Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 syzkaller login: [ 17.926101][ C1] random: crng init done [ 17.930550][ C1] random: 7 urandom warning(s) missed due to ratelimiting Warning: Permanently added '10.128.0.78' (ECDSA) to the list of known hosts. executing program [ 46.310756][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.530715][ T95] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 46.539039][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 46.549504][ T95] usb 1-1: config 0 has no interface number 0 [ 46.555693][ T95] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 46.566918][ T95] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 46.576936][ T95] usb 1-1: config 0 interface 200 has no altsetting 0 [ 46.583837][ T95] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=df.77 [ 46.592944][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.603215][ T95] usb 1-1: config 0 descriptor?? [ 46.643352][ T95] em28xx 1-1:0.200: New device @ 480 Mbps (2040:0265, interface 200, class 200) [ 46.652802][ T95] em28xx 1-1:0.200: Audio interface 200 found (Vendor Class) executing program [ 46.910573][ T95] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 46.930798][ T95] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 46.950498][ T95] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 46.957712][ T95] em28xx 1-1:0.200: No AC97 audio processor [ 46.964306][ T95] em28xx 1-1:0.200: We currently don't support analog TV or stream capture on dual tuners. [ 47.100526][ T95] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 47.120474][ T95] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 47.140473][ T95] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 47.147655][ T95] em28xx 1-1:0.200: No AC97 audio processor [ 47.395829][ T95] usb 1-1: USB disconnect, device number 2 [ 47.403383][ T95] em28xx 1-1:0.200: Disconnecting em28xx #1 [ 47.409289][ T95] em28xx 1-1:0.200: Disconnecting em28xx [ 47.417653][ T95] em28xx 1-1:0.200: Freeing device [ 47.422894][ T95] em28xx 1-1:0.200: Freeing device [ 47.780241][ T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.990271][ T95] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 47.998482][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 48.008747][ T95] usb 1-1: config 0 has no interface number 0 [ 48.014926][ T95] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 48.026150][ T95] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 48.036247][ T95] usb 1-1: config 0 interface 200 has no altsetting 0 [ 48.043147][ T95] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=df.77 [ 48.052283][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.061980][ T95] usb 1-1: config 0 descriptor?? [ 48.102570][ T95] em28xx 1-1:0.200: New device @ 480 Mbps (2040:0265, interface 200, class 200) [ 48.111948][ T95] em28xx 1-1:0.200: Audio interface 200 found (Vendor Class) executing program [ 48.350162][ T95] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 48.370135][ T95] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 48.390131][ T95] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 48.397267][ T95] em28xx 1-1:0.200: No AC97 audio processor [ 48.405939][ T95] list_add corruption. prev->next should be next (ffffffff87a78700), but was ffffffff836c57de. (prev=ffff8881cd0b4250). [ 48.418766][ T95] ------------[ cut here ]------------ [ 48.424242][ T95] kernel BUG at lib/list_debug.c:26! [ 48.429721][ T95] invalid opcode: 0000 [#1] SMP KASAN [ 48.435093][ T95] CPU: 1 PID: 95 Comm: kworker/1:2 Not tainted 5.7.0-rc1-syzkaller #0 [ 48.443217][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.453265][ T95] Workqueue: usb_hub_wq hub_event [ 48.458279][ T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 48.464155][ T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 c0 4e fc 85 e8 34 89 3d ff 0f 0b 48 89 f1 48 c7 c7 40 4e fc 85 4c 89 e6 e8 20 89 3d ff <0f> 0b 48 89 ee 48 c7 c7 e0 4f fc 85 e8 0f 89 3d ff 0f 0b 4c 89 ea [ 48.483773][ T95] RSP: 0018:ffff8881d576eff0 EFLAGS: 00010282 [ 48.489832][ T95] RAX: 0000000000000075 RBX: ffff8881cc8dc130 RCX: 0000000000000000 [ 48.497817][ T95] RDX: 0000000000000000 RSI: ffffffff812a2d8d RDI: ffffed103aaeddf0 [ 48.505770][ T95] RBP: ffff8881cc8dc250 R08: 0000000000000075 R09: ffffed103b666292 [ 48.513725][ T95] R10: ffff8881db33148f R11: ffffed103b666291 R12: ffffffff87a78700 [ 48.521692][ T95] R13: ffff8881cc8dc000 R14: ffff8881cc8dc13c R15: ffff8881ccefd000 [ 48.529669][ T95] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 48.538590][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.545177][ T95] CR2: 000055b9310ec780 CR3: 00000001d20d9000 CR4: 