4122] usb 1-1: SerialNumber: syz [ 415.945447][ T4122] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 415.982286][ T20] usb 5-1: USB disconnect, device number 93 [ 415.992030][ T20] usb 5-1: ath9k_htc: USB layer deinitialized [ 416.000902][ T7] usb 6-1: USB disconnect, device number 92 [ 416.018931][ T7] usb 6-1: ath9k_htc: USB layer deinitialized [ 416.364627][ T4005] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.384636][ T7] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 416.415561][ T5902] UDC core: couldn't find an available UDC or it's busy: -16 [ 416.423041][ T5902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 416.430746][ T20] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 416.524649][ T4122] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 416.904709][ T7] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 416.904782][ T2536] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 416.914321][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.922009][ T2536] ath9k_htc: Failed to initialize the device [ 416.929488][ T5903] UDC core: couldn't find an available UDC or it's busy: -16 [ 416.942799][ T5903] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 416.950375][ T7] usb 6-1: Product: syz [ 416.954569][ T7] usb 6-1: Manufacturer: syz [ 416.959211][ T7] usb 6-1: SerialNumber: syz [ 417.006631][ T7] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 417.010351][ T3650] usb 3-1: USB disconnect, device number 93 [ 417.038477][ T3650] usb 3-1: ath9k_htc: USB layer deinitialized [ 417.069931][ T20] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 417.080383][ T5906] UDC core: couldn't find an available UDC or it's busy: -16 [ 417.087916][ T5906] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 417.095598][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.104180][ T20] usb 5-1: Product: syz [ 417.108562][ T20] usb 5-1: Manufacturer: syz [ 417.113211][ T20] usb 5-1: SerialNumber: syz [ 417.158100][ T20] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 417.384642][ T4005] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 417.391823][ T4005] ath9k_htc: Failed to initialize the device [ 417.424800][ T3650] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 417.544663][ T4122] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 417.551772][ T4122] ath9k_htc: Failed to initialize the device [ 417.594561][ T7] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 417.814639][ T20] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.040682][ T3975] usb 4-1: USB disconnect, device number 93 [ 418.048618][ T3650] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 418.059699][ T3650] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.068289][ T3975] usb 4-1: ath9k_htc: USB layer deinitialized [ 418.079869][ T3650] usb 3-1: Product: syz [ 418.084014][ T3650] usb 3-1: Manufacturer: syz [ 418.088835][ T3650] usb 3-1: SerialNumber: syz [ 418.135547][ T3650] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 418.149284][ T5909] UDC core: couldn't find an available UDC or it's busy: -16 [ 418.156971][ T5909] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 418.371351][ T5910] UDC core: couldn't find an available UDC or it's busy: -16 [ 418.379132][ T5910] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 418.464565][ T3975] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 418.554166][ T3652] usb 2-1: USB disconnect, device number 93 [ 418.576301][ T3652] usb 2-1: ath9k_htc: USB layer deinitialized [ 418.664630][ T7] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 418.672124][ T7] ath9k_htc: Failed to initialize the device [ 418.710431][ T3984] usb 1-1: USB disconnect, device number 93 [ 418.725241][ T3984] usb 1-1: ath9k_htc: USB layer deinitialized [ 418.804957][ T3650] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.904584][ T20] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 418.911975][ T20] ath9k_htc: Failed to initialize the device [ 418.934693][ T3652] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 419.066674][ T3975] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.076182][ T3975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.084161][ T3975] usb 4-1: Product: syz [ 419.084546][ T3984] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 419.088680][ T3975] usb 4-1: Manufacturer: syz [ 419.100657][ T3975] usb 4-1: SerialNumber: syz [ 419.151940][ T3975] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 419.359450][ T5915] UDC