INIT: Entering runlevel: 2 [info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.67' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 23.059155][ T94] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 23.269166][ T94] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 23.277656][ T94] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 23.288145][ T94] usb 1-1: config 0 has no interface number 0 [ 23.294498][ T94] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 23.305654][ T94] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 23.315752][ T94] usb 1-1: config 0 interface 200 has no altsetting 0 [ 23.322747][ T94] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=df.77 [ 23.333375][ T94] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.343619][ T94] usb 1-1: config 0 descriptor?? [ 23.391334][ T94] em28xx 1-1:0.200: New device @ 480 Mbps (2040:0265, interface 200, class 200) [ 23.400744][ T94] em28xx 1-1:0.200: Audio interface 200 found (Vendor Class) executing program [ 23.649110][ T94] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 23.669127][ T94] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 23.689123][ T94] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 23.696921][ T94] em28xx 1-1:0.200: No AC97 audio processor [ 23.704307][ T94] em28xx 1-1:0.200: We currently don't support analog TV or stream capture on dual tuners. [ 23.839155][ T94] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 23.859100][ T94] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 23.879092][ T94] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 23.886683][ T94] em28xx 1-1:0.200: No AC97 audio processor [ 24.133971][ T94] usb 1-1: USB disconnect, device number 2 [ 24.141388][ T94] em28xx 1-1:0.200: Disconnecting em28xx #1 [ 24.147766][ T94] em28xx 1-1:0.200: Disconnecting em28xx [ 24.155644][ T94] em28xx 1-1:0.200: Freeing device [ 24.160978][ T94] em28xx 1-1:0.200: Freeing device [ 24.519077][ T94] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 24.729164][ T94] usb 1-1: config 0 has an invalid interface number: 200 but max is 0 [ 24.737913][ T94] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 24.748322][ T94] usb 1-1: config 0 has no interface number 0 [ 24.754483][ T94] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 24.765766][ T94] usb 1-1: config 0 interface 200 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 24.777276][ T94] usb 1-1: config 0 interface 200 has no altsetting 0 [ 24.784102][ T94] usb 1-1: New USB device found, idVendor=2040, idProduct=0265, bcdDevice=df.77 [ 24.794031][ T94] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.803642][ T94] usb 1-1: config 0 descriptor?? [ 24.840979][ T94] em28xx 1-1:0.200: New device @ 480 Mbps (2040:0265, interface 200, class 200) [ 24.850286][ T94] em28xx 1-1:0.200: Audio interface 200 found (Vendor Class) executing program [ 25.099180][ T94] em28xx 1-1:0.200: unknown em28xx chip ID (0) [ 25.119153][ T94] em28xx 1-1:0.200: Config register raw data: 0xfffffffb [ 25.139195][ T94] em28xx 1-1:0.200: AC97 chip type couldn't be determined [ 25.146332][ T94] em28xx 1-1:0.200: No AC97 audio processor [ 25.152327][ T94] list_add corruption. prev->next should be next (ffffffff87a52460), but was ffffffff85a00184. (prev=ffff8881c67d8240). [ 25.165051][ T94] ------------[ cut here ]------------ [ 25.170577][ T94] kernel BUG at lib/list_debug.c:26! [ 25.175919][ T94] invalid opcode: 0000 [#1] SMP KASAN [ 25.181290][ T94] CPU: 0 PID: 94 Comm: kworker/0:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 25.189432][ T94] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 25.199761][ T94] Workqueue: usb_hub_wq hub_event [ 25.204827][ T94] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 25.210840][ T94] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea [ 25.230819][ T94] RSP: 0018:ffff8881d5cbf0a8 EFLAGS: 00010286 [ 25.236876][ T94] RAX: 0000000000000075 RBX: ffff8881cda34120 RCX: 0000000000000000 [ 25.244921][ T94] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab97e07 [ 25.253879][ T94] RBP: ffff8881cda34240 R08: 0000000000000075 R09: ffffed103b646248 [ 25.261994][ T94] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460 [ 25.269974][ T94] R13: ffff8881cda34000 R14: ffff8881cda3412c R15: ffff8881cd45a000 [ 25.278020][ T94] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 