dhcpcd-9.4.1 starting dev: loaded udev DUID 00:04:b1:a6:a3:c1:c1:e8:df:1a:e3:df:34:8c:c9:ba:be:c3 forked to background, child pid 2409 Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.175' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 38.658439][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.658439][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.668901][ T2327] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.673546][ T716] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.682328][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.688556][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.908378][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 38.938335][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 38.938467][ T2327] usb 5-1: Using ep0 maxpacket: 8 [ 38.943577][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 38.948569][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 38.953927][ T716] usb 2-1: Using ep0 maxpacket: 8 [ 39.048397][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.057543][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.058610][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.070584][ T25] usb 3-1: config 0 descriptor?? [ 39.074579][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.088502][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.097557][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.098424][ T2327] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.105763][ T716] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.114658][ T2327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.123636][ T716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.131817][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 39.141149][ T9] usb 1-1: config 0 descriptor?? [ 39.148837][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.156399][ T21] usb 6-1: config 0 descriptor?? [ 39.166515][ T7] usb 4-1: config 0 descriptor?? [ 39.174551][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 39.179660][ T716] usb 2-1: config 0 descriptor?? [ 39.180571][ T25] hub: probe of 3-1:0.0 failed with error -5 [ 39.193715][ T2327] usb 5-1: config 0 descriptor?? [ 39.200097][ T25] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 39.209076][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 39.215050][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 39.221597][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 39.227511][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 39.229060][ T21] hub 6-1:0.0: bad descriptor, ignoring hub [ 39.234164][ T716] hub 2-1:0.0: bad descriptor, ignoring hub [ 39.239460][ T21] hub: probe of 6-1:0.0 failed with error -5 [ 39.245243][ T716] hub: probe of 2-1:0.0 failed with error -5 [ 39.252092][ T2327] hub 5-1:0.0: bad descriptor, ignoring hub [ 39.260268][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 39.263365][ T2327] hub: probe of 5-1:0.0 failed with error -5 [ 39.275018][ T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 39.282682][ T2327] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 39.286421][ T716] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 39.293420][ T21] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx executing program [ 39.382178][ T892] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 39.383545][ T25] usb 3-1: USB disconnect, device number 2 [ 39.394526][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 39.406404][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 39.415662][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 39.425572][ T892] pvrusb2: Failure uploading firmware1 executing program [ 39.431107][ T892] pvrusb2: Device initialization was not successful. [ 39.437797][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 39.439729][ T21] usb 6-1: USB disconnect, device number 2 [ 39.449730][ T7] usb 4-1: USB disconnect, device number 2 [ 39.458844][ T25] pvrusb2: Device being rendered inoperable [ 39.461674][ T2327] usb 5-1: USB disconnect, device number 2 [ 39.466727][ T716] usb 2-1: USB disconnect, device number 2 [ 39.476650][ T9] usb 1-1: USB disconnect, device number 2 executing program executing program executing program executing program [ 39.483620][ T716] pvrusb2: Device being rendered inoperable [ 39.491589][ T9] pvrusb2: Device being rendered inoperable [ 39.508953][ T7] pvrusb2: Device being rendered inoperable [ 39.520145][ T2327] pvrusb2: Device being rendered inoperable [ 39.521408][ T892] usb 6-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 39.535463][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 39.544518][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 39.553700][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 39.563685][ T892] pvrusb2: Failure uploading firmware1 [ 39.569310][ T892] pvrusb2: Device initialization was not successful. [ 39.576005][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 39.588762][ T21] pvrusb2: Device being rendered inoperable [ 39.838326][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.888328][ T2327] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.908323][ T716] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.938333][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.945888][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.958321][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 40.088301][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 40.148330][ T716] usb 2-1: Using ep0 maxpacket: 8 [ 40.148464][ T2327] usb 5-1: Using ep0 maxpacket: 8 [ 40.188492][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 40.193603][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 40.218312][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 40.248405][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.257506][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.267332][ T25] usb 3-1: config 0 descriptor?? [ 40.278769][ T716] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.287803][ T716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.298861][ T2327] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.299262][ T716] usb 2-1: config 0 descriptor?? [ 40.307900][ T2327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.321623][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 40.327548][ T25] hub: probe of 3-1:0.0 failed with error -5 [ 40.334797][ T25] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.338533][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.342444][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.351211][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.360244][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.368215][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 40.380280][ T2327] usb 5-1: config 0 descriptor?? [ 40.385300][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.391121][ T21] usb 6-1: config 0 descriptor?? [ 40.407112][ T716] hub 2-1:0.0: bad descriptor, ignoring hub [ 40.413182][ T716] hub: probe of 2-1:0.0 failed with error -5 [ 40.420533][ T716] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.429821][ T9] usb 1-1: config 0 descriptor?? [ 40.436539][ T7] usb 4-1: config 0 descriptor?? [ 40.439083][ T2327] hub 5-1:0.0: bad descriptor, ignoring hub [ 40.447406][ T2327] hub: probe of 5-1:0.0 failed with error -5 [ 40.453960][ T21] hub 6-1:0.0: bad descriptor, ignoring hub [ 40.460028][ T21] hub: probe of 6-1:0.0 failed with error -5 [ 40.467170][ T21] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.475939][ T2327] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.479044][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 40.489351][ T9] hub: probe of 1-1:0.0 failed with error -5 executing program [ 40.495975][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 40.501975][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 40.509322][ T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.519836][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 40.529826][ T892] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 40.535926][ T25] usb 3-1: USB disconnect, device number 3 executing program [ 40.539189][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 40.553906][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 40.562966][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 40.572811][ T892] pvrusb2: Failure uploading firmware1 [ 40.578308][ T892] pvrusb2: Device initialization was not successful. [ 40.584993][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 40.594580][ T25] pvrusb2: Device being rendered inoperable executing program [ 40.608686][ T892] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 40.609941][ T716] usb 2-1: USB disconnect, device number 3 [ 40.617912][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 40.617925][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 40.617934][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 40.617949][ T892] pvrusb2: Failure uploading firmware1 executing program executing program [ 40.617956][ T892] pvrusb2: Device initialization was not successful. [ 40.663885][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 40.673578][ T716] pvrusb2: Device being rendered inoperable [ 40.676918][ T21] usb 6-1: USB disconnect, device number 3 [ 40.687599][ T2327] usb 5-1: USB disconnect, device number 3 executing program [ 40.701231][ T892] usb 5-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 40.710521][ T7] usb 4-1: USB disconnect, device number 3 [ 40.715012][ T21] pvrusb2: Device being rendered inoperable [ 40.716594][ T9] usb 1-1: USB disconnect, device number 3 [ 40.726373][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 40.734928][ T7] pvrusb2: Device being rendered inoperable [ 40.736942][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 40.744470][ T9] pvrusb2: Device being rendered inoperable [ 40.751936][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 40.751953][ T892] pvrusb2: Failure uploading firmware1 [ 40.751961][ T892] pvrusb2: Device initialization was not successful. [ 40.751968][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 40.753339][ T2327] pvrusb2: Device being rendered inoperable [ 40.988386][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.118388][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 41.125998][ T716] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.133584][ T7] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 