Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.37' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 55.938759][ T4882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 56.198294][ T4882] usb 1-1: Using ep0 maxpacket: 8 [ 56.318426][ T4882] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 56.329079][ T4882] usb 1-1: New USB device found, idVendor=1690, idProduct=0710, bcdDevice=c0.56 [ 56.339153][ T4882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.350901][ T4882] usb 1-1: config 0 descriptor?? [ 56.394454][ T4882] usb 1-1: could not send command 0x1, error=-2 [ 56.401259][ T4882] usb 1-1: could not initialize adapter [ 56.408186][ C0] usb 1-1: RX USB error -2. [ 56.413051][ C0] usb 1-1: error -1 when submitting rx urb [ 56.426398][ T4882] ar5523: probe of 1-1:0.0 failed with error -2 [ 56.590343][ T36] usb 1-1: USB disconnect, device number 2 [ 57.148143][ T36] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 57.508274][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 57.519347][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 57.529745][ T36] usb 1-1: New USB device found, idVendor=1690, idProduct=0710, bcdDevice=c0.56 [ 57.539120][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.551909][ T36] usb 1-1: config 0 descriptor?? [ 57.568387][ T8419] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 57.589883][ T36] ------------[ cut here ]------------ [ 57.595337][ T36] usb 1-1: BOGUS urb xfer, pipe 3 != type 1 [ 57.602166][ T36] WARNING: CPU: 1 PID: 36 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 [ 57.611871][ T36] Modules linked in: [ 57.615757][ T36] CPU: 1 PID: 36 Comm: kworker/1:1 Not tainted 5.13.0-rc3-syzkaller #0 [ 57.624139][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.634337][ T36] Workqueue: usb_hub_wq hub_event [ 57.639637][ T36] RIP: 0010:usb_submit_urb+0xd27/0x1540 [ 57.645187][ T36] Code: 84 d4 02 00 00 e8 c9 5c 29 fc 4c 89 ef e8 d1 6c 0e ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 60 92 06 8a e8 ac 63 89 03 <0f> 0b e9 81 f8 ff ff e8 9d 5c 29 fc 48 81 c5 40 06 00 00 e9 ad f7 [ 57.665070][ T36] RSP: 0018:ffffc90000e3efd8 EFLAGS: 00010286 [ 57.671299][ T36] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000000 [ 57.679427][ T36] RDX: ffff888015db8000 RSI: ffffffff815cdf95 RDI: fffff520001c7ded [ 57.687394][ T36] RBP: ffff88801d902f80 R08: 0000000000000000 R09: 0000000000000000 [ 57.695489][ T36] R10: ffffffff815c7dfe R11: 0000000000000000 R12: 0000000000000003 [ 57.703542][ T36] R13: ffff888013fc50a8 R14: ffff8880215b1f00 R15: ffff888027656600 [ 57.711566][ T36] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 57.720766][ T36] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.727345][ T36] CR2: 00005591696e8160 CR3: 000000002856f000 CR4: 0000000000350ee0 [ 57.735347][ T36] Call Trace: [ 57.738696][ T36] ar5523_submit_rx_cmd+0x1f1/0x320 [ 57.743886][ T36] ar5523_probe+0xc06/0x1dc0 [ 57.748515][ T36] ? ar5523_data_tx_cb+0x450/0x450 [ 57.753625][ T36] ? mark_held_locks+0x9f/0xe0 [ 57.758438][ T36] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 57.764257][ T36] ? lockdep_hardirqs_on+0x79/0x100 [