Warning: Permanently added '10.128.0.88' (ECDSA) to the list of known hosts. executing program [ 40.223172][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.463125][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 40.583215][ T12] usb 1-1: config 144 has an invalid interface number: 160 but max is 0 [ 40.591680][ T12] usb 1-1: config 144 contains an unexpected descriptor of type 0x2, skipping [ 40.601133][ T12] usb 1-1: config 144 has no interface number 0 [ 40.607464][ T12] usb 1-1: config 144 interface 160 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 40.621607][ T12] usb 1-1: config 144 interface 160 has no altsetting 0 [ 40.628653][ T12] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=f9.51 [ 40.637718][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 40.923295][ T12] usb 1-1: string descriptor 0 read error: -71 [ 40.931378][ T12] dw2102: su3000_identify_state [ 40.937168][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 40.944264][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 40.950471][ T12] dvb-usb: bulk message failed: -22 (2/256) [ 40.957950][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 40.983483][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 40.990543][ T12] usb 1-1: media controller created [ 40.996090][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.002745][ T12] dw2102: i2c transfer failed. [ 41.008264][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.014881][ T12] dw2102: i2c transfer failed. [ 41.019654][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.026280][ T12] dw2102: i2c transfer failed. [ 41.031058][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.037669][ T12] dw2102: i2c transfer failed. [ 41.042482][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.049207][ T12] dw2102: i2c transfer failed. [ 41.054693][ T12] dvb-usb: bulk message failed: -22 (6/-2036300584) [ 41.061431][ T12] dw2102: i2c transfer failed. [ 41.066220][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 41.075787][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 41.090930][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 41.096785][ T12] dw2102: command 0x51 transfer failed. [ 41.103911][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.110608][ T12] dw2102: i2c transfer failed. [ 41.115556][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.122135][ T12] dw2102: i2c transfer failed. [ 41.127076][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.134306][ T12] dw2102: i2c transfer failed. [ 41.155129][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.161809][ T12] dw2102: i2c transfer failed. [ 41.166644][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.173282][ T12] dw2102: i2c transfer failed. [ 41.184608][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.191187][ T12] dw2102: i2c transfer failed. [ 41.246111][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.252728][ T12] dw2102: i2c transfer failed. [ 41.257574][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.264454][ T12] dw2102: i2c transfer failed. [ 41.269215][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.275871][ T12] dw2102: i2c transfer failed. [ 41.280751][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.287359][ T12] dw2102: i2c transfer failed. [ 41.292150][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.299031][ T12] dw2102: i2c transfer failed. [ 41.303859][ T12] dvb-usb: bulk message failed: -22 (5/-2036300584) [ 41.310437][ T12] dw2102: i2c transfer failed. [ 41.315244][ T12] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 41.323678][ T12] dw2102: Attached RS2000/TS2020! [ 41.328869][ T12] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 41.337261][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 41.403413][ T12] Registered IR keymap rc-su3000 [ 41.409203][ T12] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 41.418551][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 41.428942][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 41.436271][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 41.442337][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 41.451768][ T12] usb 1-1: USB disconnect, device number 2 [ 41.458688][ T12] ================================================================== [ 41.467160][ T12] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0 [ 41.474769][ T12] Read of size 8 at addr ffff8881cfa623e0 by task kworker/0:1/12 [ 41.482467][ T12] [ 41.484798][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.4.0-rc5+ #0 [ 41.492153][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.502339][ T12] Workqueue: usb_hub_wq hub_event [ 41.507340][ T12] Call Trace: [ 41.510655][ T12] dump_stack+0xca/0x13e [ 41.514881][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 41.520188][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 41.525455][ T12] print_address_description.constprop.0+0x36/0x50 [ 41.531936][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 41.537195][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 41.542457][ T12] __kasan_report.cold+0x1a/0x33 [ 41.547374][ T12] ? _raw_spin_unlock+0x20/0x30 [ 41.552201][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 41.557461][ T12] kasan_report+0xe/0x20 [ 41.561681][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 41.566767][ T12] ? dvb_usb_exit+0x290/0x290 [ 41.571421][ T12] ? usb_disable_endpoint+0x1ba/0x1f0 [ 41.576778][ T12] ? usb_disable_interface+0x140/0x1a0 [ 41.582220][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 41.587395][ T12] ? usb_autoresume_device+0x60/0x60 [ 41.592968][ T12] device_release_driver_internal+0x42f/0x500 [ 41.599027][ T12] bus_remove_device+0x2dc/0x4a0 [ 41.603977][ T12] device_del+0x420/0xb20 [ 41.608298][ T12] ? __device_link_del+0x2f0/0x2f0 [ 41.615393][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 41.620397][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 41.626371][ T12] usb_disable_device+0x211/0x690 [ 41.631412][ T12] usb_disconnect+0x284/0x8d0 [ 41.636084][ T12] hub_event+0x16f2/0x3800 [ 41.640630][ T12] ? hub_port_debounce+0x260/0x260 [ 41.645751][ T12] ? find_held_lock+0x2d/0x110 [ 41.650922][ T12] ? mark_held_locks+0xe0/0xe0 [ 41.655666][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 41.661191][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 41.666460][ T12] process_one_work+0x92b/0x1530 [ 41.671395][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 41.676876][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 41.681892][ T12] worker_thread+0x7ab/0xe20 [ 41.686480][ T12] ? process_one_work+0x1530/0x1530 [ 41.691659][ T12] kthread+0x318/0x420 [ 41.695796][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 41.701193][ T12] ret_from_fork+0x24/0x30 [ 41.705605][ T12] [ 41.707916][ T12] Allocated by task 12: [ 41.712068][ T12] save_stack+0x1b/0x80 [ 41.716221][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 41.721868][ T12] __kmalloc_track_caller+0xf0/0x310 [ 41.727132][ T12] kmemdup+0x23/0x50 [ 41.731008][ T12] dw2102_probe+0x627/0xc40 [ 41.735512][ T12] usb_probe_interface+0x305/0x7a0 [ 41.740601][ T12] really_probe+0x281/0x6d0 [ 41.745098][ T12] driver_probe_device+0x104/0x210 [ 41.750186][ T12] __device_attach_driver+0x1c2/0x220 [ 41.755548][ T12] bus_for_each_drv+0x162/0x1e0 [ 41.760374][ T12] __device_attach+0x217/0x360 [ 41.765115][ T12] bus_probe_device+0x1e4/0x290 [ 41.774560][ T12] device_add+0xae6/0x16f0 [ 41.778954][ T12] usb_set_configuration+0xdf6/0x1670 [ 41.784299][ T12] generic_probe+0x9d/0xd5 [ 41.788706][ T12] usb_probe_device+0x99/0x100 [ 41.793446][ T12] really_probe+0x281/0x6d0 [ 41.797924][ T12] driver_probe_device+0x104/0x210 [ 41.803011][ T12] __device_attach_driver+0x1c2/0x220 [ 41.809321][ T12] bus_for_each_drv+0x162/0x1e0 [ 41.815103][ T12] __device_attach+0x217/0x360 [ 41.819849][ T12] bus_probe_device+0x1e4/0x290 [ 41.826692][ T12] device_add+0xae6/0x16f0 [ 41.831102][ T12] usb_new_device.cold+0x6a4/0xe79 [ 41.836205][ T12] hub_event+0x1df8/0x3800 [ 41.840598][ T12] process_one_work+0x92b/0x1530 [ 41.845524][ T12] worker_thread+0x96/0xe20 [ 41.850026][ T12] kthread+0x318/0x420 [ 41.854079][ T12] ret_from_fork+0x24/0x30 [ 41.858827][ T12] [ 41.861148][ T12] Freed by task 12: [ 41.864938][ T12] save_stack+0x1b/0x80 [ 41.869073][ T12] __kasan_slab_free+0x130/0x180 [ 41.873993][ T12] kfree+0xe4/0x320 [ 41.877803][ T12] dw2102_probe+0x871/0xc40 [ 41.882909][ T12] usb_probe_interface+0x305/0x7a0 [ 41.887998][ T12] really_probe+0x281/0x6d0 [ 41.892478][ T12] driver_probe_device+0x104/0x210 [ 41.897583][ T12] __device_attach_driver+0x1c2/0x220 [ 41.902949][ T12] bus_for_each_drv+0x162/0x1e0 [ 41.907777][ T12] __device_attach+0x217/0x360 [ 41.912532][ T12] bus_probe_device+0x1e4/0x290 [ 41.917372][ T12] device_add+0xae6/0x16f0 [ 41.921782][ T12] usb_set_configuration+0xdf6/0x1670 [ 41.927159][ T12] generic_probe+0x9d/0xd5 [ 41.931607][ T12] usb_probe_device+0x99/0x100 [ 41.936353][ T12] really_probe+0x281/0x6d0 [ 41.940835][ T12] driver_probe_device+0x104/0x210 [ 41.946446][ T12] __device_attach_driver+0x1c2/0x220 [ 41.952792][ T12] bus_for_each_drv+0x162/0x1e0 [ 41.957623][ T12] __device_attach+0x217/0x360 [ 41.962365][ T12] bus_probe_device+0x1e4/0x290 [ 41.967213][ T12] device_add+0xae6/0x16f0 [ 41.971693][ T12] usb_new_device.cold+0x6a4/0xe79 [ 41.976781][ T12] hub_event+0x1df8/0x3800 [ 41.981198][ T12] process_one_work+0x92b/0x1530 [ 41.986124][ T12] worker_thread+0x96/0xe20 [ 41.990608][ T12] kthread+0x318/0x420 [ 41.994659][ T12] ret_from_fork+0x24/0x30 [ 41.999044][ T12] [ 42.002233][ T12] The buggy address belongs to the object at ffff8881cfa62000 [ 42.002233][ T12] which belongs to the cache kmalloc-4k of size 4096 [ 42.016285][ T12] The buggy address is located 992 bytes inside of [ 42.016285][ T12] 4096-byte region [ffff8881cfa62000, ffff8881cfa63000) [ 42.029797][ T12] The buggy address belongs to the page: [ 42.035509][ T12] page:ffffea00073e9800 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 42.046427][ T12] flags: 0x200000000010200(slab|head) [ 42.051786][ T12] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 42.060389][ T12] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 42.073403][ T12] page dumped because: kasan: bad access detected [ 42.079804][ T12] [ 42.082110][ T12] Memory state around the buggy address: [ 42.087752][ T12] ffff8881cfa62280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.095828][ T12] ffff8881cfa62300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.103974][ T12] >ffff8881cfa62380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.112015][ T12] ^ [ 42.119435][ T12] ffff8881cfa62400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.127597][ T12] ffff8881cfa62480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.135636][ T12] ================================================================== [ 42.143679][ T12] Disabling lock debugging due to kernel taint [ 42.149899][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 42.156487][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.4.0-rc5+ #0 [ 42.165221][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.183286][ T12] Workqueue: usb_hub_wq hub_event [ 42.188385][ T12] Call Trace: [ 42.191762][ T12] dump_stack+0xca/0x13e [ 42.195988][ T12] panic+0x2aa/0x6e1 [ 42.199863][ T12] ? add_taint.cold+0x16/0x16 [ 42.204531][ T12] ? retint_kernel+0x10/0x10 [ 42.211845][ T12] ? trace_hardirqs_on+0x55/0x1e0 [ 42.216852][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.222112][ T12] end_report+0x43/0x49 [ 42.226351][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.231825][ T12] __kasan_report.cold+0xd/0x33 [ 42.236810][ T12] ? _raw_spin_unlock+0x20/0x30 [ 42.241654][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.246972][ T12] kasan_report+0xe/0x20 [ 42.251193][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 42.256462][ T12] ? dvb_usb_exit+0x290/0x290 [ 42.261739][ T12] ? usb_disable_endpoint+0x1ba/0x1f0 [ 42.267095][ T12] ? usb_disable_interface+0x140/0x1a0 [ 42.272877][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 42.278068][ T12] ? usb_autoresume_device+0x60/0x60 [ 42.283331][ T12] device_release_driver_internal+0x42f/0x500 [ 42.289373][ T12] bus_remove_device+0x2dc/0x4a0 [ 42.294293][ T12] device_del+0x420/0xb20 [ 42.298608][ T12] ? __device_link_del+0x2f0/0x2f0 [ 42.303720][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 42.308760][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 42.314017][ T12] usb_disable_device+0x211/0x690 [ 42.319027][ T12] usb_disconnect+0x284/0x8d0 [ 42.323691][ T12] hub_event+0x16f2/0x3800 [ 42.328097][ T12] ? hub_port_debounce+0x260/0x260 [ 42.333207][ T12] ? find_held_lock+0x2d/0x110 [ 42.337947][ T12] ? mark_held_locks+0xe0/0xe0 [ 42.342705][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 42.348224][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 42.353485][ T12] process_one_work+0x92b/0x1530 [ 42.358674][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 42.364030][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 42.369048][ T12] worker_thread+0x7ab/0xe20 [ 42.373630][ T12] ? process_one_work+0x1530/0x1530 [ 42.378931][ T12] kthread+0x318/0x420 [ 42.383258][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 42.388895][ T12] ret_from_fork+0x24/0x30 [ 42.393933][ T12] Kernel Offset: disabled [ 42.398264][ T12] Rebooting in 86400 seconds..