[info] Using makefile-style concurrent boot in runlevel 2.
[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c.
[   15.673045][    C1] random: crng init done
[....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

Warning: Permanently added '10.128.0.134' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [   38.528794][   T95] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   38.738572][   T95] usb 1-1: config 0 has an invalid interface number: 40 but max is 0
[   38.746800][   T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   38.757014][   T95] usb 1-1: config 0 has no interface number 0
[   38.763192][   T95] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   38.774381][   T95] usb 1-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=26.99
[   38.783450][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.794407][   T95] usb 1-1: config 0 descriptor??
[   38.840849][   T95] em28xx 1-1:0.40: New device   @ 480 Mbps (2040:026d, interface 40, class 40)
[   38.850207][   T95] em28xx 1-1:0.40: Audio interface 40 found (Vendor Class)
executing program
[   39.078465][   T95] em28xx 1-1:0.40: unknown em28xx chip ID (0)
[   39.098357][   T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb
[   39.118340][   T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined
[   39.125420][   T95] em28xx 1-1:0.40: No AC97 audio processor
[   39.131366][   T95] em28xx 1-1:0.40: We currently don't support analog TV or stream capture on dual tuners.
[   39.268315][   T95] em28xx 1-1:0.40: unknown em28xx chip ID (0)
[   39.288303][   T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb
[   39.308341][   T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined
[   39.316178][   T95] em28xx 1-1:0.40: No AC97 audio processor
[   39.563201][   T95] usb 1-1: USB disconnect, device number 2
[   39.570330][   T95] em28xx 1-1:0.40: Disconnecting em28xx #1
[   39.576433][   T95] em28xx 1-1:0.40: Disconnecting em28xx
[   39.584467][   T95] em28xx 1-1:0.40: Freeing device
[   39.589631][   T95] em28xx 1-1:0.40: Freeing device
[   39.948266][   T95] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   40.158829][   T95] usb 1-1: config 0 has an invalid interface number: 40 but max is 0
[   40.167400][   T95] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   40.177531][   T95] usb 1-1: config 0 has no interface number 0
[   40.183910][   T95] usb 1-1: config 0 interface 40 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   40.194935][   T95] usb 1-1: New USB device found, idVendor=2040, idProduct=026d, bcdDevice=26.99
[   40.204013][   T95] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.213748][   T95] usb 1-1: config 0 descriptor??
[   40.260206][   T95] em28xx 1-1:0.40: New device   @ 480 Mbps (2040:026d, interface 40, class 40)
[   40.269291][   T95] em28xx 1-1:0.40: Audio interface 40 found (Vendor Class)
executing program
[   40.498459][   T95] em28xx 1-1:0.40: unknown em28xx chip ID (0)
[   40.528310][   T95] em28xx 1-1:0.40: Config register raw data: 0xfffffffb
[   40.548345][   T95] em28xx 1-1:0.40: AC97 chip type couldn't be determined
[   40.555511][   T95] em28xx 1-1:0.40: No AC97 audio processor
[   40.561441][   T95] list_add corruption. prev->next should be next (ffffffff87a52460), but was 0000000000000000. (prev=ffff8881cde34240).
[   40.574232][   T95] ------------[ cut here ]------------
[   40.579691][   T95] kernel BUG at lib/list_debug.c:26!
[   40.585195][   T95] invalid opcode: 0000 [#1] SMP KASAN
[   40.590592][   T95] CPU: 0 PID: 95 Comm: kworker/0:2 Not tainted 5.6.0-rc3-syzkaller #0
[   40.598840][   T95] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   40.608902][   T95] Workqueue: usb_hub_wq hub_event
[   40.613933][   T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c
[   40.619820][   T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea
[   40.639413][   T95] RSP: 0018:ffff8881d594f0a8 EFLAGS: 00010286
[   40.645508][   T95] RAX: 0000000000000075 RBX: ffff8881cde34120 RCX: 0000000000000000
[   40.653470][   T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab29e07
[   40.661439][   T95] RBP: ffff8881cde34240 R08: 0000000000000075 R09: ffffed103b646248
[   40.669633][   T95] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460
[   40.677712][   T95] R13: ffff8881cde34000 R14: ffff8881cde3412c R15: ffff8881cde3f000
[   40.685683][   T95] FS:  0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
[   40.695012][   T95] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   40.701694][   T95] CR2: 00007f8e7f3b3000 CR3: 00000001d253a000 CR4: 00000000001406f0
