Warning: Permanently added '10.128.0.189' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 35.865758][ T69] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.225885][ T69] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 36.235008][ T69] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.246213][ T69] usb 1-1: config 0 descriptor?? [ 36.506397][ T23] ------------[ cut here ]------------ [ 36.511936][ T23] WARNING: CPU: 1 PID: 23 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.524392][ T23] Modules linked in: [ 36.528335][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 5.16.0-rc5-syzkaller #0 [ 36.536594][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.546687][ T23] Workqueue: events ath6kl_usb_io_comp_work [ 36.552587][ T23] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.559291][ T23] Code: e4 e8 32 eb b7 02 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 2f 79 2b fe 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 1e 79 2b fe <0f> 0b 48 c7 c7 40 90 73 86 41 bc ea ff ff ff e8 f2 49 96 02 e9 50 [ 36.579041][ T23] RSP: 0018:ffffc90000197bb0 EFLAGS: 00010293 [ 36.585112][ T23] RAX: 0000000000000000 RBX: ffff88811a5b0da0 RCX: 0000000000000000 [ 36.593139][ T23] RDX: ffff8881083bb800 RSI: ffffffff83181232 RDI: ffff88811a5b0e10 [ 36.601385][ T23] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8a7b684f [ 36.609401][ T23] R10: ffffffff831ceb89 R11: 1ffffffff13f7858 R12: ffff88810a9e4000 [ 36.617427][ T23] R13: ffff88811a5b0da0 R14: 0000000000000000 R15: ffff88810a9e4920 [ 36.625714][ T23] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 36.634669][ T23] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.641339][ T23] CR2: 00007f5a82afb130 CR3: 00000001045f6000 CR4: 00000000003506e0 executing program [ 36.649361][ T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.657495][ T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.665470][ T23] Call Trace: [ 36.668850][ T23] [ 36.671784][ T23] ? skb_dequeue+0x125/0x180 [ 36.676468][ T23] ? mark_held_locks+0x9f/0xe0 [ 36.681238][ T23] ? htc_try_send.isra.0+0x2460/0x2460 [ 36.686760][ T23] ? lockdep_hardirqs_on+0x79/0x100 [ 36.691974][ T23] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 36.699624][ T23] ath6kl_usb_io_comp_work+0x11e/0x160 [ 36.705132][ T23] process_one_work+0x9b2/0x1690 [ 36.710152][ T23] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 36.715547][ T23] ? rwlock_bug.part.0+0x90/0x90 [ 36.720531][ T23] ? _raw_spin_lock_irq+0x41/0x50 [ 36.725565][ T23] worker_thread+0x658/0x11f0 [ 36.730310][ T23] ? process_one_work+0x1690/0x1690 [ 36.735517][ T23] kthread+0x40b/0x500 [ 36.739619][ T23] ? set_kthread_struct+0x130/0x130 [ 36.744826][ T23] ret_from_fork+0x1f/0x30 [ 36.749277][ T23] [ 36.752295][ T23] Kernel panic - not syncing: panic_on_warn set ... [ 36.758861][ T23] CPU: 1 PID: 23 Comm: kworker/1:1 Not tainted 5.16.0-rc5-syzkaller #0 [ 36.767080][ T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 36.777210][ T23] Workqueue: events ath6kl_usb_io_comp_work [ 36.783096][ T23] Call Trace: [ 36.786452][ T23] [ 36.789366][ T23] dump_stack_lvl+0xcd/0x134 [ 36.793946][ T23] panic+0x2b0/0x6dd [ 36.797899][ T23] ? __warn_printk+0xf3/0xf3 [ 36.802506][ T23] ? __warn.cold+0x1a/0x44 [ 36.806919][ T23] ? ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.812992][ T23] __warn.cold+0x35/0x44 [ 36.817227][ T23] ? ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.823282][ T23] report_bug+0x1bd/0x210 [ 36.827602][ T23] handle_bug+0x3c/0x60 [ 36.831749][ T23] exc_invalid_op+0x14/0x40 [ 36.836240][ T23] asm_exc_invalid_op+0x12/0x20 [ 36.841080][ T23] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.847921][ T23] Code: e4 e8 32 eb b7 02 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 2f 79 2b fe 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 1e 79 2b fe <0f> 0b 48 c7 c7 40 90 73 86 41 bc ea ff ff ff e8 f2 49 96 02 e9 50 [ 36.867519][ T23] RSP: 0018:ffffc90000197bb0 EFLAGS: 00010293 [ 36.873575][ T23] RAX: 0000000000000000 RBX: ffff88811a5b0da0 RCX: 0000000000000000 [ 36.881531][ T23] RDX: ffff8881083bb800 RSI: ffffffff83181232 RDI: ffff88811a5b0e10 [ 36.889596][ T23] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8a7b684f [ 36.897558][ T23] R10: ffffffff831ceb89 R11: 1ffffffff13f7858 R12: ffff88810a9e4000 [ 36.905650][ T23] R13: ffff88811a5b0da0 R14: 0000000000000000 R15: ffff88810a9e4920 [ 36.913834][ T23] ? ath6kl_usb_io_comp_work+0xc9/0x160 [ 36.919399][ T23] ? ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 36.925475][ T23] ? skb_dequeue+0x125/0x180 [ 36.930058][ T23] ? mark_held_locks+0x9f/0xe0 [ 36.934811][ T23] ? htc_try_send.isra.0+0x2460/0x2460 [ 36.940261][ T23] ? lockdep_hardirqs_on+0x79/0x100 [ 36.945535][ T23] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 36.951330][ T23] ath6kl_usb_io_comp_work+0x11e/0x160 [ 36.956784][ T23] process_one_work+0x9b2/0x1690 [ 36.961804][ T23] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 36.967163][ T23] ? rwlock_bug.part.0+0x90/0x90 [ 36.972094][ T23] ? _raw_spin_lock_irq+0x41/0x50 [ 36.977117][ T23] worker_thread+0x658/0x11f0 [ 36.981790][ T23] ? process_one_work+0x1690/0x1690 [ 36.986982][ T23] kthread+0x40b/0x500 [ 36.991057][ T23] ? set_kthread_struct+0x130/0x130 [ 36.996240][ T23] ret_from_fork+0x1f/0x30 [ 37.000643][ T23] [ 37.004029][ T23] Kernel Offset: disabled [ 37.008388][ T23] Rebooting in 86400 seconds..