[ OK ] Started Getty on tty1. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.70' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 67.577904][ T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 67.937841][ T7] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 67.947024][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.959035][ T7] usb 1-1: config 0 descriptor?? [ 68.218898][ T1178] ------------[ cut here ]------------ [ 68.224486][ T1178] WARNING: CPU: 0 PID: 1178 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 68.236995][ T1178] Modules linked in: [ 68.241006][ T1178] CPU: 0 PID: 1178 Comm: kworker/0:2 Not tainted 5.15.0-rc2-next-20210920-syzkaller #0 [ 68.250686][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.260841][ T1178] Workqueue: events ath6kl_usb_io_comp_work [ 68.266740][ T1178] RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd82/0x1090 [ 68.273483][ T1178] Code: e4 e8 32 fe 23 04 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 5f 93 64 fc 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 4e 93 64 fc <0f> 0b 48 c7 c7 e0 8a 1c 8a 41 bc ea ff ff ff e8 5c 92 fb 03 e9 50 [ 68.293211][ T1178] RSP: 0018:ffffc90004f67bb0 EFLAGS: 00010293 [ 68.299332][ T1178] RAX: 0000000000000000 RBX: ffff88806f620d60 RCX: 0000000000000000 [ 68.307306][ T1178] RDX: ffff88801d019d00 RSI: ffffffff85118e02 RDI: ffff88806f620dd0 [ 68.315395][ T1178] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff8fd06a0f [ 68.323448][ T1178] R10: ffffffff85166809 R11: 1ffffffff1e8f2b0 R12: ffff88801a258000 [ 68.331549][ T1178] R13: ffff88806f620d60 R14: 0000000000000000 R15: ffff88801a258920 [ 68.339588][ T1178] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 68.348630][ T1178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.355257][ T1178] CR2: 000055a109136180 CR3: 000000000b68e000 CR4: 00000000001506f0 [ 68.363276][ T1178] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.371343][ T1178] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.379362][ T1178] Call Trace: [ 68.382643][ T1178] ? skb_dequeue+0x125/0x180 [ 68.387241][ T1178] ? mark_held_locks+0x9f/0xe0 [ 68.392109][ T1178] ? htc_try_send.isra.0+0x2460/0x2460 [ 68.397655][ T1178] ? lockdep_hardirqs_on+0x79/0x100 [ 68.402878][ T1178] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 68.410432][ T1178] ath6kl_usb_io_comp_work+0x11e/0x160 [ 68.415932][ T1178] process_one_work+0x9b