[info] Using makefile-style concurrent boot in runlevel 2. [ 15.360360][ C1] random: crng init done [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.154' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.984662][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.224633][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 39.344707][ T22] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 39.352965][ T22] usb 1-1: config 0 has no interface number 0 [ 39.359291][ T22] usb 1-1: config 0 interface 203 altsetting 16 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.370712][ T22] usb 1-1: config 0 interface 203 has no altsetting 0 [ 39.377570][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=33.00 [ 39.386616][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.396241][ T22] usb 1-1: config 0 descriptor?? [ 39.436901][ T22] em28xx 1-1:0.203: New device @ 480 Mbps (2040:826d, interface 203, class 203) [ 39.446256][ T22] em28xx 1-1:0.203: Audio interface 203 found (Vendor Class) executing program [ 39.684662][ T22] em28xx 1-1:0.203: unknown em28xx chip ID (0) [ 39.704695][ T22] em28xx 1-1:0.203: Config register raw data: 0xfffffffb [ 39.724702][ T22] em28xx 1-1:0.203: AC97 chip type couldn't be determined [ 39.731851][ T22] em28xx 1-1:0.203: No AC97 audio processor [ 39.737818][ T22] em28xx 1-1:0.203: We currently don't support analog TV or stream capture on dual tuners. [ 39.874735][ T22] em28xx 1-1:0.203: unknown em28xx chip ID (0) [ 39.894681][ T22] em28xx 1-1:0.203: Config register raw data: 0xfffffffb [ 39.914672][ T22] em28xx 1-1:0.203: AC97 chip type couldn't be determined [ 39.921921][ T22] em28xx 1-1:0.203: No AC97 audio processor [ 40.168593][ T22] usb 1-1: USB disconnect, device number 2 [ 40.175867][ T22] em28xx 1-1:0.203: Disconnecting em28xx #1 [ 40.181775][ T22] em28xx 1-1:0.203: Disconnecting em28xx [ 40.189347][ T22] em28xx 1-1:0.203: Freeing device [ 40.194881][ T22] em28xx 1-1:0.203: Freeing device [ 40.544628][ T22] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.784622][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 40.904725][ T22] usb 1-1: config 0 has an invalid interface number: 203 but max is 0 [ 40.912903][ T22] usb 1-1: config 0 has no interface number 0 [ 40.919092][ T22] usb 1-1: config 0 interface 203 altsetting 16 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.930234][ T22] usb 1-1: config 0 interface 203 has no altsetting 0 [ 40.937075][ T22] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=33.00 [ 40.946134][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.956448][ T22] usb 1-1: config 0 descriptor?? [ 40.996392][ T22] em28xx 1-1:0.203: New device @ 480 Mbps (2040:826d, interface 203, class 203) [ 41.005686][ T22] em28xx 1-1:0.203: Audio interface 203 found (Vendor Class) executing program [ 41.244718][ T22] em28xx 1-1:0.203: unknown em28xx chip ID (0) [ 41.264723][ T22] em28xx 1-1:0.203: Config register raw data: 0xfffffffb [ 41.284681][ T22] em28xx 1-1:0.203: AC97 chip type couldn't be determined [ 41.291868][ T22] em28xx 1-1:0.203: No AC97 audio processor [ 41.297832][ T22] ------------[ cut here ]------------ [ 41.303398][ T22] list_add corruption. prev->next should be next (ffffffff87779de0), but was 0000000000000000. (prev=ffff8881d2f98240). [ 41.316219][ T22] WARNING: CPU: 1 PID: 22 at lib/list_debug.c:26 __list_add_valid+0x99/0xf0 [ 41.324878][ T22] Kernel panic - not syncing: panic_on_warn set ... [ 41.331445][ T22] CPU: 1 PID: 22 Comm: kworker/1:1 Not tainted 5.3.0+ #0 [ 41.338454][ T22] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.348504][ T22] Workqueue: usb_hub_wq hub_event [ 41.353503][ T22] Call Trace: [ 41.356773][ T22] dump_stack+0xca/0x13e [ 41.360992][ T22] ? __list_add_valid+0x50/0xf0 [ 41.365818][ T22] panic+0x2a3/0x6da [ 41.369693][ T22] ? add_taint.cold+0x16/0x16 [ 41.374345][ T22] ? __probe_kernel_read+0x188/0x1d0 [ 41.379603][ T22] ? __warn.cold+0x5/0x4a [ 41.383921][ T22] ? __warn+0xe3/0x1e0 [ 41.388924][ T22] ? __list_add_valid+0x99/0xf0 [ 41.393753][ T22] __warn.cold+0x20/0x4a [ 41.397977][ T22] ? __list_add_valid+0x99/0xf0 [ 41.402809][ T22] report_bug+0x262/0x2a0 [ 41.407118][ T22] do_error_trap+0x12b/0x1e0 [ 41.411686][ T22] ? __list_add_valid+0x99/0xf0 [ 41.416513][ T22] do_invalid_op+0x32/0x40 [ 41.420919][ T22] ? __list_add_valid+0x99/0xf0 [ 41.425749][ T22] invalid_op+0x23/0x30 [ 41.429894][ T22] RIP: 0010:__list_add_valid+0x99/0xf0 [ 41.435333][ T22] Code: 48 c7 c7 60 06 db 85 e8 2a 7a 30 ff 0f 0b 48 83 c4 08 31 c0 5d 41 5c c3 48 89 f1 48 c7 c7 20 07 db 85 4c 89 e6 e8 0c 7a 30 ff <0f> 0b 31 c0 eb c5 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 a0 07 db 85 [ 41.454918][ T22] RSP: 0018:ffff8881d9697120 EFLAGS: 00010286 [ 41.460958][ T22] RAX: 0000000000000000 RBX: ffff8881d2a3c120 RCX: 0000000000000000 [ 41.468905][ T22] RDX: 0000000000000000 RSI: ffffffff8128d3fd RDI: ffffed103b2d2e16 [ 41.476854][ T22] RBP: ffff8881d2a3c240 R08: ffff8881d9688000 R09: fffffbfff11f45af [ 41.484805][ T22] R10: fffffbfff11f45ae R11: ffffffff88fa2d77 R12: ffffffff87779de0 [ 41.492763][ T22] R13: ffff8881d2a3c000 R14: ffff8881d2a3c12c R15: ffff8881d2f61980 [ 41.500723][ T22] ? vprintk_func+0x7d/0x113 [ 41.505296][ T22] em28xx_init_extension+0x44/0x1f0 [ 41.510484][ T22] em28xx_init_dev.isra.0+0xa7b/0x15d8 [ 41.515922][ T22] ? _dev_info+0xd7/0x109 [ 41.520231][ T22] ? em28xx_usb_disconnect.cold+0x27a/0x27a [ 41.526116][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 41.531116][ T22] ? lockdep_init_map+0x1b0/0x5e0 [ 41.536139][ T22] em28xx_usb_probe.cold+0xcac/0x2516 [ 41.541491][ T22] usb_probe_interface+0x305/0x7a0 [ 41.546592][ T22] ? usb_probe_device+0x100/0x100 [ 41.551621][ T22] really_probe+0x281/0x6d0 [ 41.556106][ T22] driver_probe_device+0x104/0x210 [ 41.561196][ T22] __device_attach_driver+0x1c2/0x220 [ 41.566545][ T22] ? driver_allows_async_probing+0x160/0x160 [ 41.572504][ T22] bus_for_each_drv+0x162/0x1e0 [ 41.577342][ T22] ? bus_rescan_devices+0x20/0x20 [ 41.582357][ T22] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.588141][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 41.593404][ T22] __device_attach+0x217/0x360 [ 41.598151][ T22] ? device_bind_driver+0xd0/0xd0 [ 41.603158][ T22] ? kobject_uevent_env+0x29e/0x1150 [ 41.608426][ T22] ? kobject_uevent_env+0x2a8/0x1150 [ 41.613684][ T22] bus_probe_device+0x1e4/0x290 [ 41.618516][ T22] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.624475][ T22] device_add+0xae6/0x16f0 [ 41.628870][ T22] ? uevent_store+0x50/0x50 [ 41.633351][ T22] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.639143][ T22] usb_set_configuration+0xdf6/0x1670 [ 41.644494][ T22] generic_probe+0x9d/0xd5 [ 41.648889][ T22] usb_probe_device+0x99/0x100 [ 41.653631][ T22] ? usb_suspend+0x620/0x620 [ 41.658207][ T22] really_probe+0x281/0x6d0 [ 41.662688][ T22] driver_probe_device+0x104/0x210 [ 41.667815][ T22] __device_attach_driver+0x1c2/0x220 [ 41.673164][ T22] ? driver_allows_async_probing+0x160/0x160 [ 41.679133][ T22] bus_for_each_drv+0x162/0x1e0 [ 41.683961][ T22] ? bus_rescan_devices+0x20/0x20 [ 41.688963][ T22] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.694762][ T22] ? lockdep_hardirqs_on+0x382/0x580 [ 41.700035][ T22] __device_attach+0x217/0x360 [ 41.704904][ T22] ? device_bind_driver+0xd0/0xd0 [ 41.709912][ T22] ? kobject_uevent_env+0x29e/0x1150 [ 41.715191][ T22] ? kobject_uevent_env+0x2a8/0x1150 [ 41.720472][ T22] bus_probe_device+0x1e4/0x290 [ 41.725366][ T22] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.731251][ T22] device_add+0xae6/0x16f0 [ 41.735655][ T22] ? uevent_store+0x50/0x50 [ 41.740140][ T22] usb_new_device.cold+0x6a4/0xe79 [ 41.745237][ T22] hub_event+0x1b5c/0x3640 [ 41.749633][ T22] ? hub_port_debounce+0x260/0x260 [ 41.754722][ T22] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 41.760245][ T22] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 41.765531][ T22] process_one_work+0x92b/0x1530 [ 41.770450][ T22] ? pwq_dec_nr_in_flight+0x310/0x310 [ 41.775808][ T22] ? do_raw_spin_lock+0x11a/0x280 [ 41.780834][ T22] worker_thread+0x7ab/0xe20 [ 41.785414][ T22] ? process_one_work+0x1530/0x1530 [ 41.790588][ T22] kthread+0x318/0x420 [ 41.794634][ T22] ? kthread_create_on_node+0xf0/0xf0 [ 41.799985][ T22] ret_from_fork+0x24/0x30 [ 41.805254][ T22] Kernel Offset: disabled [ 41.809606][ T22] Rebooting in 86400 seconds..