[ 46.609000][ T39] device veth0_macvtap left promiscuous mode [ 46.615582][ T39] device veth1_vlan left promiscuous mode [ 46.623030][ T39] device veth0_vlan left promiscuous mode [ 49.737183][ T39] team0 (unregistering): Port device team_slave_1 removed [ 49.751304][ T39] team0 (unregistering): Port device team_slave_0 removed [ 49.764266][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.779530][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.823064][ T39] bond0 (unregistering): Released all slaves [ 51.531343][ T5425] can: request_module (can-proto-0) failed. [ 51.548428][ T5425] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.0.247' (ECDSA) to the list of known hosts. [ 71.164516][ T3785] cfg80211: failed to load regulatory.db [ 71.257855][ T5882] cgroup: Unknown subsys name 'net' [ 71.265959][ T5882] cgroup: Unknown subsys name 'rlimit' [ 71.279840][ T5883] IPVS: ftp: loaded support on port[0] = 21 [ 71.317407][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.331518][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.339183][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.341483][ T3785] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.348169][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.363747][ T4512] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.659823][ T3785] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.190022][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 72.199163][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.207366][ T3785] usb 1-1: Product: syz [ 72.211682][ T3785] usb 1-1: Manufacturer: syz [ 72.216261][ T3785] usb 1-1: SerialNumber: syz [ 72.262109][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 72.859819][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 73.080301][ C0] usb 1-1: ath: unknown panic pattern! [ 73.088621][ T5444] usb 1-1: USB disconnect, device number 2 [ 73.879761][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 73.886844][ T3785] ath9k_htc: Failed to initialize the device [ 73.894789][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 74.259763][ T5444] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.779811][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 74.788965][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.797045][ T5444] usb 1-1: Product: syz [ 74.801277][ T5444] usb 1-1: Manufacturer: syz [ 74.805855][ T5444] usb 1-1: SerialNumber: syz [ 74.850557][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 75.449766][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 75.659881][ C0] usb 1-1: ath: unknown panic pattern! [ 75.667670][ T3785] usb 1-1: USB disconnect, device number 3 [ 76.519791][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 76.526754][ T5444] ath9k_htc: Failed to initialize the device [ 76.533327][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 76.889785][ T3785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.409813][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 77.418857][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.427353][ T3785] usb 1-1: Product: syz [ 77.431601][ T3785] usb 1-1: Manufacturer: syz [ 77.436191][ T3785] usb 1-1: SerialNumber: syz [ 77.480359][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 78.059805][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 78.289902][ C0] usb 1-1: ath: unknown panic pattern! [ 78.297102][ T5444] usb 1-1: USB disconnect, device number 4 [ 79.079731][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 79.086722][ T3785] ath9k_htc: Failed to initialize the device [ 79.093247][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 79.449750][ T5444] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 79.989824][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.999068][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.007171][ T5444] usb 1-1: Product: syz [ 80.011445][ T5444] usb 1-1: Manufacturer: syz [ 80.016139][ T5444] usb 1-1: SerialNumber: syz [ 80.060476][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 80.639856][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 80.859922][ C0] usb 1-1: ath: unknown panic pattern! [ 80.865999][ T3785] usb 1-1: USB disconnect, device number 5 [ 81.719810][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 81.726800][ T5444] ath9k_htc: Failed to initialize the device [ 81.733829][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 82.089708][ T3785] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 82.619851][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 82.628900][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.637054][ T3785] usb 1-1: Product: syz [ 82.641247][ T3785] usb 1-1: Manufacturer: syz [ 82.645821][ T3785] usb 1-1: SerialNumber: syz [ 82.703398][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.269808][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.489873][ C0] usb 1-1: ath: unknown panic pattern! [ 83.497403][ T5444] usb 1-1: USB disconnect, device number 6 [ 84.359725][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 84.366715][ T3785] ath9k_htc: Failed to initialize the device [ 84.373672][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 84.729724][ T5444] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 85.269868][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 85.279000][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.287077][ T5444] usb 1-1: Product: syz [ 85.291351][ T5444] usb 1-1: Manufacturer: syz [ 85.295933][ T5444] usb 1-1: SerialNumber: syz [ 85.342052][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 85.909791][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 86.129957][ C0] usb 1-1: ath: unknown panic pattern! [ 86.137476][ T3785] usb 1-1: USB disconnect, device number 7 [ 86.999791][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 87.006801][ T5444] ath9k_htc: Failed to initialize the device [ 87.013579][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 87.369789][ T3785] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 87.899852][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 87.909114][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.917450][ T3785] usb 1-1: Product: syz [ 87.921848][ T3785] usb 1-1: Manufacturer: syz [ 87.926524][ T3785] usb 1-1: SerialNumber: syz [ 87.972481][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 88.559917][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.779912][ C0] usb 1-1: ath: unknown panic pattern! [ 88.787551][ T5444] usb 1-1: USB disconnect, device number 8 [ 89.639785][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 89.646793][ T3785] ath9k_htc: Failed to initialize the device [ 89.653239][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 90.019789][ T5444] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 90.539810][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 90.549135][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.557228][ T5444] usb 1-1: Product: syz [ 90.561462][ T5444] usb 1-1: Manufacturer: syz [ 90.566040][ T5444] usb 1-1: SerialNumber: syz [ 90.612405][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.189935][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.409945][ C0] usb 1-1: ath: unknown panic pattern! [ 91.417602][ T3785] usb 1-1: USB disconnect, device number 9 [ 92.279793][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 92.286749][ T5444] ath9k_htc: Failed to initialize the device [ 92.293802][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 92.649708][ T3785] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 93.169820][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 93.178856][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.187361][ T3785] usb 1-1: Product: syz [ 93.191733][ T3785] usb 1-1: Manufacturer: syz [ 93.196312][ T3785] usb 1-1: SerialNumber: syz [ 93.242356][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 93.809915][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 94.029880][ C0] usb 1-1: ath: unknown panic pattern! [ 94.037517][ T5444] usb 1-1: USB disconnect, device number 10 [ 94.839736][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 94.846716][ T3785] ath9k_htc: Failed to initialize the device [ 94.853195][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 95.209725][ T5444] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.729828][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 95.738863][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.747044][ T5444] usb 1-1: Product: syz [ 95.751265][ T5444] usb 1-1: Manufacturer: syz [ 95.755845][ T5444] usb 1-1: SerialNumber: syz [ 95.802268][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.369898][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.579913][ C0] usb 1-1: ath: unknown panic pattern! [ 96.587759][ T3785] usb 1-1: USB disconnect, device number 11 [ 