core: couldn't find an available UDC or it's busy: -16 [ 419.367328][ T5915] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 419.454757][ T3652] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.464295][ T3652] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.472445][ T3652] usb 2-1: Product: syz [ 419.476850][ T3652] usb 2-1: Manufacturer: syz [ 419.481504][ T3652] usb 2-1: SerialNumber: syz [ 419.528851][ T3652] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 419.614766][ T3984] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 419.624032][ T3984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.637787][ T3984] usb 1-1: Product: syz [ 419.642120][ T3984] usb 1-1: Manufacturer: syz [ 419.646746][ T3984] usb 1-1: SerialNumber: syz [ 419.685197][ T3984] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 419.770998][ T3975] usb 6-1: USB disconnect, device number 93 [ 419.778947][ T3975] usb 6-1: ath9k_htc: USB layer deinitialized [ 419.874637][ T3650] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 419.892842][ T3650] ath9k_htc: Failed to initialize the device [ 419.926902][ T44] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.056406][ T3975] usb 1-1: USB disconnect, device number 94 [ 420.074688][ T3652] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 420.075219][ T3923] syz-executor.3 (3923) used greatest stack depth: 23256 bytes left [ 420.091775][ T4410] usb 4-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 420.101737][ T3975] usb 1-1: ath9k_htc: USB layer deinitialized [ 420.111525][ T4410] usb 4-1: ath9k_htc: USB layer deinitialized [ 420.111650][ T44] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.134575][ T2968] usb 2-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 420.137118][ T3973] usb 4-1: USB disconnect, device number 94 [ 420.144940][ T4122] usb 5-1: USB disconnect, device number 94 [ 420.149495][ T25] usb 2-1: USB disconnect, device number 94 [ 420.155106][ T4042] usb 3-1: USB disconnect, device number 94 [ 420.176221][ T25] usb 2-1: ath9k_htc: USB layer deinitialized [ 420.193944][ T4122] usb 5-1: ath9k_htc: USB layer deinitialized [ 420.201158][ T4042] usb 3-1: ath9k_htc: USB layer deinitialized [ 420.220238][ T44] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.257467][ T44] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.10.36' (ECDSA) to the list of known hosts. [ 420.952473][ T1534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.952477][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.964975][ T1534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.002866][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.004628][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.021658][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.050646][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.050667][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.070398][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.100734][ T44] device hsr_slave_0 left promiscuous mode [ 421.111444][ T44] device hsr_slave_1 left promiscuous mode [ 421.118625][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.126169][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.135952][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.143663][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.153202][ T44] device bridge_slave_1 left promiscuous mode [ 421.159747][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.169938][ T44] device bridge_slave_0 left promiscuous mode [ 421.176215][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.187360][ T44] device veth1_macvtap left promiscuous mode [ 421.193690][ T44] device veth0_macvtap left promiscuous mode [ 421.200473][ T44] device veth1_vlan left promiscuous mode [ 421.206491][ T44] device veth0_vlan left promiscuous mode [ 421.309984][ T44] team0 (unregistering): Port device team_slave_1 removed [ 421.321089][ T44] team0 (unregistering): Port device team_slave_0 removed [ 421.331081][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.342779][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.384925][ T44] bond0 (unregistering): Released all slaves [ 421.456220][ T1534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.475990][ T5968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.483946][ T5968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.506137][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.512643][ T1534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.516918][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.528965][ T3650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.530262][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.554511][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.568487][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.571081][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.580376][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.584281][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 421.606402][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.614278][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.636673][ T1534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.657911][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.659100][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.672136][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.687586][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.692111][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.701326][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.713241][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.724029][ T1534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.727945][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.747213][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.767662][ T3973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.934659][ T25] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 421.954476][ T4122] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 422.049035][ T4042] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 422.054493][ T3973] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 422.064490][ T3650] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 422.084647][ T2536] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 422.474544][ T4122] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.488389][ T4122] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.499908][ T4122] usb 2-1: Product: syz [ 422.504192][ T4122] usb 2-1: Manufacturer: syz [ 422.514608][ T4122] usb 2-1: SerialNumber: syz [ 422.520363][ T25] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.544714][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.552951][ T25] usb 6-1: Product: syz [ 422.565171][ T4122] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.579608][ T25] usb 6-1: Manufacturer: syz [ 422.590154][ T4042] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.592607][ T25] usb 6-1: SerialNumber: syz [ 422.604177][ T4042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.619070][ T4042] usb 5-1: Product: syz [ 422.623516][ T4042] usb 5-1: Manufacturer: syz [ 422.632351][ T4042] usb 5-1: SerialNumber: syz [ 422.645324][ T25] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.664996][ T3973] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.674591][ T3650] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.675262][ T4042] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.683678][ T3650] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.709001][ T3973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.720183][ T2536] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 422.732425][ T2536] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.741298][ T3973] usb 3-1: Product: syz [ 422.746128][ T2536] usb 4-1: Product: syz [ 422.750554][ T3973] usb 3-1: Manufacturer: syz [ 422.755794][ T3650] usb 1-1: Product: syz [ 422.760024][ T2536] usb 4-1: Manufacturer: syz [ 422.768436][ T3973] usb 3-1: SerialNumber: syz [ 422.773282][ T3650] usb 1-1: Manufacturer: syz [ 422.779077][ T2536] usb 4-1: SerialNumber: syz [ 422.785232][ T3650] usb 1-1: SerialNumber: syz [ 422.826768][ T3973] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.835584][ T2536] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 422.846624][ T3650] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 423.194667][ T4122] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.227352][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.254689][ T4042] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.297530][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.329587][ T25] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.350266][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.400180][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.524689][ T3973] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.533995][ T3650] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.543167][ T2536] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 423.578274][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.621870][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.683505][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.744931][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.755536][ T6102] UDC core: couldn't find an available UDC or it's busy: -16 [ 423.755545][ T6102] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 423.807250][ T6106] UDC core: couldn't find an available UDC or it's busy: -16 [ 423.815020][ T6106] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 423.919002][ T6114] UDC core: couldn't find an available UDC or it's busy: -16 [ 423.928403][ T44] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.939270][ T6114] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.004797][ T44] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.049070][ T44] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.079915][ T6129] UDC core: couldn't find an available UDC or it's busy: -16 [ 424.081630][ T6130] UDC core: couldn't find an available UDC or it's busy: -16 [ 424.088081][ T6131] UDC core: couldn't find an available UDC or it's busy: -16 [ 424.100791][ T6130] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.106596][ T6129] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.112407][ T6131] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 424.128247][ T44] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.268823][ T4122] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 424.285678][ T4122] ath9k_htc: Failed to initialize the device [ 424.302712][ T44] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.344488][ T4042] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 424.348576][ T25] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 424.352190][ T4042] ath9k_htc: Failed to initialize the device [ 424.370002][ T25] ath9k_htc: Failed to initialize the device [ 424.376510][ C1] ================================================================== [ 424.376546][ C1] BUG: KASAN: use-after-free in ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.376559][ C1] Read of size 4 at addr ffff888078d74348 by task kworker/1:1/25 [ 424.376565][ C1] [ 424.376568][ C1] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.16.0-syzkaller #0 [ 424.376575][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.376579][ C1] Workqueue: events request_firmware_work_func [ 424.376590][ C1] Call Trace: [ 424.376594][ C1] [ 424.376598][ C1] dump_stack_lvl+0x57/0x7d [ 424.376608][ C1] print_address_description.constprop.0.cold+0x8d/0x336 [ 424.376618][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.376623][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.376629][ C1] kasan_report.cold+0x83/0xdf [ 424.376636][ C1] ? __netdev_alloc_skb+0x20/0x380 [ 424.376644][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.376652][ C1] ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.376668][ C1] ? hif_usb_start+0xa0/0xa0 [ 424.376675][ C1] ? led_trigger_blink_setup.part.0+0xe9/0x1a0 [ 424.376684][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 424.376697][ C1] ? led_trigger_blink_setup.part.0+0xee/0x1a0 [ 424.376707][ C1] __usb_hcd_giveback_urb+0x238/0x3f0 [ 424.376717][ C1] dummy_timer+0xeb8/0x2eb0 [ 424.376732][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 424.376756][ C1] ? lock_chain_count+0x20/0x20 [ 424.376763][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.376775][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.376781][ C1] call_timer_fn+0x163/0x4a0 [ 424.376789][ C1] ? add_timer_on+0x410/0x410 [ 424.376799][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 424.376807][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.376813][ C1] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 424.376821][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.376829][ C1] __run_timers.part.0+0x52a/0x8a0 [ 424.376842][ C1] ? call_timer_fn+0x4a0/0x4a0 [ 424.376854][ C1] ? mark_held_locks+0x9f/0xe0 [ 424.376865][ C1] run_timer_softirq+0x9c/0x190 [ 424.376873][ C1] __do_softirq+0x29b/0x9c2 [ 424.376886][ C1] __irq_exit_rcu+0x123/0x180 [ 424.376894][ C1] irq_exit_rcu+0x5/0x20 [ 424.376900][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 424.376908][ C1] [ 424.376911][ C1] [ 424.376915][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 424.376921][ C1] RIP: 0010:console_unlock+0x4df/0x870 [ 424.376928][ C1] Code: 67 2a fe ff e8 e2 29 00 00 48 83 3c 24 00 0f 