[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 16.296742][ C1] random: crng init done [ 16.301043][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.77' (ECDSA) to the list of known hosts. executing program [ 23.278289][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.638192][ T21] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 23.808107][ T21] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 23.817139][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 23.825202][ T21] usb 1-1: Product: syz [ 23.829452][ T21] usb 1-1: Manufacturer: syz [ 23.834049][ T21] usb 1-1: SerialNumber: syz [ 23.878961][ T21] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 24.497769][ T21] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 24.717932][ T21] ------------[ cut here ]------------ [ 24.723417][ T21] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 24.729595][ T21] WARNING: CPU: 1 PID: 21 at drivers/usb/core/urb.c:493 usb_submit_urb+0xce2/0x14e0 [ 24.739068][ T21] Kernel panic - not syncing: panic_on_warn set ... [ 24.745662][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.9.0-rc8-syzkaller #0 [ 24.753804][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 24.763852][ T21] Workqueue: events request_firmware_work_func [ 24.769982][ T21] Call Trace: [ 24.773254][ T21] dump_stack+0x107/0x16e [ 24.777581][ T21] panic+0x2cb/0x702 [ 24.781463][ T21] ? __warn_printk+0xf3/0xf3 [ 24.786048][ T21] ? console_unlock+0x68f/0xcd0 [ 24.790886][ T21] ? __warn.cold+0x5/0x44 [ 24.795209][ T21] ? __warn+0xd6/0x1f2 [ 24.799355][ T21] ? usb_submit_urb+0xce2/0x14e0 [ 24.804278][ T21] __warn.cold+0x20/0x44 [ 24.808502][ T21] ? irq_work_queue+0x44/0x50 [ 24.813162][ T21] ? usb_submit_urb+0xce2/0x14e0 [ 24.818075][ T21] report_bug+0x1bd/0x210 [ 24.822385][ T21] handle_bug+0x41/0x80 [ 24.826524][ T21] exc_invalid_op+0x14/0x40 [ 24.831008][ T21] asm_exc_invalid_op+0x12/0x20 [ 24.835833][ T21] RIP: 0010:usb_submit_urb+0xce2/0x14e0 [ 24.841354][ T21] Code: 84 04 03 00 00 e8 3e 98 c6 fd 4c 89 ef e8 66 b6 12 ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 20 b3 5d 86 e8 d0 ba 9a fd <0f> 0b e9 c6 f8 ff ff e8 12 98 c6 fd 48 81 c5 40 06 00 00 e9 f2 f7 [ 24.860936][ T21] RSP: 0018:ffff8881da33f808 EFLAGS: 00010286 [ 24.866988][ T