41.148316][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 41.158332][ T2327] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 41.238305][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 41.358680][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.367784][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.377370][ T25] usb 3-1: config 0 descriptor?? [ 41.388348][ T716] usb 2-1: Using ep0 maxpacket: 8 [ 41.388348][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 41.388444][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 41.398617][ T2327] usb 5-1: Using ep0 maxpacket: 8 [ 41.403534][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 41.418924][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 41.424890][ T25] hub: probe of 3-1:0.0 failed with error -5 [ 41.432388][ T25] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 41.508506][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.517594][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.527444][ T21] usb 6-1: config 0 descriptor?? [ 41.532607][ T2327] usb 5-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.538695][ T716] usb 2-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.541716][ T2327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.550700][ T716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.561043][ T2327] usb 5-1: config 0 descriptor?? [ 41.566785][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.580908][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.589108][ T7] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 41.598140][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.599083][ T21] hub 6-1:0.0: bad descriptor, ignoring hub [ 41.610941][ T7] usb 4-1: config 0 descriptor?? [ 41.612118][ T21] hub: probe of 6-1:0.0 failed with error -5 [ 41.617966][ T716] usb 2-1: config 0 descriptor?? [ 41.623612][ T2327] hub 5-1:0.0: bad descriptor, ignoring hub [ 41.633900][ T2327] hub: probe of 5-1:0.0 failed with error -5 [ 41.643271][ T892] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 41.648623][ T25] usb 3-1: USB disconnect, device number 4 executing program [ 41.655652][ T9] usb 1-1: config 0 descriptor?? [ 41.662836][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 41.671432][ T7] hub 4-1:0.0: bad descriptor, ignoring hub [ 41.672214][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 41.678040][ T7] hub: probe of 4-1:0.0 failed with error -5 [ 41.687078][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 41.687096][ T892] pvrusb2: Failure uploading firmware1 [ 41.687102][ T892] pvrusb2: Device initialization was not successful. [ 41.687109][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 41.693242][ T25] pvrusb2: Device being rendered inoperable [ 41.698944][ T2327] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 41.707080][ T716] hub 2-1:0.0: bad descriptor, ignoring hub [ 41.711551][ T21] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 41.715322][ T716] hub: probe of 2-1:0.0 failed with error -5 [ 41.722110][ T716] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 41.765801][ T7] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx executing program executing program [ 41.809104][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 41.815063][ T9] hub: probe of 1-1:0.0 failed with error -5 [ 41.824593][ T9] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 41.831748][ T892] usb 6-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 41.846123][ T2327] usb 5-1: USB disconnect, device number 4 [ 41.852587][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 41.853815][ T21] usb 6-1: USB disconnect, device number 4 [ 41.861565][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 41.872922][ T2327] pvrusb2: Device being rendered inoperable [ 41.876414][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 41.892296][ T892] pvrusb2: Failure uploading firmware1 [ 41.897772][ T892] pvrusb2: Device initialization was not successful. executing program executing program [ 41.904682][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 41.914256][ T21] pvrusb2: Device being rendered inoperable [ 41.917220][ T7] usb 4-1: USB disconnect, device number 4 [ 41.926497][ T7] pvrusb2: Device being rendered inoperable [ 41.934199][ T716] usb 2-1: USB disconnect, device number 4 [ 41.936401][ T892] usb 2-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 41.943827][ T7] ================================================================== [ 41.957388][ T7] BUG: KASAN: slab-use-after-free in pvr2_context_set_notify+0x2c4/0x310 [ 41.961010][ T892] pvrusb2: ***WARNING*** Device fx2 controller firmware seems to be missing. [ 41.965816][ T7] Read of size 4 at addr ffff88810eb986d8 by task kworker/0:0/7 [ 41.965837][ T7] [ 41.965843][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.4.0-syzkaller-11311-g24be4d0b46bb #0 [ 41.965867][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 41.965881][ T7] Workqueue: usb_hub_wq hub_event [ 41.974640][ T892] pvrusb2: Did you install the pvrusb2 firmware files in their proper location? [ 41.982207][ T7] [ 41.982213][ T7] Call Trace: [ 41.982219][ T7] [ 41.982227][ T7] dump_stack_lvl+0xd9/0x150 [ 41.984553][ T892] pvrusb2: request_firmware unable to locate fx2 