00000000001406e0 [ 48.553146][ T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.561119][ T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.569104][ T95] Call Trace: [ 48.572393][ T95] em28xx_init_extension+0x44/0x1f0 [ 48.577578][ T95] em28xx_init_dev.isra.0+0xa80/0x15dd [ 48.583029][ T95] ? _dev_info+0xd7/0x109 [ 48.587353][ T95] ? em28xx_usb_disconnect.cold+0x284/0x284 [ 48.593261][ T95] ? lockdep_init_map_waits+0x26a/0x7c0 [ 48.598788][ T95] ? lockdep_init_map_waits+0x26a/0x7c0 [ 48.604313][ T95] em28xx_usb_probe.cold+0xcac/0x2520 [ 48.609666][ T95] usb_probe_interface+0x310/0x800 [ 48.614759][ T95] ? usb_probe_device+0x230/0x230 [ 48.619762][ T95] really_probe+0x290/0xac0 [ 48.624250][ T95] driver_probe_device+0x223/0x350 [ 48.629342][ T95] __device_attach_driver+0x1d1/0x290 [ 48.634735][ T95] ? driver_allows_async_probing+0x160/0x160 [ 48.640827][ T95] bus_for_each_drv+0x162/0x1e0 [ 48.645779][ T95] ? bus_rescan_devices+0x20/0x20 [ 48.651019][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 48.656821][ T95] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 48.662089][ T95] __device_attach+0x21a/0x390 [ 48.666842][ T95] ? device_bind_driver+0xd0/0xd0 [ 48.671866][ T95] bus_probe_device+0x1e4/0x290 [ 48.676712][ T95] device_add+0x1367/0x1c20 [ 48.681194][ T95] ? wait_for_completion+0x280/0x280 [ 48.686475][ T95] ? device_link_remove+0x110/0x110 [ 48.691663][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 48.697454][ T95] usb_set_configuration+0xed4/0x1850 [ 48.702829][ T95] usb_generic_driver_probe+0x9d/0xe0 [ 48.708189][ T95] usb_probe_device+0xd9/0x230 [ 48.712938][ T95] ? usb_suspend+0x600/0x600 [ 48.717559][ T95] really_probe+0x290/0xac0 [ 48.722057][ T95] driver_probe_device+0x223/0x350 [ 48.727191][ T95] __device_attach_driver+0x1d1/0x290 [ 48.732556][ T95] ? driver_allows_async_probing+0x160/0x160 [ 48.738643][ T95] bus_for_each_drv+0x162/0x1e0 [ 48.743491][ T95] ? bus_rescan_devices+0x20/0x20 [ 48.748670][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 48.754465][ T95] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 48.759746][ T95] __device_attach+0x21a/0x390 [ 48.764512][ T95] ? device_bind_driver+0xd0/0xd0 [ 48.769513][ T95] bus_probe_device+0x1e4/0x290 [ 48.774344][ T95] device_add+0x1367/0x1c20 [ 48.778824][ T95] ? device_link_remove+0x110/0x110 [ 48.784010][ T95] usb_new_device.cold+0x552/0xf6e [ 48.789137][ T95] ? hub_disconnect+0x4a0/0x4a0 [ 48.793995][ T95] ? mark_held_locks+0x9f/0xe0 [ 48.798743][ T95] ? _raw_spin_unlock_irq+0x1f/0x30 [ 48.803920][ T95] hub_event+0x226d/0x43c0 [ 48.808403][ T95] ? hub_port_debounce+0x350/0x350 [ 48.816497][ T95] ? umh_clean_and_save_pid+0x1/0xd0 [ 48.821799][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 48.827350][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 48.832622][ T95] ? _raw_spin_unlock_irq+0x1f/0x30 [ 48.837801][ T95] process_one_work+0x965/0x1630 [ 48.842722][ T95] ? lock_release+0x720/0x720 [ 48.847388][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 48.852829][ T95] ? rwlock_bug.part.0+0x90/0x90 [ 48.857746][ T95] worker_thread+0x7ab/0xe20 [ 48.862316][ T95] ? process_one_work+0x1630/0x1630 [ 48.867494][ T95] kthread+0x326/0x430 [ 48.871543][ T95] ? kthread_create_on_node+0xf0/0xf0 [ 48.876894][ T95] ret_from_fork+0x24/0x30 [ 48.881279][ T95] Modules linked in: [ 48.885256][ T95] ---[ end trace da0d859ca2c27a29 ]--- [ 48.890762][ T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 48.896677][ T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 c0 4e fc 85 e8 34 89 3d ff 0f 0b 48 89 f1 48 c7 c7 40 4e fc 85 4c 89 e6 e8 20 89 3d ff <0f> 0b 48 89 ee 48 c7 c7 e0 4f fc 85 e8 0f 89 3d ff 0f 0b 4c 89 ea [ 48.916461][ T95] RSP: 0018:ffff8881d576eff0 EFLAGS: 00010282 [ 48.922575][ T95] RAX: 0000000000000075 RBX: ffff8881cc8dc130 RCX: 0000000000000000 [ 48.930595][ T95] RDX: 0000000000000000 RSI: ffffffff812a2d8d RDI: ffffed103aaeddf0 [ 48.938584][ T95] RBP: ffff8881cc8dc250 R08: 0000000000000075 R09: ffffed103b666292 [ 48.946612][ T95] R10: ffff8881db33148f R11: ffffed103b666291 R12: ffffffff87a78700 [ 48.954654][ T95] R13: ffff8881cc8dc000 R14: ffff8881cc8dc13c R15: ffff8881ccefd000 [ 48.962672][ T95] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 48.971705][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.978277][ T95] CR2: 000055b9310ec780 CR3: 00000001d20d9000 CR4: 00000000001406e0 [ 48.986301][ T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.994333][ T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.002411][ T95] Kernel panic - not syncing: Fatal exception [ 49.008960][ T95] Kernel Offset: disabled [ 49.013308][ T95] Rebooting in 86400 seconds..