[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.238' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.598877][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.958697][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 32.967990][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.979700][ T32] usb 1-1: config 0 descriptor?? [ 33.239124][ T1549] ------------[ cut here ]------------ [ 33.244806][ T1549] WARNING: CPU: 1 PID: 1549 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.257363][ T1549] Modules linked in: [ 33.261383][ T1549] CPU: 1 PID: 1549 Comm: kworker/1:2 Not tainted 5.11.0-rc5-syzkaller #0 [ 33.269847][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.280005][ T1549] Workqueue: events ath6kl_usb_io_comp_work [ 33.286117][ T1549] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.292836][ T1549] Code: e4 e8 d0 3f aa 02 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 cd 74 3e fe 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 bc 74 3e fe <0f> 0b 48 c7 c7 c0 13 4f 86 41 bc ea ff ff ff e8 a7 38 89 02 e9 50 [ 33.312563][ T1549] RSP: 0018:ffffc90004987bb0 EFLAGS: 00010293 [ 33.318683][ T1549] RAX: 0000000000000000 RBX: ffff8881132b0c80 RCX: 0000000000000000 [ 33.326675][ T1549] RDX: ffff88810575d040 RSI: ffffffff83012784 RDI: ffff8881132b0cf0 [ 33.334908][ T1549] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8a1c2677 [ 33.342938][ T1549] R10: ffffffff8305fe99 R11: 0000000000000000 R12: ffff888113778000 [ 33.350996][ T1549] R13: ffff8881132b0c80 R14: 0000000000000000 R15: ffff888113778920 [ 33.359040][ T1549] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 33.367993][ T1549] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.374678][ T1549] CR2: 00000000004b30f0 CR3: 00000001087ee000 CR4: 00000000001506e0 executing program [ 33.382709][ T1549] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.390782][ T1549] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.398831][ T1549] Call Trace: [ 33.402119][ T1549] ? skb_dequeue+0x125/0x180 [ 33.406719][ T1549] ? mark_held_locks+0x9f/0xe0 [ 33.411565][ T1549] ? htc_try_send.isra.0+0x2430/0x2430 [ 33.417051][ T1549] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 33.422932][ T1549] ? trace_hardirqs_on+0x5b/0x1a0 [ 33.427981][ T1549] ath6kl_usb_io_comp_work+0x11e/0x160 [ 33.435194][ T1549] process_one_work+0x98d/0x1580 [ 33.440225][ T1549] ? pwq_dec_nr_in_flight+0x320/0x320 [ 33.445630][ T1549] ? rwlock_bug.part.0+0x90/0x90 [ 33.450661][ T1549] worker_thread+0x64c/0x1120 [ 33.455363][ T1549] ? __kthread_parkme+0x118/0x1d0 [ 33.460469][ T1549] ? process_one_work+0x1580/0x1580 [ 33.465695][ T1549] kthread+0x38c/0x460 [ 33.469879][ T1549] ? _raw_spin_unlock_irq+0x1f/0x30 [ 33.475094][ T1549] ? __kthread_bind_mask+0xc0/0xc0 [ 33.480247][ T1549] ret_from_fork+0x1f/0x30 [ 33.484686][ T1549] Kernel panic - not syncing: panic_on_warn set ... [ 33.491281][ T1549] CPU: 1 PID: 1549 Comm: kworker/1:2 Not tainted 5.11.0-rc5-syzkaller #0 [ 33.499711][ T1549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 33.509771][ T1549] Workqueue: events ath6kl_usb_io_comp_work [ 33.515665][ T1549] Call Trace: [ 33.518963][ T1549] dump_stack+0x107/0x163 [ 33.523327][ T1549] panic+0x306/0x73d [ 33.527211][ T1549] ? __warn_printk+0xf3/0xf3 [ 33.531804][ T1549] ? __warn.cold+0x1a/0x44 [ 33.536205][ T1549] ? ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.542268][ T1549] __warn.cold+0x35/0x44 [ 33.546504][ T1549] ? ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.552576][ T1549] report_bug+0x1bd/0x210 [ 33.556905][ T1549] handle_bug+0x3c/0x60 [ 33.561060][ T1549] exc_invalid_op+0x14/0x40 [ 33.565579][ T1549] asm_exc_invalid_op+0x12/0x20 [ 33.570440][ T1549] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.577107][ T1549] Code: e4 e8 d0 3f aa 02 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 cd 74 3e fe 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 bc 74 3e fe <0f> 0b 48 c7 c7 c0 13 4f 86 41 bc ea ff ff ff e8 a7 38 89 02 e9 50 [ 33.596706][ T1549] RSP: 0018:ffffc90004987bb0 EFLAGS: 00010293 [ 33.602765][ T1549] RAX: 0000000000000000 RBX: ffff8881132b0c80 RCX: 0000000000000000 [ 33.610735][ T1549] RDX: ffff88810575d040 RSI: ffffffff83012784 RDI: ffff8881132b0cf0 [ 33.618698][ T1549] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8a1c2677 [ 33.626658][ T1549] R10: ffffffff8305fe99 R11: 0000000000000000 R12: ffff888113778000 [ 33.634633][ T1549] R13: ffff8881132b0c80 R14: 0000000000000000 R15: ffff888113778920 [ 33.642596][ T1549] ? ath6kl_usb_io_comp_work+0xc9/0x160 [ 33.648139][ T1549] ? ath6kl_htc_pipe_rx_complete+0xd54/0x1060 [ 33.654236][ T1549] ? skb_dequeue+0x125/0x180 [ 33.658816][ T1549] ? mark_held_locks+0x9f/0xe0 [ 33.663570][ T1549] ? htc_try_send.isra.0+0x2430/0x2430 [ 33.669032][ T1549] ? _raw_spin_unlock_irqrestore+0x34/0x40 [ 33.674842][ T1549] ? trace_hardirqs_on+0x5b/0x1a0 [ 33.679854][ T1549] ath6kl_usb_io_comp_work+0x11e/0x160 [ 33.685321][ T1549] process_one_work+0x98d/0x1580 [ 33.690250][ T1549] ? pwq_dec_nr_in_flight+0x320/0x320 [ 33.695611][ T1549] ? rwlock_bug.part.0+0x90/0x90 [ 33.700544][ T1549] worker_thread+0x64c/0x1120 [ 33.705233][ T1549] ? __kthread_parkme+0x118/0x1d0 [ 33.710262][ T1549] ? process_one_work+0x1580/0x1580 [ 33.715450][ T1549] kthread+0x38c/0x460 [ 33.719506][ T1549] ? _raw_spin_unlock_irq+0x1f/0x30 [ 33.724694][ T1549] ? __kthread_bind_mask+0xc0/0xc0 [ 33.729793][ T1549] ret_from_fork+0x1f/0x30 [ 33.734780][ T1549] Kernel Offset: disabled [ 33.739185][ T1549] Rebooting in 86400 seconds..