Warning: Permanently added '10.128.0.44' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 57.729369][ T3801] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 58.109973][ T3801] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 58.118599][ T3801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 58.128702][ T3801] usb 1-1: config 0 has no interface number 0 [ 58.135034][ T3801] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 58.146136][ T3801] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 58.155447][ T3801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.168951][ T3801] usb 1-1: config 0 descriptor?? [ 58.211983][ T3801] em28xx 1-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 58.222064][ T3801] em28xx 1-1:0.237: Audio interface 237 found (Vendor Class) executing program [ 58.469313][ T3801] em28xx 1-1:0.237: unknown em28xx chip ID (0) [ 58.499997][ T3801] em28xx 1-1:0.237: Config register raw data: 0xfffffffb [ 58.529356][ T3801] em28xx 1-1:0.237: AC97 chip type couldn't be determined [ 58.536674][ T3801] em28xx 1-1:0.237: No AC97 audio processor [ 58.546683][ T3801] em28xx 1-1:0.237: We currently don't support analog TV or stream capture on dual tuners. [ 58.679309][ T3801] em28xx 1-1:0.237: unknown em28xx chip ID (0) [ 58.699287][ T3801] em28xx 1-1:0.237: Config register raw data: 0xfffffffb [ 58.719302][ T3801] em28xx 1-1:0.237: AC97 chip type couldn't be determined [ 58.726601][ T3801] em28xx 1-1:0.237: No AC97 audio processor [ 58.975932][ T3801] usb 1-1: USB disconnect, device number 2 [ 58.983944][ T3801] em28xx 1-1:0.237: Disconnecting em28xx #1 [ 58.993209][ T3801] em28xx 1-1:0.237: Disconnecting em28xx [ 59.002930][ T3801] em28xx 1-1:0.237: Freeing device [ 59.008077][ T3801] em28xx 1-1:0.237: Freeing device [ 59.379150][ T3801] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 59.779245][ T3801] usb 1-1: config 0 has an invalid interface number: 237 but max is 0 [ 59.788102][ T3801] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 59.799921][ T3801] usb 1-1: config 0 has no interface number 0 [ 59.805987][ T3801] usb 1-1: config 0 interface 237 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 59.817950][ T3801] usb 1-1: New USB device found, idVendor=2040, idProduct=826d, bcdDevice=98.19 [ 59.827424][ T3801] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.840541][ T3801] usb 1-1: config 0 descriptor?? [ 59.891270][ T3801] em28xx 1-1:0.237: New device @ 480 Mbps (2040:826d, interface 237, class 237) [ 59.901120][ T3801] em28xx 1-1:0.237: Audio interface 237 found (Vendor Class) executing program [ 60.129718][ T3801] em28xx 1-1:0.237: unknown em28xx chip ID (0) [ 60.149057][ T3801] em28xx 1-1:0.237: Config register raw data: 0xfffffffb [ 60.169088][ T3801] em28xx 1-1:0.237: AC97 chip type couldn't be determined [ 60.176286][ T3801] em28xx 1-1:0.237: No AC97 audio processor [ 60.186344][ T3801] list_add corruption. prev->next should be next (ffffffff8d2483a0), but was 0000000000000000. (prev=ffff888018420250). [ 60.199741][ T3801] ------------[ cut here ]------------ [ 60.205181][ T3801] kernel BUG at lib/list_debug.c:26! [ 60.211189][ T3801] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 60.217415][ T3801] CPU: 1 PID: 3801 Comm: kworker/1:2 Not tainted 5.13.0-rc5-syzkaller #0 [ 60.225809][ T3801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 60.235852][ T3801] Workqueue: usb_hub_wq hub_event [ 60.240887][ T3801] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 60.246796][ T3801] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 80 eb c2 89 e8 40 a5 f2 ff 0f 0b 48 89 f1 48 c7 c7 00 eb c2 89 4c 89 e6 e8 2c a5 f2 ff <0f> 0b 48 89 ee 48 c7 c7 a0 ec c2 89 e8 1b a5 f2 ff 0f 0b 4c 89 ea [ 60.266598][ T3801] RSP: 0018:ffffc90003bfef90 EFLAGS: 00010282 [ 60.272647][ T3801] RAX: 0000000000000075 RBX: ffff88801e73d000 RCX: 0000000000000000 [ 60.281124][ T3801] RDX: ffff888022621c40 RSI: ffffffff815ce2a5 RDI: fffff5200077fde4 [ 60.289088][ T3801] RBP: ffff888018210250 R08: 0000000000000075 R09: 0000000000000000 [ 60.297047][ T3801] R10: ffffffff815c810e R11: 0000000000000000 R12: ffffffff8d2483a0 [ 60.305006][ T3801] R13: ffff888018210000 R14: ffff88801821013c R15: ffff88802943f000 [ 60.313126][ T3801] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 60.322038][ T3801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.328691][ T3801] CR2: 00007fc963509000 CR3: 000000001856a000 CR4: 0000000000350ee0 [ 60.336841][ T3801] Call Trace: [ 60.340107][ T3801] em28xx_init_extension+0x44/0x1f0 [ 60.345304][ T3801] em28xx_init_dev.constprop.0+0xa8b/0x172f [ 60.351190][ T3801] ? __dev_printk+0xcf/0xf5 [ 60.355688][ T3801] ? _dev_info+0xd7/0x109 [ 60.360198][ T3801] ? em28xx_pre_card_setup+0x5c0/0x5c0 [ 60.365649][ T3801] ? lockdep_init_map_type+0x2c3/0x7b0 [ 60.371096][ T3801] ? lockdep_init_map_type+0x2c3/0x7b0 [ 60.376549][ T3801] ? __raw_spin_lock_init+0x36/0x110 [ 60.381906][ T3801] em28xx_usb_probe.cold+0xc23/0x2599 [ 60.387269][ T3801] usb_probe_interface+0x315/0x7f0 [ 60.392366][ T3801] ? usb_match_dynamic_id+0x1a0/0x1a0 [ 60.397724][ T3801] really_probe+0x291/0xf60 [ 60.402385][ T3801] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 60.408616][ T3801] driver_probe_device+0x298/0x410 [ 60.413894][ T3801] __device_attach_driver+0x203/0x2c0 [ 60.419252][ T3801] ? driver_allows_async_probing+0x150/0x150 [ 60.425217][ T3801] bus_for_each_drv+0x15f/0x1e0 [ 60.430051][ T3801] ? bus_for_each_dev+0x1d0/0x1d0 [ 60.435056][ T3801] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 60.441065][ T3801] ? lockdep_hardirqs_on+0x79/0x100 [ 60.446250][ T3801] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 60.452038][ T3801] __device_attach+0x228/0x4b0 [ 60.456785][ T3801] ? __driver_attach_async_helper+0x330/0x330 [ 60.462835][ T3801] ? kobject_uevent_env+0x2bb/0x1650 [ 60.468107][ T3801] bus_probe_device+0x1e4/0x290 [ 60.472941][ T3801] device_add+0xbe0/0x2100 [ 60.477345][ T3801] ? wait_for_completion_io+0x270/0x270 [ 60.482877][ T3801] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 60.489105][ T3801] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 60.495139][ T3801] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.501366][ T3801] usb_set_configuration+0x113f/0x1910 [ 60.506904][ T3801] usb_generic_driver_probe+0xba/0x100 [ 60.512347][ T3801] usb_probe_device+0xd9/0x2c0 [ 60.517096][ T3801] ? usb_driver_release_interface+0x180/0x180 [ 60.523153][ T3801] really_probe+0x291/0xf60 [ 60.527709][ T3801] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 60.534019][ T3801] driver_probe_device+0x298/0x410 [ 60.539113][ T3801] __device_attach_driver+0x203/0x2c0 [ 60.544472][ T3801] ? driver_allows_async_probing+0x150/0x150 [ 60.550610][ T3801] bus_for_each_drv+0x15f/0x1e0 [ 60.555454][ T3801] ? bus_for_each_dev+0x1d0/0x1d0 [ 60.560483][ T3801] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 60.566271][ T3801] ? lockdep_hardirqs_on+0x79/0x100 [ 60.571453][ T3801] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 60.577241][ T3801] __device_attach+0x228/0x4b0 [ 60.581989][ T3801] ? __driver_attach_async_helper+0x330/0x330 [ 60.588036][ T3801] ? kobject_uevent_env+0x2bb/0x1650 [ 60.593307][ T3801] bus_probe_device+0x1e4/0x290 [ 60.598250][ T3801] device_add+0xbe0/0x2100 [ 60.602663][ T3801] ? __fw_devlink_link_to_suppliers+0x5e0/0x5e0 [ 60.608888][ T3801] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 60.615130][ T3801] usb_new_device.cold+0x721/0x1058 [ 60.620314][ T3801] ? hub_disconnect+0x510/0x510 [ 60.625152][ T3801] ? rwlock_bug.part.0+0x90/0x90 [ 60.630075][ T3801] ? _raw_spin_unlock_irq+0x1f/0x40 [ 60.635266][ T3801] hub_event+0x2357/0x4330 [ 60.639670][ T3801] ? hub_port_debounce+0x3c0/0x3c0 [ 60.644851][ T3801] ? lock_release+0x720/0x720 [ 60.649512][ T3801] ? lock_downgrade+0x6e0/0x6e0 [ 60.654348][ T3801] ? do_raw_spin_lock+0x120/0x2b0 [ 60.659360][ T3801] process_one_work+0x98d/0x1600 [ 60.664288][ T3801] ? pwq_dec_nr_in_flight+0x320/0x320 [ 60.669645][ T3801] ? rwlock_bug.part.0+0x90/0x90 [ 60.674566][ T3801] ? _raw_spin_lock_irq+0x41/0x50 [ 60.679574][ T3801] worker_thread+0x82b/0x1120 [ 60.684239][ T3801] ? __kthread_parkme+0x13f/0x1e0 [ 60.689246][ T3801] ? process_one_work+0x1600/0x1600 [ 60.694431][ T3801] kthread+0x3b1/0x4a0 [ 60.698482][ T3801] ? __kthread_bind_mask+0xc0/0xc0 [ 60.703577][ T3801] ret_from_fork+0x1f/0x30 [ 60.707981][ T3801] Modules linked in: [ 60.718924][ T3801] ---[ end trace 65e4e107b1ec47bf ]--- [ 60.724551][ T3801] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 60.737095][ T3801] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 80 eb c2 89 e8 40 a5 f2 ff 0f 0b 48 89 f1 48 c7 c7 00 eb c2 89 4c 89 e6 e8 2c a5 f2 ff <0f> 0b 48 89 ee 48 c7 c7 a0 ec c2 89 e8 1b a5 f2 ff 0f 0b 4c 89 ea [ 60.757371][ T3801] RSP: 0018:ffffc90003bfef90 EFLAGS: 00010282 [ 60.763944][ T3801] RAX: 0000000000000075 RBX: ffff88801e73d000 RCX: 0000000000000000 [ 60.772371][ T3801] RDX: ffff888022621c40 RSI: ffffffff815ce2a5 RDI: fffff5200077fde4 [ 60.780583][ T3801] RBP: ffff888018210250 R08: 0000000000000075 R09: 0000000000000000 [ 60.788542][ T3801] R10: ffffffff815c810e R11: 0000000000000000 R12: ffffffff8d2483a0 [ 60.796897][ T3801] R13: ffff888018210000 R14: ffff88801821013c R15: ffff88802943f000 [ 60.805127][ T3801] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 60.814510][ T3801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 60.821498][ T3801] CR2: 00007fc963513000 CR3: 000000001856a000 CR4: 0000000000350ee0 [ 60.829739][ T3801] Kernel panic - not syncing: Fatal exception [ 60.841866][ T3801] Kernel Offset: disabled [ 60.846355][ T3801] Rebooting in 86400 seconds..