INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.35' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 37.295336][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 37.535283][ T83] usb 1-1: Using ep0 maxpacket: 16 [ 37.655396][ T83] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 37.663729][ T83] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 37.674040][ T83] usb 1-1: config 0 has no interface number 0 [ 37.680269][ T83] usb 1-1: config 0 interface 221 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 37.691340][ T83] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=d7.a5 [ 37.700379][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.709784][ T83] usb 1-1: config 0 descriptor?? [ 37.757764][ T83] em28xx 1-1:0.221: New device @ 480 Mbps (2040:826d, interface 221, class 221) [ 37.767138][ T83] em28xx 1-1:0.221: Audio interface 221 found (Vendor Class) executing program [ 38.005373][ T83] em28xx 1-1:0.221: unknown em28xx chip ID (0) [ 38.025407][ T83] em28xx 1-1:0.221: Config register raw data: 0xfffffffb [ 38.045386][ T83] em28xx 1-1:0.221: AC97 chip type couldn't be determined [ 38.052547][ T83] em28xx 1-1:0.221: No AC97 audio processor [ 38.058566][ T83] em28xx 1-1:0.221: We currently don't support analog TV or stream capture on dual tuners. [ 38.195346][ T83] em28xx 1-1:0.221: unknown em28xx chip ID (0) [ 38.215336][ T83] em28xx 1-1:0.221: Config register raw data: 0xfffffffb [ 38.235298][ T83] em28xx 1-1:0.221: AC97 chip type couldn't be determined [ 38.242511][ T83] em28xx 1-1:0.221: No AC97 audio processor [ 38.488119][ T83] usb 1-1: USB disconnect, device number 2 [ 38.495787][ T83] em28xx 1-1:0.221: Disconnecting em28xx #1 [ 38.501712][ T83] em28xx 1-1:0.221: Disconnecting em28xx [ 38.509455][ T83] em28xx 1-1:0.221: Freeing device [ 38.514593][ T83] em28xx 1-1:0.221: Freeing device [ 38.865274][ T83] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.105280][ T83] usb 1-1: Using ep0 maxpacket: 16 [ 39.225394][ T83] usb 1-1: config 0 has an invalid interface number: 221 but max is 0 [ 39.233713][ T83] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.243997][ T83] usb 1-1: config 0 has no interface number 0 [ 39.250200][ T83] usb 1-1: config 0 interface 221 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 39.261273][ T83] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=d7.a5 [ 39.270315][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.279551][ T83] usb 1-1: config 0 descriptor?? [ 39.317304][ T83] em28xx 1-1:0.221: New device @ 480 Mbps (2040:826d, interface 221, class 221) [ 39.326611][ T83] em28xx 1-1:0.221: Audio interface 221 found (Vendor Class) executing program [ 39.575304][ T83] em28xx 1-1:0.221: unknown em28xx chip ID (0) [ 39.595344][ T83] em28xx 1-1:0.221: Config register raw data: 0xfffffffb [ 39.615347][ T83] em28xx 1-1:0.221: AC97 chip type couldn't be determined [ 39.622553][ T83] em28xx 1-1:0.221: No AC97 audio processor [ 39.628577][ T83] ------------[ cut here ]------------ [ 39.634241][ T83] list_add corruption. prev->next should be next (ffffffff87779de0), but was ffffffff8352fdcc. (prev=ffff8881d2ecc240). [ 39.646847][ T83] WARNING: CPU: 1 PID: 83 at lib/list_debug.c:26 __list_add_valid+0x99/0xf0 [ 39.655501][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 39.662081][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.3.0+ #0 [ 39.669146][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.679237][ T83] Workqueue: usb_hub_wq hub_event [ 39.684247][ T83] Call Trace: [ 39.687534][ T83] dump_stack+0xca/0x13e [ 39.691769][ T83] ? __list_add_valid+0x50/0xf0 [ 39.696613][ T83] panic+0x2a3/0x6da [ 39.700496][ T83] ? add_taint.cold+0x16/0x16 [ 39.705151][ T83] ? __probe_kernel_read+0x188/0x1d0 [ 39.710416][ T83] ? __warn.cold+0x5/0x4a [ 39.714721][ T83] ? __warn+0xe3/0x1e0 [ 39.718769][ T83] ? __list_add_valid+0x99/0xf0 [ 39.723602][ T83] __warn.cold+0x20/0x4a [ 39.727843][ T83] ? __list_add_valid+0x99/0xf0 [ 39.732688][ T83] report_bug+0x262/0x2a0 [ 39.737014][ T83] do_error_trap+0x12b/0x1e0 [ 39.741594][ T83] ? __list_add_valid+0x99/0xf0 [ 39.746420][ T83] do_invalid_op+0x32/0x40 [ 