[   40.709660][   T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   40.717626][   T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   40.725786][   T95] Call Trace:
[   40.729187][   T95]  em28xx_init_extension+0x44/0x1f0
[   40.734431][   T95]  em28xx_init_dev.isra.0+0xa7b/0x15d8
[   40.740015][   T95]  ? _dev_info+0xd7/0x109
[   40.744522][   T95]  ? em28xx_usb_disconnect.cold+0x284/0x284
[   40.750437][   T95]  ? lockdep_init_map+0x1b0/0x5e0
[   40.755510][   T95]  ? lockdep_init_map+0x1b0/0x5e0
[   40.760548][   T95]  em28xx_usb_probe.cold+0xcac/0x2515
[   40.766009][   T95]  usb_probe_interface+0x310/0x800
[   40.771115][   T95]  ? usb_probe_device+0x230/0x230
[   40.776223][   T95]  really_probe+0x290/0xac0
[   40.780909][   T95]  driver_probe_device+0x223/0x350
[   40.786096][   T95]  __device_attach_driver+0x1d1/0x290
[   40.791479][   T95]  ? driver_allows_async_probing+0x160/0x160
[   40.797495][   T95]  bus_for_each_drv+0x162/0x1e0
[   40.802381][   T95]  ? bus_rescan_devices+0x20/0x20
[   40.807394][   T95]  ? _raw_spin_unlock_irqrestore+0x39/0x40
[   40.813237][   T95]  ? lockdep_hardirqs_on+0x382/0x580
[   40.818523][   T95]  __device_attach+0x217/0x390
[   40.823289][   T95]  ? device_bind_driver+0xd0/0xd0
[   40.828305][   T95]  bus_probe_device+0x1e4/0x290
[   40.833482][   T95]  device_add+0x1459/0x1bf0
[   40.838130][   T95]  ? wait_for_completion+0x3c0/0x3c0
[   40.843433][   T95]  ? device_link_remove+0x110/0x110
[   40.848756][   T95]  ? _raw_spin_unlock_irqrestore+0x39/0x40
[   40.854568][   T95]  usb_set_configuration+0xe47/0x17d0
[   40.860002][   T95]  usb_generic_driver_probe+0x9d/0xe0
[   40.865396][   T95]  usb_probe_device+0xd9/0x230
[   40.870200][   T95]  ? usb_suspend+0x5f0/0x5f0
[   40.874907][   T95]  really_probe+0x290/0xac0
[   40.879445][   T95]  driver_probe_device+0x223/0x350
[   40.884668][   T95]  __device_attach_driver+0x1d1/0x290
[   40.890087][   T95]  ? driver_allows_async_probing+0x160/0x160
[   40.896076][   T95]  bus_for_each_drv+0x162/0x1e0
[   40.900935][   T95]  ? bus_rescan_devices+0x20/0x20
[   40.905954][   T95]  ? _raw_spin_unlock_irqrestore+0x39/0x40
[   40.911780][   T95]  ? lockdep_hardirqs_on+0x382/0x580
[   40.917067][   T95]  __device_attach+0x217/0x390
[   40.921944][   T95]  ? device_bind_driver+0xd0/0xd0
[   40.926969][   T95]  bus_probe_device+0x1e4/0x290
[   40.931813][   T95]  device_add+0x1459/0x1bf0
[   40.936410][   T95]  ? device_link_remove+0x110/0x110
[   40.941625][   T95]  usb_new_device.cold+0x540/0xcd0
[   40.946734][   T95]  hub_event+0x21cb/0x4300
[   40.951148][   T95]  ? hub_port_debounce+0x350/0x350
[   40.956267][   T95]  ? find_held_lock+0x2d/0x110
[   40.961309][   T95]  ? mark_held_locks+0xe0/0xe0
[   40.966103][   T95]  ? rcu_read_lock_sched_held+0x9c/0xd0
[   40.971893][   T95]  ? rcu_read_lock_bh_held+0xb0/0xb0
[   40.977362][   T95]  process_one_work+0x94b/0x1620
[   40.982316][   T95]  ? pwq_dec_nr_in_flight+0x310/0x310
[   40.987787][   T95]  ? do_raw_spin_lock+0x129/0x290
[   40.992952][   T95]  worker_thread+0x7ab/0xe20
[   40.997655][   T95]  ? process_one_work+0x1620/0x1620
[   41.002962][   T95]  kthread+0x318/0x420
[   41.007110][   T95]  ? kthread_create_on_node+0xf0/0xf0
[   41.012495][   T95]  ret_from_fork+0x24/0x30
[   41.017037][   T95] Modules linked in:
[   41.021164][   T95] ---[ end trace ab20ddafed515de1 ]---
[   41.027085][   T95] RIP: 0010:__list_add_valid.cold+0x3a/0x3c
[   41.033174][   T95] Code: 0b 48 89 f2 4c 89 e1 48 89 ee 48 c7 c7 20 27 fc 85 e8 f4 b4 3e ff 0f 0b 48 89 f1 48 c7 c7 a0 26 fc 85 4c 89 e6 e8 e0 b4 3e ff <0f> 0b 48 89 ee 48 c7 c7 40 28 fc 85 e8 cf b4 3e ff 0f 0b 4c 89 ea
[   41.053055][   T95] RSP: 0018:ffff8881d594f0a8 EFLAGS: 00010286
[   41.059156][   T95] RAX: 0000000000000075 RBX: ffff8881cde34120 RCX: 0000000000000000
[   41.067138][   T95] RDX: 0000000000000000 RSI: ffffffff812977dd RDI: ffffed103ab29e07
[   41.075272][   T95] RBP: ffff8881cde34240 R08: 0000000000000075 R09: ffffed103b646248
[   41.083422][   T95] R10: ffffed103b646247 R11: ffff8881db23123f R12: ffffffff87a52460
[   41.091575][   T95] R13: ffff8881cde34000 R14: ffff8881cde3412c R15: ffff8881cde3f000
[   41.099740][   T95] FS:  0000000000000000(0000) GS:ffff8881db200000(0000) knlGS:0000000000000000
[   41.108714][   T95] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   41.115437][   T95] CR2: 00007f8e7f3b3000 CR3: 00000001d253a000 CR4: 00000000001406f0
[   41.123461][   T95] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   41.131473][   T95] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   41.139790][   T95] Kernel panic - not syncing: Fatal exception
[   41.146909][   T95] Kernel Offset: disabled
[   41.151262][   T95] Rebooting in 86400 seconds..