25.287021][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.293781][ T94] CR2: 00007f491df5b000 CR3: 00000001d1593000 CR4: 00000000001406f0 [ 25.301744][ T94] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.309706][ T94] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.317688][ T94] Call Trace: [ 25.321264][ T94] em28xx_init_extension+0x44/0x1f0 [ 25.326922][ T94] em28xx_init_dev.isra.0+0xa7b/0x15d8 [ 25.332386][ T94] ? _dev_info+0xd7/0x109 [ 25.336733][ T94] ? em28xx_usb_disconnect.cold+0x284/0x284 [ 25.342619][ T94] ? lockdep_init_map+0x1b0/0x5e0 [ 25.347754][ T94] ? lockdep_init_map+0x1b0/0x5e0 [ 25.353009][ T94] em28xx_usb_probe.cold+0xcac/0x2515 [ 25.358648][ T94] usb_probe_interface+0x310/0x800 [ 25.363842][ T94] ? usb_probe_device+0x230/0x230 [ 25.368856][ T94] really_probe+0x290/0xac0 [ 25.373348][ T94] driver_probe_device+0x223/0x350 [ 25.378443][ T94] __device_attach_driver+0x1d1/0x290 [ 25.384685][ T94] ? driver_allows_async_probing+0x160/0x160 [ 25.390661][ T94] bus_for_each_drv+0x162/0x1e0 [ 25.395590][ T94] ? bus_rescan_devices+0x20/0x20 [ 25.400954][ T94] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.406760][ T94] ? lockdep_hardirqs_on+0x382/0x580 [ 25.412036][ T94] __device_attach+0x217/0x390 [ 25.416895][ T94] ? device_bind_driver+0xd0/0xd0 [ 25.421900][ T94] bus_probe_device+0x1e4/0x290 [ 25.426756][ T94] device_add+0x1459/0x1bf0 [ 25.431254][ T94] ? wait_for_completion+0x3c0/0x3c0 [ 25.436773][ T94] ? device_link_remove+0x110/0x110 [ 25.442195][ T94] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.448100][ T94] usb_set_configuration+0xe47/0x17d0 [ 25.453704][ T94] usb_generic_driver_probe+0x9d/0xe0 [ 25.459351][ T94] usb_probe_device+0xd9/0x230 [ 25.464104][ T94] ? usb_suspend+0x5f0/0x5f0 [ 25.468701][ T94] really_probe+0x290/0xac0 [ 25.473189][ T94] driver_probe_device+0x223/0x350 [ 25.478281][ T94] __device_attach_driver+0x1d1/0x290 [ 25.483729][ T94] ? driver_allows_async_probing+0x160/0x160 [ 25.489721][ T94] bus_for_each_drv+0x162/0x1e0 [ 25.494979][ T94] ? bus_rescan_devices+0x20/0x20 [ 25.501477][ T94] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 25.507429][ T94] ? lockdep_hardirqs_on+0x382/0x580 [ 25.512792][ T94] __device_attach+0x217/0x390 [ 25.517545][ T94] ? device_bind_driver+0xd0/0xd0 [ 25.522562][ T94] bus_probe_device+0x1e4/0x290 [ 25.527402][ T94] device_add+0x1459/0x1bf0 [ 25.531886][ T94] ? device_link_remove+0x110/0x110 [ 25.537083][ T94] usb_new_device.cold+0x540/0xcd0 [ 25.542349][ T94] hub_event+0x21cb/0x4300 [ 25.546753][ T94] ? hub_port_debounce+0x350/0x350 [ 25.551851][ T94] ? find_held_lock+0x2d/0x110 [ 25.556606][ T94] ? mark_held_locks+0xe0/0xe0 [ 25.561390][ T94] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 25.566917][ T94] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 25.572207][ T94] process_one_work+0x94b/0x1620 [ 25.577220][ T94] ? pwq_dec_nr_in_flight+0x310/0x310 [ 25.582599][ T94] ? do_raw_spin_lock+0x129/0x290 [ 25.587612][ T94] worker_thread+0x7ab/0xe20 [ 25.592196][ T94] ? process_one_work+0x1620/0x1620 [ 25.597371][ T94] kthread+0x318/0x420 [ 25.601432][ T94] ? kthread_create_on_node+0xf0/0xf0 [ 25.607071][ T94] ret_from_fork+0x24/0x30 [ 25.611490][ T94] Modules linked in: [ 25.615449][ T94] ---[ end trace 2a2af2977d08d816 ]--- [ 25.620949][ T94] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 25.626846][ T94] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea [ 25.646846][ T94] RSP: 0018:ffff8881d5cbf0a8 EFLAGS: 00010286 [ 25.653130][ T94] RAX: 0000000000000075 RBX: ffff8881cda34120 RCX: 0000000000000000 [ 25.661148][ T94] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab97e07 [ 25.669415][ T94] RBP: ffff8881cda34240 R08: 0000000000000075 R09: ffffed103b646248 [ 25.677706][ T94] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460 [ 25.685973][ T94] R13: ffff8881cda34000 R14: ffff8881cda3412c R15: ffff8881cd45a000 [ 25.694506][ T94] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 25.703869][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.710765][ T94] CR2: 00007f491df5b000 CR3: 00000001d1593000 CR4: 00000000001406f0 [ 25.718841][ T94] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.727443][ T94] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.735842][ T94] Kernel panic - not syncing: Fatal exception [ 25.743803][ T94] Kernel Offset: disabled [ 25.748689][ T94] Rebooting in 86400 seconds..