[ OK ] Started OpenBSD Secure Shell server. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.239' (ECDSA) to the list of known hosts. syzkaller login: [ 37.121264][ T17] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.361109][ T17] usb 1-1: Using ep0 maxpacket: 8 [ 37.481120][ T17] usb 1-1: config 0 has an invalid interface number: 135 but max is 0 [ 37.489553][ T17] usb 1-1: config 0 has an invalid descriptor of length 244, skipping remainder of the config [ 37.499861][ T17] usb 1-1: config 0 has no interface number 0 [ 37.506343][ T17] usb 1-1: config 0 interface 135 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 37.517124][ T17] usb 1-1: config 0 interface 135 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 37.681021][ T17] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=8a.cb [ 37.690125][ T17] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.698300][ T17] usb 1-1: Product: syz [ 37.702521][ T17] usb 1-1: Manufacturer: syz [ 37.707301][ T17] usb 1-1: SerialNumber: syz [ 37.714877][ T17] usb 1-1: config 0 descriptor?? [ 37.731944][ T4379] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 37.753669][ T17] ------------[ cut here ]------------ [ 37.759414][ T17] usb 1-1: BOGUS control dir, pipe 80000280 doesn't match bRequestType 40 [ 37.768342][ T17] WARNING: CPU: 1 PID: 17 at drivers/usb/core/urb.c:410 usb_submit_urb+0x14aa/0x1830 [ 37.778138][ T17] Modules linked in: [ 37.782102][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.13.0-rc2-syzkaller #0 [ 37.790359][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 37.800614][ T17] Workqueue: usb_hub_wq hub_event [ 37.805701][ T17] RIP: 0010:usb_submit_urb+0x14aa/0x1830 [ 37.811525][ T17] Code: 84 4c 01 00 00 e8 a6 14 b3 fd 4c 89 f7 e8 4e a7 1b ff 45 89 e8 44 89 e1 48 89 ea 48 89 c6 48 c7 c7 c0 09 63 86 e8 18 f1 fb 01 <0f> 0b 49 8d 4f 5c 48 b8 00 00 00 00 00 fc ff df 48 89 ca 48 89 4c [ 37.831505][ T17] RSP: 0018:ffffc9000012ef48 EFLAGS: 00010286 [ 37.837597][ T17] RAX: 0000000000000000 RBX: ffff88811a778058 RCX: 0000000000000000 [ 37.845621][ T17] RDX: ffff888100329b40 RSI: ffffffff812a6013 RDI: fffff52000025ddb [ 37.853659][ T17] RBP: ffff8881096fa730 R08: 0000000000000001 R09: 0000000000000000 [ 37.861700][ T17] R10: ffffffff814b996b R11: 0000000000000000 R12: 0000000080000280 [ 37.869690][ T17] R13: 0000000000000040 R14: ffff88811a7780a8 R15: ffff888109aa7e00 [ 37.877802][ T17] FS: 0000000000000000(0000) GS:ffff8881f6900000(0000) knlGS:0000000000000000 [ 37.886805][ T17] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.893455][ T17] CR2: 000055d88a58e160 CR3: 00000001096cf000 CR4: 00000000001506e0 [ 37.901613][ T17] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.909595][ T17] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.917795][ T17] Call Trace: [ 37.921133][ T17] usb_start_wait_urb+0x101/0x4c0 [ 37.926307][ T17] ? lock_downgrade+0x6e0/0x6e0 [ 37.931211][ T17