[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.127' (ECDSA) to the list of known hosts. syzkaller login: [ 57.454004][ T3131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.462213][ T3131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.492334][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.517710][ T3131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.526108][ T3131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.535840][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.832589][ T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.072529][ T20] usb 1-1: Using ep0 maxpacket: 32 [ 58.232646][ T20] usb 1-1: unable to get BOS descriptor or descriptor too short [ 58.312555][ T20] usb 1-1: config 0 has an invalid interface number: 201 but max is 2 [ 58.321386][ T20] usb 1-1: config 0 has an invalid interface number: 222 but max is 2 [ 58.330113][ T20] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 58.338867][ T20] usb 1-1: config 0 has an invalid interface descriptor of length 2, skipping [ 58.347836][ T20] usb 1-1: config 0 has an invalid interface number: 251 but max is 2 [ 58.356051][ T20] usb 1-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 58.364764][ T20] usb 1-1: config 0 has no interface number 0 [ 58.370832][ T20] usb 1-1: config 0 has no interface number 1 [ 58.377193][ T20] usb 1-1: config 0 has no interface number 2 [ 58.383324][ T20] usb 1-1: config 0 interface 201 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 58.394201][ T20] usb 1-1: config 0 interface 201 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 32 [ 58.404181][ T20] usb 1-1: config 0 interface 201 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 58.414965][ T20] usb 1-1: config 0 interface 201 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 58.425708][ T20] usb 1-1: config 0 interface 201 altsetting 8 endpoint 0xA has an invalid bInterval 63, changing to 9 [ 58.436917][ T20] usb 1-1: config 0 interface 222 altsetting 9 has an invalid endpoint with address 0x80, skipping [ 58.447660][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 58.458647][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 58.469400][ T20] usb 1-1: config 0 interface 222 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 58.480083][ T20] usb 1-1: config 0 interface 222 altsetting 9 endpoint 0x4 has invalid maxpacket 80, setting to 64 [ 58.491233][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 58.502003][ T20] usb 1-1: config 0 interface 222 altsetting 9 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 58.513025][ T20] usb 1-1: config 0 interface 222 altsetting 9 has an invalid endpoint descriptor of length 2, skipping [ 58.525060][ T20] usb 1-1: config 0 interface 222 altsetting 9 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 58.536056][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 58.547003][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 58.558136][ T20] usb 1-1: config 0 interface 222 altsetting 9 endpoint 0x1 has invalid maxpacket 264, setting to 64 [ 58.569065][ T20] usb 1-1: config 0 interface 222 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 58.579841][ T20] usb 1-1: config 0 interface 222 altsetting 9 has 16 endpoint descriptors, different from the interface descriptor's value: 15 [ 58.593115][ T20] usb 1-1: config 0 interface 251 altsetting 125 has a duplicate endpoint with address 0x4, skipping [ 58.604111][ T20] usb 1-1: config 0 interface 251 altsetting 125 has an invalid endpoint with address 0x0, skipping [ 58.615398][ T20] usb 1-1: config 0 interface 251 altsetting 125 has a duplicate endpoint with address 0x1, skipping [ 58.626947][ T20] usb 1-1: config 0 interface 251 altsetting 125 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 58.638577][ T20] usb 1-1: config 0 interface 251 altsetting 125 has a duplicate endpoint with address 0x8, skipping [ 58.649958][ T20] usb 1-1: config 0 interface 201 has no altsetting 0 [ 58.657369][ T20] usb 1-1: config 0 interface 222 has no altsetting 0 [ 58.664807][ T20] usb 1-1: config 0 interface 251 has no altsetting 0 [ 58.902432][ T20] usb 1-1: language id specifier not provided by device, defaulting to English [ 59.372904][ T36] Bluetooth: hci0: command 0x0409 tx timeout [ 59.422392][ T20] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.05 [ 59.431751][ T20] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.440664][ T20] usb 1-1: SerialNumber: syz [ 59.448328][ T20] usb 1-1: config 0 descriptor?? [ 59.473185][ T8436] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 59.787739][ T20] ------------[ cut here ]------------ [ 59.794758][ T20] usb 1-1: BOGUS urb xfer, pipe 2 != type 3 [ 59.802029][ T20] WARNING: CPU: 1 PID: 20 at drivers/usb/core/urb.c:502 usb_submit_urb+0xed2/0x18a0 [ 59.812276][ T20] Modules linked in: [ 59.816354][ T20] CPU: 1 PID: 20 Comm: kworker/1:0 Not tainted 5.14.0-rc5-syzkaller #0 [ 59.825303][ T20] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 59.835599][ T20] Workque