[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 15.673045][ C1] random: crng init done [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 38.528794][ T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.738572][ T95] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 38.746800][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 38.757014][ T95] usb 1-1: config 0 has no interface number 0 [ 38.763192][ T95] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 38.774381][ T95] usb 1-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=26.99 [ 38.783450][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.794407][ T95] usb 1-1: config 0 descriptor?? [ 38.840849][ T95] em28xx 1-1:0.40: New device @ 480 Mbps (2040:026d, interface 40, class 40) [ 38.850207][ T95] em28xx 1-1:0.40: Audio interface 40 found (Vendor Class) executing program [ 39.078465][ T95] em28xx 1-1:0.40: unknown em28xx chip ID (0) [ 39.098357][ T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb [ 39.118340][ T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined [ 39.125420][ T95] em28xx 1-1:0.40: No AC97 audio processor [ 39.131366][ T95] em28xx 1-1:0.40: We currently don't support analog TV or stream capture on dual tuners. [ 39.268315][ T95] em28xx 1-1:0.40: unknown em28xx chip ID (0) [ 39.288303][ T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb [ 39.308341][ T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined [ 39.316178][ T95] em28xx 1-1:0.40: No AC97 audio processor [ 39.563201][ T95] usb 1-1: USB disconnect, device number 2 [ 39.570330][ T95] em28xx 1-1:0.40: Disconnecting em28xx #1 [ 39.576433][ T95] em28xx 1-1:0.40: Disconnecting em28xx [ 39.584467][ T95] em28xx 1-1:0.40: Freeing device [ 39.589631][ T95] em28xx 1-1:0.40: Freeing device [ 39.948266][ T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.158829][ T95] usb 1-1: config 0 has an invalid interface number: 40 but max is 0 [ 40.167400][ T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 40.177531][ T95] usb 1-1: config 0 has no interface number 0 [ 40.183910][ T95] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 40.194935][ T95] usb 1-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=26.99 [ 40.204013][ T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.213748][ T95] usb 1-1: config 0 descriptor?? [ 40.260206][ T95] em28xx 1-1:0.40: New device @ 480 Mbps (2040:026d, interface 40, class 40) [ 40.269291][ T95] em28xx 1-1:0.40: Audio interface 40 found (Vendor Class) executing program [ 40.498459][ T95] em28xx 1-1:0.40: unknown em28xx chip ID (0) [ 40.528310][ T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb [ 40.548345][ T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined [ 40.555511][ T95] em28xx 1-1:0.40: No AC97 audio processor [ 40.561441][ T95] list_add corruption. prev->next should be next (ffffffff87a52460), but was 0000000000000000. (prev=ffff8881cde34240). [ 40.574232][ T95] ------------[ cut here ]------------ [ 40.579691][ T95] kernel BUG at lib/list_debug.c:26! [ 40.585195][ T95] invalid opcode: 0000 [#1] SMP KASAN [ 40.590592][ T95] CPU: 0 PID: 95 Comm: kworker/0:2 Not tainted 5.6.0-rc3-syzkaller #0 [ 40.598840][ T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.608902][ T95] Workqueue: usb_hub_wq hub_event [ 40.613933][ T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 40.619820][ T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea [ 40.639413][ T95] RSP: 0018:ffff8881d594f0a8 EFLAGS: 00010286 [ 40.645508][ T95] RAX: 0000000000000075 RBX: ffff8881cde34120 RCX: 0000000000000000 [ 40.653470][ T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab29e07 [ 40.661439][ T95] RBP: ffff8881cde34240 R08: 0000000000000075 R09: ffffed103b646248 [ 40.669633][ T95] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460 [ 40.677712][ T95] R13: ffff8881cde34000 R14: ffff8881cde3412c R15: ffff8881cde3f000 [ 40.685683][ T95] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 40.695012][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.701694][ T95] CR2: 00007f8e7f3b3000 CR3: 00000001d253a000 CR4: 00000000001406f0 [ 40.709660][ T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.717626][ T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.725786][ T95] Call Trace: [ 40.729187][ T95] em28xx_init_extension+0x44/0x1f0 [ 40.734431][ T95] em28xx_init_dev.isra.0+0xa7b/0x15d8 [ 40.740015][ T95] ? _dev_info+0xd7/0x109 [ 40.744522][ T95] ? em28xx_usb_disconnect.cold+0x284/0x284 [ 40.750437][ T95] ? lockdep_init_map+0x1b0/0x5e0 [ 40.755510][ T95] ? lockdep_init_map+0x1b0/0x5e0 [ 40.760548][ T95] em28xx_usb_probe.cold+0xcac/0x2515 [ 40.766009][ T95] usb_probe_interface+0x310/0x800 [ 40.771115][ T95] ? usb_probe_device+0x230/0x230 [ 40.776223][ T95] really_probe+0x290/0xac0 [ 40.780909][ T95] driver_probe_device+0x223/0x350 [ 40.786096][ T95] __device_attach_driver+0x1d1/0x290 [ 40.791479][ T95] ? driver_allows_async_probing+0x160/0x160 [ 40.797495][ T95] bus_for_each_drv+0x162/0x1e0 [ 40.802381][ T95] ? bus_rescan_devices+0x20/0x20 [ 40.807394][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 40.813237][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 40.818523][ T95] __device_attach+0x217/0x390 [ 40.823289][ T95] ? device_bind_driver+0xd0/0xd0 [ 40.828305][ T95] bus_probe_device+0x1e4/0x290 [ 40.833482][ T95] device_add+0x1459/0x1bf0 [ 40.838130][ T95] ? wait_for_completion+0x3c0/0x3c0 [ 40.843433][ T95] ? device_link_remove+0x110/0x110 [ 40.848756][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 40.854568][ T95] usb_set_configuration+0xe47/0x17d0 [ 40.860002][ T95] usb_generic_driver_probe+0x9d/0xe0 [ 40.865396][ T95] usb_probe_device+0xd9/0x230 [ 40.870200][ T95] ? usb_suspend+0x5f0/0x5f0 [ 40.874907][ T95] really_probe+0x290/0xac0 [ 40.879445][ T95] driver_probe_device+0x223/0x350 [ 40.884668][ T95] __device_attach_driver+0x1d1/0x290 [ 40.890087][ T95] ? driver_allows_async_probing+0x160/0x160 [ 40.896076][ T95] bus_for_each_drv+0x162/0x1e0 [ 40.900935][ T95] ? bus_rescan_devices+0x20/0x20 [ 40.905954][ T95] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 40.911780][ T95] ? lockdep_hardirqs_on+0x382/0x580 [ 40.917067][ T95] __device_attach+0x217/0x390 [ 40.921944][ T95] ? device_bind_driver+0xd0/0xd0 [ 40.926969][ T95] bus_probe_device+0x1e4/0x290 [ 40.931813][ T95] device_add+0x1459/0x1bf0 [ 40.936410][ T95] ? device_link_remove+0x110/0x110 [ 40.941625][ T95] usb_new_device.cold+0x540/0xcd0 [ 40.946734][ T95] hub_event+0x21cb/0x4300 [ 40.951148][ T95] ? hub_port_debounce+0x350/0x350 [ 40.956267][ T95] ? find_held_lock+0x2d/0x110 [ 40.961309][ T95] ? mark_held_locks+0xe0/0xe0 [ 40.966103][ T95] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 40.971893][ T95] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 40.977362][ T95] process_one_work+0x94b/0x1620 [ 40.982316][ T95] ? pwq_dec_nr_in_flight+0x310/0x310 [ 40.987787][ T95] ? do_raw_spin_lock+0x129/0x290 [ 40.992952][ T95] worker_thread+0x7ab/0xe20 [ 40.997655][ T95] ? process_one_work+0x1620/0x1620 [ 41.002962][ T95] kthread+0x318/0x420 [ 41.007110][ T95] ? kthread_create_on_node+0xf0/0xf0 [ 41.012495][ T95] ret_from_fork+0x24/0x30 [ 41.017037][ T95] Modules linked in: [ 41.021164][ T95] ---[ end trace ab20ddafed515de1 ]--- [ 41.027085][ T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c [ 41.033174][ T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea [ 41.053055][ T95] RSP: 0018:ffff8881d594f0a8 EFLAGS: 00010286 [ 41.059156][ T95] RAX: 0000000000000075 RBX: ffff8881cde34120 RCX: 0000000000000000 [ 41.067138][ T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab29e07 [ 41.075272][ T95] RBP: ffff8881cde34240 R08: 0000000000000075 R09: ffffed103b646248 [ 41.083422][ T95] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460 [ 41.091575][ T95] R13: ffff8881cde34000 R14: ffff8881cde3412c R15: ffff8881cde3f000 [ 41.099740][ T95] FS: 0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000 [ 41.108714][ T95] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.115437][ T95] CR2: 00007f8e7f3b3000 CR3: 00000001d253a000 CR4: 00000000001406f0 [ 41.123461][ T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.131473][ T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.139790][ T95] Kernel panic - not syncing: Fatal exception [ 41.146909][ T95] Kernel Offset: disabled [ 41.151262][ T95] Rebooting in 86400 seconds..