Warning: Permanently added '10.128.0.53' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 32.808397][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 33.168449][ T22] usb 1-1: config 4 has an invalid interface number: 134 but max is 0 [ 33.176802][ T22] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 33.187403][ T22] usb 1-1: config 4 has no interface number 0 [ 33.193700][ T22] usb 1-1: config 4 interface 134 altsetting 7 endpoint 0x83 has wMaxPacketSize 0, skipping [ 33.205040][ T22] usb 1-1: config 4 interface 134 has no altsetting 0 [ 33.212028][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=d2.a2 [ 33.221603][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 33.508520][ T22] usb 1-1: string descriptor 0 read error: -71 [ 33.516839][ T22] em28xx 1-1:4.134: New device @ 480 Mbps (2040:826d, interface 134, class 134) [ 33.526188][ T22] em28xx 1-1:4.134: Audio interface 134 found (Vendor Class) [ 33.658384][ T22] em28xx 1-1:4.134: unknown em28xx chip ID (0) [ 33.678364][ T22] em28xx 1-1:4.134: Config register raw data: 0xfffffffb [ 33.698372][ T22] em28xx 1-1:4.134: AC97 chip type couldn't be determined [ 33.705672][ T22] em28xx 1-1:4.134: No AC97 audio processor [ 33.711647][ T22] em28xx 1-1:4.134: We currently don't support analog TV or stream capture on dual tuners. [ 33.848383][ T22] em28xx 1-1:4.134: unknown em28xx chip ID (0) [ 33.868357][ T22] em28xx 1-1:4.134: Config register raw data: 0xfffffffb [ 33.888360][ T22] em28xx 1-1:4.134: AC97 chip type couldn't be determined [ 33.895495][ T22] em28xx 1-1:4.134: No AC97 audio processor [ 34.140832][ T22] usb 1-1: USB disconnect, device number 2 [ 34.147699][ T22] em28xx 1-1:4.134: Disconnecting em28xx #1 [ 34.153924][ T22] em28xx 1-1:4.134: Disconnecting em28xx [ 34.161389][ T22] em28xx 1-1:4.134: Freeing device [ 34.166534][ T22] em28xx 1-1:4.134: Freeing device [ 34.518311][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 34.878409][ T22] usb 1-1: config 4 has an invalid interface number: 134 but max is 0 [ 34.886599][ T22] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 34.896810][ T22] usb 1-1: config 4 has no interface number 0 [ 34.902953][ T22] usb 1-1: config 4 interface 134 altsetting 7 endpoint 0x83 has wMaxPacketSize 0, skipping [ 34.913095][ T22] usb 1-1: config 4 interface 134 has no altsetting 0 [ 34.919905][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=d2.a2 [ 34.928967][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 35.238403][ T22] usb 1-1: string descriptor 0 read error: -71 [ 35.246360][ T22] em28xx 1-1:4.134: New device @ 480 Mbps (2040:826d, interface 134, class 134) [ 35.255696][ T22] em28xx 1-1:4.134: Audio interface 134 found (Vendor Class) [ 35.398397][ T22] em28xx 1-1:4.134: unknown em28xx chip ID (0) [ 35.418387][ T22] em28xx 1-1:4.134: Config register raw data: 0xfffffffb [ 35.438407][ T22] em28xx 1-1:4.134: AC97 chip type couldn't be determined [ 35.445705][ T22] em28xx 1-1:4.134: No AC97 audio processor [ 35.451690][ T22] ------------[ cut here ]------------ [ 35.458064][ T22] list_add corruption. prev->next should be next (ffffffff8753dbc0), but was 0000000000000000. (prev=ffff8881cf440240). [ 35.470690][ T22] WARNING: CPU: 1 PID: 22 at lib/list_debug.c:26 __list_add_valid+0x99/0xf0 [ 35.479358][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 35.486015][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.4.0-rc6+ #0 [ 35.493359][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 35.503400][ T22] Workqueue: usb_hub_wq hub_event [ 35.508403][ T22] Call Trace: [ 35.511681][ T22] dump_stack+0xca/0x13e [ 35.515915][ T22] ? __list_add_valid+0x40/0xf0 [ 35.520745][ T22] panic+0x2aa/0x6e1 [ 35.524620][ T22] ? add_taint.cold+0x16/0x16 [ 35.529281][ T22] ? __probe_kernel_read+0x188/0x1d0 [ 35.534542][ T22] ? __warn.cold+0x14/0x33 [ 35.538945][ T22] ? __warn+0xd5/0x1d0 [ 35.543018][ T22] ? __list_add_valid+0x99/0xf0 [ 35.547847][ T22] __warn.cold+0x2f/0x33 [ 35.552077][ T22] ? __list_add_valid+0x99/0xf0 [ 35.556904][ T22] report_bug+0x27b/0x2f0 [ 35.561212][ T22] do_error_trap+0x12b/0x1e0 [ 35.565777][ T22] ? __list_add_valid+0x99/0xf0 [ 35.570605][ T22] do_invalid_op+0x32/0x40 [ 35.575010][ T22] ? __list_add_valid+0x99/0xf0 [ 35.579849][ T22] invalid_op+0x23/0x30 [ 35.583985][ T22] RIP: 0010:__list_add_valid+0x99/0xf0 [ 35.589434][ T22] Code: 48 c7 c7 80 ba da 85 e8 5a 31 30 ff 0f 0b 48 83 c4 08 31 c0 5d 41 5c c3 48 89 f1 48 c7 c7 40 bb da 85 4c 89 e6 e8 3c 31 30 ff <0f> 0b 31 c0 eb c5 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 c0 bb da 85 [ 35.609120][ T22] RSP: 0018:ffff8881d93370e0 EFLAGS: 00010286 [ 35.615171][ T22] RAX: 0000000000000000 RBX: ffff8881cf440120 RCX: 0000000000000000 [ 35.623125][ T22] RDX: 0000000000000000 RSI: ffffffff8128c9cd RDI: ffffed103b266e0e [ 35.631073][ T22] RBP: ffff8881cf440240 R08: ffff8881d9328000 R09: fffffbfff11ab3af [ 35.639046][ T22] R10: fffffbfff11ab3ae R11: ffffffff88d59d77 R12: ffffffff8753dbc0 [ 35.646999][ T22] R13: ffff8881cf440000 R14: ffff8881cf44012c R15: ffff8881cf59f000 [ 35.655563][ T22] ? vprintk_func+0x7d/0x113 [ 35.660137][ T22] em28xx_init_extension+0x44/0x1f0 [ 35.665319][ T22] em28xx_init_dev.isra.0+0xa7b/0x15d8 [ 35.670859][ T22] ? _dev_info+0xd7/0x109 [ 35.675188][ T22] ? em28xx_usb_disconnect.cold+0x27a/0x27a [ 35.681175][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 35.686267][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 35.691360][ T22] em28xx_usb_probe.cold+0xcac/0x2516 [ 35.696712][ T22] usb_probe_interface+0x305/0x7a0 [ 35.701994][ T22] ? usb_probe_device+0x100/0x100 [ 35.707001][ T22] really_probe+0x281/0x6d0 [ 35.711494][ T22] driver_probe_device+0x104/0x210 [ 35.716583][ T22] __device_attach_driver+0x1c2/0x220 [ 35.721941][ T22] ? driver_allows_async_probing+0x160/0x160 [ 35.727897][ T22] bus_for_each_drv+0x162/0x1e0 [ 35.732734][ T22] ? bus_rescan_devices+0x20/0x20 [ 35.737739][ T22] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 35.743525][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 35.749057][ T22] __device_attach+0x217/0x360 [ 35.753804][ T22] ? device_bind_driver+0xd0/0xd0 [ 35.758811][ T22] ? kobject_uevent_env+0x29e/0x1160 [ 35.764094][ T22] ? kobject_uevent_env+0x2a8/0x1160 [ 35.769448][ T22] bus_probe_device+0x1e4/0x290 [ 35.774462][ T22] ? blocking_notifier_call_chain+0x54/0xa0 [ 35.781982][ T22] device_add+0xae6/0x16f0 [ 35.786378][ T22] ? uevent_store+0x50/0x50 [ 35.790958][ T22] usb_set_configuration+0xdf6/0x1670 [ 35.796956][ T22] generic_probe+0x9d/0xd5 [ 35.801352][ T22] usb_probe_device+0x99/0x100 [ 35.806534][ T22] ? usb_suspend+0x620/0x620 [ 35.811104][ T22] really_probe+0x281/0x6d0 [ 35.815589][ T22] driver_probe_device+0x104/0x210 [ 35.821203][ T22] __device_attach_driver+0x1c2/0x220 [ 35.826641][ T22] ? driver_allows_async_probing+0x160/0x160 [ 35.832631][ T22] bus_for_each_drv+0x162/0x1e0 [ 35.837833][ T22] ? bus_rescan_devices+0x20/0x20 [ 35.842852][ T22] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 35.848663][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 35.853944][ T22] __device_attach+0x217/0x360 [ 35.858731][ T22] ? device_bind_driver+0xd0/0xd0 [ 35.863830][ T22] ? kobject_uevent_env+0x29e/0x1160 [ 35.869111][ T22] ? kobject_uevent_env+0x2a8/0x1160 [ 35.874478][ T22] bus_probe_device+0x1e4/0x290 [ 35.879312][ T22] ? blocking_notifier_call_chain+0x54/0xa0 [ 35.885184][ T22] device_add+0xae6/0x16f0 [ 35.889579][ T22] ? uevent_store+0x50/0x50 [ 35.894075][ T22] usb_new_device.cold+0x6a4/0xe79 [ 35.899171][ T22] hub_event+0x1df8/0x3800 [ 35.903572][ T22] ? hub_port_debounce+0x260/0x260 [ 35.908674][ T22] ? find_held_lock+0x2d/0x110 [ 35.913858][ T22] ? mark_held_locks+0xe0/0xe0 [ 35.918600][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 35.924124][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 35.929388][ T22] process_one_work+0x92b/0x1530 [ 35.934303][ T22] ? pwq_dec_nr_in_flight+0x310/0x310 [ 35.939676][ T22] ? do_raw_spin_lock+0x11a/0x280 [ 35.944697][ T22] worker_thread+0x7ab/0xe20 [ 35.949276][ T22] ? process_one_work+0x1530/0x1530 [ 35.954883][ T22] kthread+0x318/0x420 [ 35.958929][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 35.964283][ T22] ret_from_fork+0x24/0x30 [ 35.969434][ T22] Kernel Offset: disabled [ 35.973802][ T22] Rebooting in 86400 seconds..