97.399727][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 97.406820][ T5444] ath9k_htc: Failed to initialize the device [ 97.414257][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 97.769706][ T3785] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 98.289842][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 98.298953][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.307078][ T3785] usb 1-1: Product: syz [ 98.311317][ T3785] usb 1-1: Manufacturer: syz [ 98.315897][ T3785] usb 1-1: SerialNumber: syz [ 98.360962][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 98.929727][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 99.149908][ C0] usb 1-1: ath: unknown panic pattern! [ 99.156641][ T5444] usb 1-1: USB disconnect, device number 12 [ 99.960183][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 99.967135][ T3785] ath9k_htc: Failed to initialize the device [ 99.974221][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 100.329716][ T5444] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 100.859941][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.869067][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.877164][ T5444] usb 1-1: Product: syz [ 100.881979][ T5444] usb 1-1: Manufacturer: syz [ 100.886627][ T5444] usb 1-1: SerialNumber: syz [ 100.933064][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.499823][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.719918][ C0] usb 1-1: ath: unknown panic pattern! [ 101.727381][ T3785] usb 1-1: USB disconnect, device number 13 [ 102.519818][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 102.526775][ T5444] ath9k_htc: Failed to initialize the device [ 102.533187][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 102.909745][ T3785] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 103.429828][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 103.438982][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.447137][ T3785] usb 1-1: Product: syz [ 103.451417][ T3785] usb 1-1: Manufacturer: syz [ 103.456005][ T3785] usb 1-1: SerialNumber: syz [ 103.502080][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 104.069845][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 104.279862][ C0] usb 1-1: ath: unknown panic pattern! [ 104.287561][ T5444] usb 1-1: USB disconnect, device number 14 [ 105.159733][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 105.166677][ T3785] ath9k_htc: Failed to initialize the device [ 105.173266][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 105.549731][ T5444] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 106.120621][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 106.129695][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.137651][ T5444] usb 1-1: Product: syz [ 106.141958][ T5444] usb 1-1: Manufacturer: syz [ 106.146539][ T5444] usb 1-1: SerialNumber: syz [ 106.190349][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 106.789888][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 107.009881][ C0] usb 1-1: ath: unknown panic pattern! [ 107.017590][ T3785] usb 1-1: USB disconnect, device number 15 [ 107.879704][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 107.886676][ T5444] ath9k_htc: Failed to initialize the device [ 107.893996][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 108.249731][ T3785] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 108.800271][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.809421][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.817700][ T3785] usb 1-1: Product: syz [ 108.822002][ T3785] usb 1-1: Manufacturer: syz [ 108.826665][ T3785] usb 1-1: SerialNumber: syz [ 108.872440][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 109.449775][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 109.669905][ C0] usb 1-1: ath: unknown panic pattern! [ 109.678036][ T5444] usb 1-1: USB disconnect, device number 16 [ 110.529726][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 110.536753][ T3785] ath9k_htc: Failed to initialize the device [ 110.543283][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 110.899683][ T5444] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 111.419757][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 111.428970][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.437103][ T5444] usb 1-1: Product: syz [ 111.441353][ T5444] usb 1-1: Manufacturer: syz [ 111.446093][ T5444] usb 1-1: SerialNumber: syz [ 111.492200][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 112.059861][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 112.279860][ C0] usb 1-1: ath: unknown panic pattern! [ 112.287461][ T3785] usb 1-1: USB disconnect, device number 17 [ 113.079696][ T5444] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 113.086688][ T5444] ath9k_htc: Failed to initialize the device [ 113.093837][ T3785] usb 1-1: ath9k_htc: USB layer deinitialized [ 113.449753][ T3785] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 113.989888][ T3785] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 113.998930][ T3785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.006966][ T3785] usb 1-1: Product: syz [ 114.011170][ T3785] usb 1-1: Manufacturer: syz [ 114.015737][ T3785] usb 1-1: SerialNumber: syz [ 114.062590][ T3785] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 114.649906][ T3785] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 114.869848][ C0] usb 1-1: ath: unknown panic pattern! [ 114.875931][ T5444] usb 1-1: USB disconnect, device number 18 [ 115.719857][ T3785] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 115.726870][ T3785] ath9k_htc: Failed to initialize the device [ 115.733453][ T5444] usb 1-1: ath9k_htc: USB layer deinitialized [ 116.089713][ T5444] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 116.609816][ T5444] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 116.618963][ T5444] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.627073][ T5444] usb 1-1: Product: syz [ 116.631339][ T5444] usb 1-1: Manufacturer: syz [ 116.635958][ T5444] usb 1-1: SerialNumber: syz [ 116.681349][ T5444] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 117.249798][ T5444] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 117.469898][ C0] usb 1-1: ath: unknown panic pattern! [ 117.471538][ T4512] usb 1-1: USB disconnect, device number 19 [ 117.475656][ C0] ================================================================== [ 117.489527][ C0] BUG: KASAN: use-after-free in kfree_skb+0x25/0x2c0 [ 117.496188][ C0] Read of size 4 at addr ffff8880216cd5d4 by task swapper/0/0 [ 117.503711][ C0] [ 117.506028][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 5.11.0-syzkaller #0 [ 117.513658][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 117.523700][ C0] Call Trace: [ 117.526966][ C0] [ 117.529793][ C0] dump_stack+0x9a/0xcc [ 117.533934][ C0] ? kfree_skb+0x25/0x2c0 [ 117.538240][ C0] print_address_description.constprop.0.cold+0x5b/0x2f8 [ 117.545261][ C0] ? kfree_skb+0x25/0x2c0 [ 117.549568][ C0] ? kfree_skb+0x25/0x2c0 [ 117.553870][ C0] kasan_report.cold+0x79/0xd5 [ 117.558654][ C0] ? kfree_skb+0x25/0x2c0 [ 117.562957][ C0] check_memory_region+0x13d/0x180 [ 117.568050][ C0] kfree_skb+0x25/0x2c0 [ 117.572181][ C0] ath9k_hif_usb_reg_in_cb+0x46b/0x600 [ 117.577623][ C0] __usb_hcd_giveback_urb+0x238/0x3f0 [ 117.582970][ C0] dummy_timer+0xeb8/0x2eb0 [ 117.587452][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 117.593419][ C0] ? dummy_dequeue+0x490/0x490 [ 117.598172][ C0] ? dummy_dequeue+0x490/0x490 [ 117.602999][ C0] call_timer_fn+0x163/0x4b0 [ 117.607567][ C0] ? add_timer_on+0x410/0x410 [ 117.612220][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 117.617059][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 117.621973][ C0] ? dummy_dequeue+0x490/0x490 [ 117.626713][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 117.632670][ C0] ? dummy_dequeue+0x490/0x490 [ 117.637408][ C0] __run_timers.part.0+0x52a/0x8b0 [ 117.642518][ C0] ? hrtimer_interrupt+0x442/0x930 [ 117.647621][ C0] ? call_timer_fn+0x4b0/0x4b0 [ 117.652359][ C0] ? ktime_get+0x102/0x2c0 [ 117.656755][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 117.661933][ C0] ? sched_clock+0x2a/0x40 [ 117.666333][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 117.671180][ C0] run_timer_softirq+0x9c/0x190 [ 117.676021][ C0] __do_softirq+0x29b/0x9f6 [ 117.680513][ C0] asm_call_irq_on_stack+0xf/0x20 [ 117.685516][ C0] [ 117.688432][ C0] do_softirq_own_stack+0xaa/0xd0 [ 117.693429][ C0] irq_exit_rcu+0x134/0x200 [ 117.697914][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 117.703612][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 117.709587][ C0] RIP: 0010:acpi_idle_do_entry+0x161/0x1c0 [ 117.715496][ C0] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d 48 8b 45 00 a8 08 75 c9 e8 8d 19 3a f9 e9 07 00 00 00 0f 00 2d a1 6c