39.750821][ T83] ? __list_add_valid+0x99/0xf0 [ 39.755670][ T83] invalid_op+0x23/0x30 [ 39.759819][ T83] RIP: 0010:__list_add_valid+0x99/0xf0 [ 39.765258][ T83] Code: 48 c7 c7 60 06 db 85 e8 2a 7a 30 ff 0f 0b 48 83 c4 08 31 c0 5d 41 5c c3 48 89 f1 48 c7 c7 20 07 db 85 4c 89 e6 e8 0c 7a 30 ff <0f> 0b 31 c0 eb c5 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 a0 07 db 85 [ 39.784952][ T83] RSP: 0018:ffff8881d93cf120 EFLAGS: 00010286 [ 39.791031][ T83] RAX: 0000000000000000 RBX: ffff8881d2810120 RCX: 0000000000000000 [ 39.799052][ T83] RDX: 0000000000000000 RSI: ffffffff8128d3fd RDI: ffffed103b279e16 [ 39.807021][ T83] RBP: ffff8881d2810240 R08: ffff8881d92a3000 R09: fffffbfff11f45af [ 39.814974][ T83] R10: fffffbfff11f45ae R11: ffffffff88fa2d77 R12: ffffffff87779de0 [ 39.822940][ T83] R13: ffff8881d2810000 R14: ffff8881d281012c R15: ffff8881d2c84400 [ 39.830902][ T83] ? vprintk_func+0x7d/0x113 [ 39.835474][ T83] em28xx_init_extension+0x44/0x1f0 [ 39.840652][ T83] em28xx_init_dev.isra.0+0xa7b/0x15d8 [ 39.846123][ T83] ? _dev_info+0xd7/0x109 [ 39.850430][ T83] ? em28xx_usb_disconnect.cold+0x27a/0x27a [ 39.856303][ T83] ? lockdep_init_map+0x1b0/0x5e0 [ 39.861308][ T83] ? lockdep_init_map+0x1b0/0x5e0 [ 39.866313][ T83] em28xx_usb_probe.cold+0xcac/0x2516 [ 39.871663][ T83] usb_probe_interface+0x305/0x7a0 [ 39.876751][ T83] ? usb_probe_device+0x100/0x100 [ 39.881756][ T83] really_probe+0x281/0x6d0 [ 39.886416][ T83] driver_probe_device+0x104/0x210 [ 39.891505][ T83] __device_attach_driver+0x1c2/0x220 [ 39.896853][ T83] ? driver_allows_async_probing+0x160/0x160 [ 39.902896][ T83] bus_for_each_drv+0x162/0x1e0 [ 39.907727][ T83] ? bus_rescan_devices+0x20/0x20 [ 39.912734][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 39.918518][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 39.923796][ T83] __device_attach+0x217/0x360 [ 39.928538][ T83] ? device_bind_driver+0xd0/0xd0 [ 39.933544][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 39.938807][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 39.944068][ T83] bus_probe_device+0x1e4/0x290 [ 39.948903][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 39.954787][ T83] device_add+0xae6/0x16f0 [ 39.959182][ T83] ? uevent_store+0x50/0x50 [ 39.963676][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 39.969553][ T83] usb_set_configuration+0xdf6/0x1670 [ 39.974913][ T83] generic_probe+0x9d/0xd5 [ 39.979375][ T83] usb_probe_device+0x99/0x100 [ 39.984121][ T83] ? usb_suspend+0x620/0x620 [ 39.988697][ T83] really_probe+0x281/0x6d0 [ 39.993185][ T83] driver_probe_device+0x104/0x210 [ 39.998280][ T83] __device_attach_driver+0x1c2/0x220 [ 40.003648][ T83] ? driver_allows_async_probing+0x160/0x160 [ 40.009784][ T83] bus_for_each_drv+0x162/0x1e0 [ 40.014615][ T83] ? bus_rescan_devices+0x20/0x20 [ 40.019618][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.025404][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 40.030667][ T83] __device_attach+0x217/0x360 [ 40.035446][ T83] ? device_bind_driver+0xd0/0xd0 [ 40.040468][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 40.045736][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 40.051022][ T83] bus_probe_device+0x1e4/0x290 [ 40.055857][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 40.061742][ T83] device_add+0xae6/0x16f0 [ 40.066158][ T83] ? uevent_store+0x50/0x50 [ 40.070642][ T83] usb_new_device.cold+0x6a4/0xe79 [ 40.075732][ T83] hub_event+0x1b5c/0x3640 [ 40.080130][ T83] ? hub_port_debounce+0x260/0x260 [ 40.085221][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 40.090745][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 40.096005][ T83] process_one_work+0x92b/0x1530 [ 40.100928][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 40.106286][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 40.111314][ T83] worker_thread+0x7ab/0xe20 [ 40.115886][ T83] ? process_one_work+0x1530/0x1530 [ 40.121061][ T83] kthread+0x318/0x420 [ 40.125109][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 40.130465][ T83] ret_from_fork+0x24/0x30 [ 40.135792][ T83] Kernel Offset: disabled [ 40.140198][ T83] Rebooting in 86400 seconds..