85 e0 01 00 00 9c 58 f6 c4 02 0f 85 d3 02 00 00 48 83 3c 24 00 74 01 fb 45 85 e4 <0f> 85 27 02 00 00 8b 54 24 30 85 d2 0f 84 70 fc ff ff 31 d2 be 9f [ 424.376935][ C1] RSP: 0018:ffffc90000dff9b8 EFLAGS: 00000246 [ 424.376941][ C1] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 1ffffffff1dd501e [ 424.376946][ C1] RDX: 0000000000000000 RSI: ffffffff88cb5900 RDI: ffffffff8921d9a0 [ 424.376951][ C1] RBP: ffffc90000dffa10 R08: 0000000000000001 R09: ffffffff8eea7987 [ 424.376955][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 424.376959][ C1] R13: ffffffff8b7f9ba8 R14: ffffffff8b7f9b70 R15: 0000000000000000 [ 424.376982][ C1] ? devkmsg_read+0x660/0x660 [ 424.376991][ C1] ? lock_release+0x720/0x720 [ 424.377007][ C1] ? _printk+0xad/0xde [ 424.377020][ C1] vprintk_emit+0x99/0x2f0 [ 424.377031][ C1] _printk+0xad/0xde [ 424.377038][ C1] ? record_print_text.cold+0x11/0x11 [ 424.377044][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 424.377053][ C1] ? usb_free_urb+0x13/0xb0 [ 424.377060][ C1] ? ath9k_hif_usb_alloc_urbs+0xa3a/0xef0 [ 424.377073][ C1] ath9k_htc_hw_init.cold+0xc/0x12 [ 424.377081][ C1] ath9k_hif_usb_firmware_cb+0x23b/0x4d0 [ 424.377092][ C1] ? ath9k_hif_usb_alloc_urbs+0xef0/0xef0 [ 424.377098][ C1] request_firmware_work_func+0x126/0x230 [ 424.377105][ C1] ? request_partial_firmware_into_buf+0x90/0x90 [ 424.377120][ C1] process_one_work+0x879/0x1410 [ 424.377132][ C1] ? lock_release+0x720/0x720 [ 424.377139][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 424.377149][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 424.377156][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 424.377169][ C1] worker_thread+0x5a0/0xf60 [ 424.377183][ C1] ? process_one_work+0x1410/0x1410 [ 424.377192][ C1] kthread+0x3ab/0x480 [ 424.377198][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 424.377204][ C1] ? set_kthread_struct+0x100/0x100 [ 424.377213][ C1] ret_from_fork+0x1f/0x30 [ 424.377233][ C1] [ 424.377236][ C1] [ 424.377239][ C1] The buggy address belongs to the page: [ 424.377242][ C1] page:ffffea0001e35d00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x100 pfn:0x78d74 [ 424.377249][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 424.377259][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 424.377264][ C1] raw: 0000000000000100 0000000000000000 00000000ffffffff 0000000000000000 [ 424.377275][ C1] page dumped because: kasan: bad access detected [ 424.377279][ C1] page_owner tracks the page as freed [ 424.377281][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x140dc0(GFP_USER|__GFP_COMP|__GFP_ZERO), pid 25, ts 423341629378, free_ts 424369980232 [ 424.377291][ C1] get_page_from_freelist+0xa6f/0x2f10 [ 424.377298][ C1] __alloc_pages+0x1b2/0x500 [ 424.377302][ C1] kmalloc_order+0x34/0xf0 [ 424.377308][ C1] kmalloc_order_trace+0x14/0x120 [ 424.377314][ C1] wiphy_new_nm+0x63a/0x1fc0 [ 424.377321][ C1] ieee80211_alloc_hw_nm+0x2f5/0x1fd0 [ 424.377327][ C1] ath9k_htc_probe_device+0x91/0x1e30 [ 424.377333][ C1] ath9k_htc_hw_init+0x8/0x20 [ 424.377338][ C1] ath9k_hif_usb_firmware_cb+0x23b/0x4d0 [ 424.377343][ C1] request_firmware_work_func+0x126/0x230 [ 424.377349][ C1] process_one_work+0x879/0x1410 [ 424.377354][ C1] worker_thread+0x5a0/0xf60 [ 424.377359][ C1] kthread+0x3ab/0x480 [ 424.377364][ C1] ret_from_fork+0x1f/0x30 [ 424.377369][ C1] page last free stack trace: [ 424.377372][ C1] free_pcp_prepare+0x374/0x870 [ 424.377377][ C1] free_unref_page+0x19/0x690 [ 424.377381][ C1] device_release+0x93/0x200 [ 424.377387][ C1] kobject_put+0x139/0x410 [ 424.377392][ C1] ath9k_htc_probe_device+0x1ab/0x1e30 [ 424.377397][ C1] ath9k_htc_hw_init+0x8/0x20 [ 424.377401][ C1] ath9k_hif_usb_firmware_cb+0x23b/0x4d0 [ 424.377406][ C1] request_firmware_work_func+0x126/0x230 [ 424.377411][ C1] process_one_work+0x879/0x1410 [ 424.377416][ C1] worker_thread+0x5a0/0xf60 [ 424.377421][ C1] kthread+0x3ab/0x480 [ 424.377425][ C1] ret_from_fork+0x1f/0x30 [ 424.377430][ C1] [ 424.377433][ C1] Memory state around the buggy address: [ 424.377436][ C1] ffff888078d74200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 424.377441][ C1] ffff888078d74280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 424.377445][ C1] >ffff888078d74300: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 424.377448][ C1] ^ [ 424.377452][ C1] ffff888078d74380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 424.377456][ C1] ffff888078d74400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 424.377460][ C1] ================================================================== [ 424.377463][ C1] Disabling lock debugging due to kernel taint [ 424.377466][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 424.377469][ C1] CPU: 1 PID: 25 Comm: kworker/1:1 Tainted: G B 5.16.0-syzkaller #0 [ 424.377474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.377477][ C1] Workqueue: events request_firmware_work_func [ 424.377483][ C1] Call Trace: [ 424.377485][ C1] [ 424.377487][ C1] dump_stack_lvl+0x57/0x7d [ 424.377492][ C1] panic+0x214/0x49f [ 424.377496][ C1] ? __warn_printk+0xee/0xee [ 424.377503][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.377507][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.377511][ C1] end_report.cold+0x63/0x6f [ 424.377516][ C1] kasan_report.cold+0x71/0xdf [ 424.377520][ C1] ? __netdev_alloc_skb+0x20/0x380 [ 424.377525][ C1] ? ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.377531][ C1] ath9k_hif_usb_rx_cb+0xd4c/0x1030 [ 424.377537][ C1] ? hif_usb_start+0xa0/0xa0 [ 424.377541][ C1] ? led_trigger_blink_setup.part.0+0xe9/0x1a0 [ 424.377546][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 424.377553][ C1] ? led_trigger_blink_setup.part.0+0xee/0x1a0 [ 424.377558][ C1] __usb_hcd_giveback_urb+0x238/0x3f0 [ 424.377564][ C1] dummy_timer+0xeb8/0x2eb0 [ 424.377571][ C1] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 424.377580][ C1] ? lock_chain_count+0x20/0x20 [ 424.377584][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.377591][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.377596][ C1] call_timer_fn+0x163/0x4a0 [ 424.377600][ C1] ? add_timer_on+0x410/0x410 [ 424.377605][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 424.377610][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.377615][ C1] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 424.377619][ C1] ? dummy_dequeue+0x4a0/0x4a0 [ 424.377625][ C1] __run_timers.part.0+0x52a/0x8a0 [ 424.377631][ C1] ? call_timer_fn+0x4a0/0x4a0 [ 424.377636][ C1] ? mark_held_locks+0x9f/0xe0 [ 424.377642][ C1] run_timer_softirq+0x9c/0x190 [ 424.377647][ C1] __do_softirq+0x29b/0x9c2 [ 424.377653][ C1] __irq_exit_rcu+0x123/0x180 [ 424.377658][ C1] irq_exit_rcu+0x5/0x20 [ 424.377664][ C1] sysvec_apic_timer_interrupt+0x93/0xc0 [ 424.377669][ C1] [ 424.377671][ C1] [ 424.377673][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 424.377678][ C1] RIP: 0010:console_unlock+0x4df/0x870 [ 424.377683][ C1] Code: 67 2a fe ff e8 e2 29 00 00 48 83 3c 24 00 0f 85 e0 01 00 00 9c 58 f6 c4 02 0f 85 d3 02 00 00 48 83 3c 24 00 74 01 fb 45 85 e4 <0f> 85 27 02 00 00 8b 54 24 30 85 d2 0f 84 70 fc ff ff 31 d2 be 9f [ 424.377687][ C1] RSP: 0018:ffffc90000dff9b8 EFLAGS: 00000246 [ 424.377692][ C1] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 1ffffffff1dd501e [ 424.377695][ C1] RDX: 0000000000000000 RSI: ffffffff88cb5900 RDI: ffffffff8921d9a0 [ 424.377698][ C1] RBP: ffffc90000dffa10 R08: 0000000000000001 R09: ffffffff8eea7987 [ 424.377702][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000000 [ 424.377705][ C1] R13: ffffffff8b7f9ba8 R14: ffffffff8b7f9b70 R15: 0000000000000000 [ 424.377712][ C1] ? devkmsg_read+0x660/0x660 [ 424.377718][ C1] ? lock_release+0x720/0x720 [ 424.377725][ C1] ? _printk+0xad/0xde [ 424.377731][ C1] vprintk_emit+0x99/0x2f0 [ 424.377737][ C1] _printk+0xad/0xde [ 424.377741][ C1] ? record_print_text.cold+0x11/0x11 [ 424.377746][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 424.377752][ C1] ? usb_free_urb+0x13/0xb0 [ 424.377756][ C1] ? ath9k_hif_usb_alloc_urbs+0xa3a/0xef0 [ 424.377763][ C1] ath9k_htc_hw_init.cold+0xc/0x12 [ 424.377768][ C1] ath9k_hif_usb_firmware_cb+0x23b/0x4d0 [ 424.377772][ C1] ? ath9k_hif_usb_alloc_urbs+0xef0/0xef0 [ 424.377776][ C1] request_firmware_work_func+0x126/0x230 [ 424.377782][ C1] ? request_partial_firmware_into_buf+0x90/0x90 [ 424.377789][ C1] process_one_work+0x879/0x1410 [ 424.377795][ C1] ? lock_release+0x720/0x720 [ 424.377799][ C1] ? pwq_dec_nr_in_flight+0x230/0x230 [ 424.377804][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 424.377809][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 424.377816][ C1] worker_thread+0x5a0/0xf60 [ 424.377822][ C1] ? process_one_work+0x1410/0x1410 [ 424.377827][ C1] kthread+0x3ab/0x480 [ 424.377832][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 424.377837][ C1] ? set_kthread_struct+0x100/0x100 [ 424.377842][ C1] ret_from_fork+0x1f/0x30 [ 424.377849][ C1] [ 424.378877][ C1] Kernel Offset: disabled [ 425.507447][ C1] Rebooting in 86400 seconds..