b4 00 fb f4 <9c> 58 fa f6 c4 02 74 ae 5d e9 e1 15 3a f9 48 89 ef 5d e9 c8 f9 ff [ 117.735086][ C0] RSP: 0018:ffffffff8a407d90 EFLAGS: 00000202 [ 117.741135][ C0] RAX: 0000000000094161 RBX: ffff888016608865 RCX: 1ffffffff1863dd1 [ 117.749080][ C0] RDX: 0000000000000000 RSI: ffffffff888afa60 RDI: ffffffff88ddc5c0 [ 117.757024][ C0] RBP: ffffffff8a4bb380 R08: 0000000000000001 R09: 0000000000000001 [ 117.764986][ C0] R10: fffffbfff1497670 R11: 0000000000000001 R12: 0000000000000001 [ 117.772947][ C0] R13: ffff888016608864 R14: ffffffff8b09e260 R15: ffff88801847b804 [ 117.780911][ C0] acpi_idle_enter+0x2c0/0x4b0 [ 117.785658][ C0] ? rcu_preempt_deferred_qs+0x13/0xe0 [ 117.791104][ C0] cpuidle_enter_state+0x152/0xb40 [ 117.796197][ C0] cpuidle_enter+0x45/0xa0 [ 117.800589][ C0] do_idle+0x3e1/0x590 [ 117.804653][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 117.809682][ C0] ? schedule+0xe6/0x270 [ 117.813921][ C0] cpu_startup_entry+0x14/0x20 [ 117.818670][ C0] start_kernel+0x330/0x34d [ 117.823151][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 117.829027][ C0] [ 117.831328][ C0] Allocated by task 5444: [ 117.835627][ C0] kasan_save_stack+0x1b/0x40 [ 117.840285][ C0] ____kasan_kmalloc.constprop.0+0x82/0xa0 [ 117.846087][ C0] kmem_cache_alloc_node+0x1e0/0x470 [ 117.851354][ C0] __alloc_skb+0x42/0x4e0 [ 117.855671][ C0] ath9k_hif_usb_alloc_urbs+0x864/0xed0 [ 117.861209][ C0] ath9k_hif_usb_firmware_cb+0x121/0x4d0 [ 117.866826][ C0] request_firmware_work_func+0x126/0x230 [ 117.872515][ C0] process_one_work+0x84c/0x13b0 [ 117.877427][ C0] worker_thread+0x598/0xf80 [ 117.881988][ C0] kthread+0x36f/0x450 [ 117.886028][ C0] ret_from_fork+0x1f/0x30 [ 117.890433][ C0] [ 117.892737][ C0] Freed by task 0: [ 117.896431][ C0] kasan_save_stack+0x1b/0x40 [ 117.901094][ C0] kasan_set_track+0x1c/0x30 [ 117.905675][ C0] kasan_set_free_info+0x20/0x30 [ 117.910601][ C0] ____kasan_slab_free+0xe1/0x110 [ 117.915599][ C0] slab_free_freelist_hook+0x5d/0x150 [ 117.920952][ C0] kmem_cache_free+0x82/0x350 [ 117.925601][ C0] ath9k_hif_usb_reg_in_cb+0x178/0x600 [ 117.931030][ C0] __usb_hcd_giveback_urb+0x238/0x3f0 [ 117.936372][ C0] dummy_timer+0xeb8/0x2eb0 [ 117.940847][ C0] call_timer_fn+0x163/0x4b0 [ 117.945410][ C0] __run_timers.part.0+0x52a/0x8b0 [ 117.950493][ C0] run_timer_softirq+0x9c/0x190 [ 117.955313][ C0] __do_softirq+0x29b/0x9f6 [ 117.959801][ C0] [ 117.962146][ C0] The buggy address belongs to the object at ffff8880216cd500 [ 117.962146][ C0] which belongs to the cache skbuff_head_cache of size 224 [ 117.976690][ C0] The buggy address is located 212 bytes inside of [ 117.976690][ C0] 224-byte region [ffff8880216cd500, ffff8880216cd5e0) [ 117.990028][ C0] The buggy address belongs to the page: [ 117.995648][ C0] page:000000008b06fe0f refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x216cd [ 118.005856][ C0] flags: 0xfff00000000200(slab) [ 118.010683][ C0] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888010238640 [ 118.019241][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 118.027794][ C0] page dumped because: kasan: bad access detected [ 118.034178][ C0] page_owner tracks the page as allocated [ 118.039867][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5444, ts 117259364562 [ 118.054067][ C0] post_alloc_hook+0x144/0x1c0 [ 118.061068][ C0] get_page_from_freelist+0x1c6e/0x3f80 [ 118.066586][ C0] __alloc_pages_nodemask+0x2d6/0x730 [ 118.071930][ C0] allocate_slab+0x2b6/0x4a0 [ 118.076492][ C0] ___slab_alloc+0x476/0x790 [ 118.081055][ C0] __slab_alloc.constprop.0+0x95/0xe0 [ 118.086395][ C0] kmem_cache_alloc_node+0x389/0x470 [ 118.091657][ C0] __alloc_skb+0x42/0x4e0 [ 118.095964][ C0] ath9k_hif_usb_alloc_urbs+0x864/0xed0 [ 118.101481][ C0] ath9k_hif_usb_firmware_cb+0x121/0x4d0 [ 118.107089][ C0] request_firmware_work_func+0x126/0x230 [ 118.112780][ C0] process_one_work+0x84c/0x13b0 [ 118.117692][ C0] worker_thread+0x598/0xf80 [ 118.122257][ C0] kthread+0x36f/0x450 [ 118.126300][ C0] ret_from_fork+0x1f/0x30 [ 118.130690][ C0] page last free stack trace: [ 118.135357][ C0] free_pcp_prepare+0x2cb/0x410 [ 118.141070][ C0] free_unref_page+0x12/0x1b0 [ 118.145725][ C0] unfreeze_partials+0x16c/0x1b0 [ 118.150632][ C0] put_cpu_partial+0x129/0x200 [ 118.155371][ C0] qlist_free_all+0x5a/0xc0 [ 118.159847][ C0] quarantine_reduce+0x180/0x200 [ 118.164756][ C0] ____kasan_kmalloc.constprop.0+0x98/0xa0 [ 118.170558][ C0] __kmalloc+0x1db/0x3e0 [ 118.174788][ C0] tomoyo_realpath_from_path+0xb0/0x6a0 [ 118.180307][ C0] tomoyo_path_number_perm+0x1a6/0x4d0 [ 118.185737][ C0] security_file_ioctl+0x44/0x80 [ 118.190647][ C0] __x64_sys_ioctl+0x99/0x190 [ 118.195299][ C0] do_syscall_64+0x2d/0x70 [ 118.199691][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 118.205556][ C0] [ 118.207857][ C0] Memory state around the buggy address: [ 118.213463][ C0] ffff8880216cd480: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 118.221505][ C0] ffff8880216cd500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 118.229549][ C0] >ffff8880216cd580: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 118.237584][ C0] ^ [ 118.244229][ C0] ffff8880216cd600: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 118.252261][ C0] ffff8880216cd680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.260294][ C0] ================================================================== [ 118.268326][ C0] Disabling lock debugging due to kernel taint [ 118.274442][ C0] Kernel panic - not syncing: panic_on_warn set ... [ 118.281004][ C0] CPU: 0 PID: 0 Comm: swapper/0 Tainted: G B 5.11.0-syzkaller #0 [ 118.289995][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 118.300019][ C0] Call Trace: [ 118.303280][ C0] [ 118.306109][ C0] dump_stack+0x9a/0xcc [ 118.310237][ C0] panic+0x256/0x4eb [ 118.314101][ C0] ? __warn_printk+0xee/0xee [ 118.318665][ C0] ? kfree_skb+0x25/0x2c0 [ 118.322962][ C0] ? kfree_skb+0x25/0x2c0 [ 118.327259][ C0] end_report+0x58/0x5e [ 118.331384][ C0] kasan_report.cold+0x67/0xd5 [ 118.336116][ C0] ? kfree_skb+0x25/0x2c0 [ 118.340419][ C0] check_memory_region+0x13d/0x180 [ 118.345505][ C0] kfree_skb+0x25/0x2c0 [ 118.349648][ C0] ath9k_hif_usb_reg_in_cb+0x46b/0x600 [ 118.355096][ C0] __usb_hcd_giveback_urb+0x238/0x3f0 [ 118.360446][ C0] dummy_timer+0xeb8/0x2eb0 [ 118.364926][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 118.370901][ C0] ? dummy_dequeue+0x490/0x490 [ 118.375642][ C0] ? dummy_dequeue+0x490/0x490 [ 118.380374][ C0] call_timer_fn+0x163/0x4b0 [ 118.384935][ C0] ? add_timer_on+0x410/0x410 [ 118.389579][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 118.394403][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 118.399309][ C0] ? dummy_dequeue+0x490/0x490 [ 118.404038][ C0] ? lockdep_hardirqs_on_prepare+0x17b/0x400 [ 118.409985][ C0] ? dummy_dequeue+0x490/0x490 [ 118.414728][ C0] __run_timers.part.0+0x52a/0x8b0 [ 118.419807][ C0] ? hrtimer_interrupt+0x442/0x930 [ 118.424887][ C0] ? call_timer_fn+0x4b0/0x4b0 [ 118.429616][ C0] ? ktime_get+0x102/0x2c0 [ 118.434000][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 118.439169][ C0] ? sched_clock+0x2a/0x40 [ 118.443553][ C0] ? sched_clock_cpu+0x18/0x1f0 [ 118.448374][ C0] run_timer_softirq+0x9c/0x190 [ 118.453195][ C0] __do_softirq+0x29b/0x9f6 [ 118.457674][ C0] asm_call_irq_on_stack+0xf/0x20 [ 118.462668][ C0] [ 118.465573][ C0] do_softirq_own_stack+0xaa/0xd0 [ 118.470563][ C0] irq_exit_rcu+0x134/0x200 [ 118.475033][ C0] sysvec_apic_timer_interrupt+0x4d/0x100 [ 118.480724][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 118.486673][ C0] RIP: 0010:acpi_idle_do_entry+0x161/0x1c0 [ 118.492447][ C0] Code: 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 75 6d 48 8b 45 00 a8 08 75 c9 e8 8d 19 3a f9 e9 07 00 00 00 0f 00 2d a1 6c b4 00 fb f4 <9c> 58 fa f6 c4 02 74 ae 5d e9 e1 15 3a f9 48 89 ef 5d e9 c8 f9 ff [ 118.512024][ C0] RSP: 0018:ffffffff8a407d90 EFLAGS: 00000202 [ 118.518069][ C0] RAX: 0000000000094161 RBX: ffff888016608865 RCX: 1ffffffff1863dd1 [ 118.526008][ C0] RDX: 0000000000000000 RSI: ffffffff888afa60 RDI: ffffffff88ddc5c0 [ 118.533949][ C0] RBP: ffffffff8a4bb380 R08: 0000000000000001 R09: 0000000000000001 [ 118.541888][ C0] R10: fffffbfff1497670 R11: 0000000000000001 R12: 0000000000000001 [ 118.549829][ C0] R13: ffff888016608864 R14: ffffffff8b09e260 R15: ffff88801847b804 [ 118.557776][ C0] acpi_idle_enter+0x2c0/0x4b0 [ 118.562511][ C0] ? rcu_preempt_deferred_qs+0x13/0xe0 [ 118.567939][ C0] cpuidle_enter_state+0x152/0xb40 [ 118.573023][ C0] cpuidle_enter+0x45/0xa0 [ 118.577407][ C0] do_idle+0x3e1/0x590 [ 118.581447][ C0] ? arch_cpu_idle_exit+0x30/0x30 [ 118.586449][ C0] ? schedule+0xe6/0x270 [ 118.590671][ C0] cpu_startup_entry+0x14/0x20 [ 118.595402][ C0] start_kernel+0x330/0x34d [ 118.601182][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 118.607986][ C0] Kernel Offset: disabled [ 118.612313][ C0] Rebooting in 86400 seconds..