[ OK ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch. [ OK ] Started Getty on tty6. [ OK ] Started Getty on tty5. [ OK ] Started Getty on tty4. [ OK ] Started Getty on tty3. [ OK ] Started Getty on tty2. [ OK ] Started Getty on tty1. [ OK ] Started Serial Getty on ttyS0. [ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Warning: Permanently added '10.128.0.236' (ECDSA) to the list of known hosts. [ 74.865890][ T35] audit: type=1400 audit(1613226936.913:8): avc: denied { execmem } for pid=8409 comm="syz-executor139" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 75.145365][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.505387][ T32] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 75.675398][ T32] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 75.684582][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.693230][ T32] usb 1-1: Product: syz [ 75.698001][ T32] usb 1-1: Manufacturer: syz [ 75.702590][ T32] usb 1-1: SerialNumber: syz [ 75.760536][ T32] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 76.365418][ T32] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 76.586137][ T32] ------------[ cut here ]------------ [ 76.591621][ T32] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 76.598213][ T32] WARNING: CPU: 1 PID: 32 at drivers/usb/core/urb.c:493 usb_submit_urb+0xd27/0x1540 [ 76.608062][ T32] Modules linked in: [ 76.612072][ T32] CPU: 1 PID: 32 Comm: kworker/1:1 Not tainted 5.11.0-rc7-syzkaller #0 [ 76.620524][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.630835][ T32] Workqueue: events request_firmware_work_func [ 76.637099][ T32] RIP: 0010:usb_submit_urb+0xd27/0x1540 [ 76.642665][ T32] Code: 84 d4 02 00 00 e8 99 73 3a fc 4c 89 ef e8 71 ca 11 ff 41 89 d8 44 89 e1 4c 89 f2 48 89 c6 48 c7 c7 80 12 e1 89 e8 b3 38 82 03 <0f> 0b e9 81 f8 ff ff e8 6d 73 3a fc 48 81 c5 38 06 00 00 e9 ad f7 [ 76.662420][ T32] RSP: 0018:ffffc90000e17820 EFLAGS: 00010286 [ 76.669278][ T32] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 76.677847][ T32] RDX: ffff888011d6e400 RSI: ffffffff815b7455 RDI: fffff520001c2ef6 [ 76.686079][ T32] RBP: ffff888017d90400 R08: 0000000000000000 R09: 0000000000000000 [ 76.697829][ T32] R10: ffffffff815b05fe R11: 0000000000000000 R12: 0000000000000001 [ 76.705863][ T32] R13: ffff88802d0f00a0 R14: ffff888011d88180 R15: ffff88801dd7f200 [ 76.713863][ T32] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 76.722932][ T32] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 76.729578][ T32] CR2: 00007f989134a710 CR3: 000000001c897000 CR4: 000000000015