[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Serial Getty on ttyS0. [ OK ] Started Getty on tty1. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.42' (ECDSA) to the list of known hosts. syzkaller login: [ 67.827271][ T37] audit: type=1400 audit(1625909556.876:8): avc: denied { execmem } for pid=8441 comm="syz-executor582" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 [ 68.096865][ T8137] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.346803][ T8137] usb 1-1: Using ep0 maxpacket: 16 [ 68.467290][ T8137] usb 1-1: config index 0 descriptor too short (expected 57, got 27) [ 68.475551][ T8137] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 68.487218][ T8137] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ac.31 [ 68.496266][ T8137] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.508291][ T8137] usb 1-1: config 0 descriptor?? [ 68.551461][ T8137] ------------[ cut here ]------------ [ 68.558375][ T8137] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 68.564703][ T8137] WARNING: CPU: 1 PID: 8137 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 [ 68.576068][ T8137] Modules linked in: [ 68.580797][ T8137] CPU: 1 PID: 8137 Comm: kworker/1:3 Tainted: G W 5.13.0-syzkaller #0 [ 68.591407][ T8137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 68.602348][ T8137] Workqueue: usb_hub_wq hub_event [ 68.607961][ T8137] RIP: 0010:usb_submit_urb+0xd27/0x1540 [ 68.613503][ T8137] Code: 84 d4 02 00 00 e8 a9 78 23 fc 4c 89 ef e8 a1 85 0c ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 20 f2 26 8a e8 c0 65 8e 03 <0f> 0b e9 81 f8 ff ff e8 7d 78 23 fc 48 81 c5 40 06 00 00 e9 ad f7 [ 68.634060][ T8137] RSP: 0018:ffffc9000c7c7058 EFLAGS: 00010282 [ 68.640457][ T8137] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 68.648606][ T8137] RDX: ffff88801771a240 RSI: ffffffff815ca6f5 RDI: fffff520018f8dfd [ 68.656652][ T8137] RBP: ffff88803b1d3e00 R08: 0000000000000000 R09: 0000000000000000 [ 68.664904][ T8137] R10: ffffffff815c452e R11: 0000000000000000 R12: 0000000000000003 [ 68.673114][ T8137] R13: ffff88802447a0a8 R14: ffff888018eb8f40 R15: ffff888016e42800 [ 68.681138][ T8137] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 68.690128][ T8137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 68.696870][ T8137] CR2: 00007f90c9efe000 CR3: 000000001916a000 CR4: 00000000001506e0 [ 68.704855][ T8137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 68.713102][ T8137] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 68.721166][ T8137] Call Trace: [ 68.724480][ T8137] ? usb_get_urb.part.0+0x43/0x90 [ 68.729604][ T8137] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 68.735437][ T8137] ? trace_hardirqs_on+0x5b/0x1c0 [ 68.740497][ T8137] mcba_usb_probe+0x88e/0xc30 [ 68.745206][ T8137] ? mcba_set_termination+0x100/0x100 [ 68.7