[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Starting Load/Save RF Kill Switch Status... [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.1.17' (ECDSA) to the list of known hosts. syzkaller login: [ 56.748443][ T1177] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.108549][ T1177] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 57.118581][ T1177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.135618][ T1177] usb 1-1: config 0 descriptor?? [ 57.399371][ T25] ------------[ cut here ]------------ [ 57.405485][ T25] WARNING: CPU: 1 PID: 25 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 57.418627][ T25] Modules linked in: [ 57.422519][ T25] CPU: 1 PID: 25 Comm: kworker/1:1 Not tainted 5.15.0-rc5-syzkaller #0 [ 57.431267][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.441403][ T25] Workqueue: events ath6kl_usb_io_comp_work [ 57.447297][ T25] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 57.454009][ T25] Code: e4 e8 22 c9 24 04 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 9f ce 62 fc 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 8e ce 62 fc <0f> 0b 48 c7 c7 e0 6c 1c 8a 41 bc ea ff ff ff e8 85 2b fc 03 e9 50 [ 57.473840][ T25] RSP: 0018:ffffc90000dffbb0 EFLAGS: 00010293 [ 57.479939][ T25] RAX: 0000000000000000 RBX: ffff88806cf10d60 RCX: 0000000000000000 [ 57.487906][ T25] RDX: ffff888011fc5580 RSI: ffffffff85132ff2 RDI: ffff88806cf10dd0 [ 57.495930][ T25] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8fcfc9ef [ 57.503958][ T25] R10: ffffffff85180a09 R11: 1ffffffff1ead3fd R12: ffff888078172000 [ 57.512015][ T25] R13: ffff88806cf10d60 R14: 0000000000000000 R15: ffff888078172920 [ 57.520050][ T25] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 57.529088][ T25] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.535669][ T25] CR2: 0000559df65ad160 CR3: 0000000073292000 CR4: 0000000000350ee0 [ 57.543673][ T25] Call Trace: [ 57.546942][ T25] ? skb_dequeue