[ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Started OpenBSD Secure Shell server. [ OK ] Started getty on tty2-tty6 if dbus and logind are not available. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.224' (ECDSA) to the list of known hosts. syzkaller login: [ 70.387357][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 70.747292][ T5] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 70.917298][ T5] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.926351][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.934945][ T5] usb 1-1: Product: syz [ 70.939777][ T5] usb 1-1: Manufacturer: syz [ 70.944380][ T5] usb 1-1: SerialNumber: syz [ 70.989545][ T5] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 71.637159][ T5] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 71.857718][ T5] ------------[ cut here ]------------ [ 71.863357][ T5] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.870246][ T5] WARNING: CPU: 0 PID: 5 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 [ 71.880081][ T5] Modules linked in: [ 71.884000][ T5] CPU: 0 PID: 5 Comm: kworker/0:0 Not tainted 5.12.0-rc4-next-20210326-syzkaller #0 [ 71.894210][ T5] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 71.904476][ T5] Workqueue: events request_firmware_work_func [ 71.910760][ T5] RIP: 0010:usb_submit_urb+0xd27/0x1540 [ 71.922297][ T5] Code: 84 d4 02 00 00 e8 89 ab 2e fc 4c 89 ef e8 31 d9 0f ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 a0 9a 05 8a e8 bc fb 84 03 <0f> 0b e9 81 f8 ff ff e8 5d ab 2e fc 48 81 c5 40 06 00 00 e9 ad f7 [ 71.942099][ T5] RSP: 0018:ffffc90000ca7820 EFLAGS: 00010286 [ 71.948257][ T5] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 71.956237][ T5] RDX: ffff888011b50000 RSI: ffffffff815c3fd5 RDI: fffff52000194ef6 [ 71.964372][ T5] RBP: ffff888027f5e000 R08: 0000000000000000 R09: 0000000000000000 [ 71.972432][ T5] R10: ffffffff815bd77e R11: 0000000000000000 R12: 0000000000000001 [ 71.980740][ T5] R13: ffff88801a5750a8 R14: ffff8881440eefa0 R15: ffff888012706f00 [ 71.988793][ T5] FS: 0000000000000000(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 71.997855][ T5] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 72.004442][ T5] CR2: 000055c2d9dd0180