------------[ cut here ]------------ WARNING: CPU: 3 PID: 3771 at drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 ath6kl_htc_pipe_rx_complete+0xd7e/0x1090 drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 Modules linked in: CPU: 3 PID: 3771 Comm: kworker/3:4 Not tainted 5.18.0-syzkaller-10037-g7e284070abe5 #0 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 Workqueue: events ath6kl_usb_io_comp_work RIP: 0010:ath6kl_htc_pipe_rx_complete+0xd7e/0x1090 drivers/net/wireless/ath/ath6kl/htc_pipe.c:963 Code: e4 e8 e6 4d 39 04 48 c7 44 24 38 00 00 00 00 e9 7f fa ff ff e8 f3 7a 3a fc 8b 9c 24 8c 00 00 00 e9 8a f8 ff ff e8 e2 7a 3a fc <0f> 0b 48 c7 c7 80 a2 61 8a 41 bc ea ff ff ff e8 57 fc 0f 04 e9 50 RSP: 0018:ffffc9000306fba8 EFLAGS: 00010293 RAX: 0000000000000000 RBX: ffff888075140e60 RCX: 0000000000000000 RDX: ffff888071424200 RSI: ffffffff853f268e RDI: ffff888075140ed0 RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff900aa9df R10: ffffffff854403c9 R11: 0000000000000000 R12: ffff8880765d6000 R13: ffff888075140e60 R14: 0000000000000000 R15: ffff8880765d6920 FS: 0000000000000000(0000) GS:ffff88802cd00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000200011c0 CR3: 00000000768de000 CR4: 0000000000150ee0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: ath6kl_usb_io_comp_work+0x11e/0x160 drivers/net/wireless/ath/ath6kl/usb.c:603 process_one_work+0x996/0x1610 kernel/workqueue.c:2289 worker_thread+0x665/0x1080 kernel/workqueue.c:2436 kthread+0x2e9/0x3a0 kernel/kthread.c:376 ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:302