controller file v4l-pvrusb2-24xxx-01.fw [ 41.993979][ T7] print_address_description.constprop.0+0x2c/0x3c0 [ 41.994010][ T7] kasan_report+0x11d/0x130 [ 42.004108][ T892] pvrusb2: Failure uploading firmware1 [ 42.009046][ T7] ? pvr2_context_set_notify+0x2c4/0x310 [ 42.009083][ T7] pvr2_context_set_notify+0x2c4/0x310 [ 42.018081][ T892] pvrusb2: Device initialization was not successful. [ 42.020382][ T7] pvr_disconnect+0x80/0xf0 [ 42.020412][ T7] usb_unbind_interface+0x1dc/0x8e0 [ 42.020435][ T7] ? usb_unbind_device+0x1a0/0x1a0 [ 42.023689][ T892] pvrusb2: Giving up since device microcontroller firmware appears to be missing. [ 42.026599][ T7] device_remove+0x11f/0x170 [ 42.098310][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.098951][ T7] device_release_driver_internal+0x443/0x610 [ 42.098994][ T7] ? put_device+0x1f/0x30 [ 42.121602][ T7] bus_remove_device+0x22c/0x420 [ 42.126558][ T7] device_del+0x399/0xa30 [ 42.130888][ T7] ? usb_disconnect+0xff/0x8a0 [ 42.135642][ T7] ? __device_link_del+0x380/0x380 [ 42.140761][ T7] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 42.146300][ T7] ? lock_downgrade+0x690/0x690 [ 42.151148][ T7] usb_disable_device+0x360/0x7b0 [ 42.156195][ T7] usb_disconnect+0x2db/0x8a0 [ 42.160866][ T7] hub_event+0x2073/0x4ed0 [ 42.165272][ T7] ? hub_port_debounce+0x3b0/0x3b0 [ 42.170387][ T7] ? lock_sync+0x190/0x190 [ 42.174815][ T7] ? lock_downgrade+0x690/0x690 [ 42.179670][ T7] ? do_raw_spin_lock+0x124/0x2b0 [ 42.184682][ T7] ? _raw_spin_unlock_irq+0x23/0x50 [ 42.190151][ T7] process_one_work+0xa34/0x16f0 [ 42.195081][ T7] ? rcuwait_wake_up+0xce/0x290 [ 42.199926][ T7] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 42.205290][ T7] worker_thread+0x881/0x10c0 [ 42.209958][ T7] ? process_one_work+0x16f0/0x16f0 [ 42.215152][ T7] kthread+0x344/0x440 [ 42.219219][ T7] ? kthread_complete_and_exit+0x40/0x40 [ 42.224956][ T7] ret_from_fork+0x1f/0x30 [ 42.229362][ T7] [ 42.232375][ T7] [ 42.234691][ T7] Allocated by task 7: [ 42.238738][ T7] kasan_save_stack+0x22/0x40 [ 42.243410][ T7] kasan_set_track+0x25/0x30 [ 42.248027][ T7] __kasan_kmalloc+0x7b/0x90 [ 42.252626][ T7] pvr2_context_create+0x53/0x2a0 [ 42.257644][ T7] pvr_probe+0x25/0xe0 [ 42.261712][ T7] usb_probe_interface+0x30f/0x960 [ 42.266813][ T7] really_probe+0x240/0xca0 [ 42.271337][ T7] __driver_probe_device+0x1df/0x4b0 [ 42.276634][ T7] driver_probe_device+0x4c/0x1a0 [ 42.278317][ T2327] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 42.281638][ T7] __device_attach_driver+0x1d4/0x2e0 [ 42.281672][ T7] bus_for_each_drv+0x149/0x1d0 [ 42.281699][ T7] __device_attach+0x1e4/0x4b0 [ 42.304067][ T7] bus_probe_device+0x17c/0x1c0 [ 42.308917][ T7] device_add+0x112d/0x1a40 [ 42.313406][ T7] usb_set_configuration+0x1196/0x1bc0 [ 42.318860][ T7] usb_generic_driver_probe+0xcf/0x130 [ 42.324316][ T7] usb_probe_device+0xd8/0x2c0 [ 42.328353][ T21] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 42.329079][ T7] really_probe+0x240/0xca0 [ 42.329111][ T7] __driver_probe_device+0x1df/0x4b0 [ 42.329142][ T7] driver_probe_device+0x4c/0x1a0 [ 42.338297][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 42.341054][ T7] __device_attach_driver+0x1d4/0x2e0 [ 42.341088][ T7] bus_for_each_drv+0x149/0x1d0 [ 42.341114][ T7] __device_attach+0x1e4/0x4b0 [ 42.371569][ T7] bus_probe_device+0x17c/0x1c0 [ 42.376413][ T7] device_add+0x112d/0x1a40 [ 42.380909][ T7] usb_new_device+0xcb2/0x19d0 [ 42.385664][ T7] hub_event+0x2e3d/0x4ed0 [ 42.390075][ T7] process_one_work+0xa34/0x16f0 [ 42.395000][ T7] worker_thread+0x881/0x10c0 [ 42.399666][ T7] kthread+0x344/0x440 [ 42.403721][ T7] ret_from_fork+0x1f/0x30 [ 42.408128][ T7] [ 42.410455][ T7] Freed by task 892: [ 42.414329][ T7] kasan_save_stack+0x22/0x40 [ 42.419021][ T7] kasan_set_track+0x25/0x30 [ 42.423605][ T7] kasan_save_free_info+0x2b/0x40 [ 42.428616][ T7] ____kasan_slab_free+0x144/0x1b0 [ 42.433719][ T7] __kmem_cache_free+0xa1/0x350 [ 42.438563][ T7] pvr2_context_thread_func+0x664/0x8e0 [ 42.444099][ T7] kthread+0x344/0x440 [ 42.448154][ T7] ret_from_fork+0x1f/0x30 [ 42.452578][ T7] [ 42.454896][ T7] The buggy address belongs to the object at ffff88810eb98600 [ 42.454896][ T7] which belongs to the cache kmalloc-256 of size 256 [ 42.458481][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 42.468929][ T7] The buggy address is located 216 bytes inside of [ 42.468929][ T7] freed 256-byte region [ffff88810eb98600, ffff88810eb98700) [ 42.468955][ T7] [ 42.468959][ T7] The buggy address belongs to the physical page: [ 42.468968][ T7] page:ffffea00043ae600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10eb98 [ 42.468993][ T7] head:ffffea00043ae600 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 42.469011][ T7] anon flags: 0x200000000010200(slab|head|node=0|zone=2) [ 42.469028][ T7] page_type: 0xffffffff() [ 42.469046][ T7] raw: 0200000000010200 ffff888100041b40 ffffea00043ae300 0000000000000003 [ 42.478054][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.491832][ T7] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 42.491845][ T7] page dumped because: kasan: bad access detected [ 42.491853][ T7] page_owner tracks the page as allocated [ 42.491858][ T7] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7338785555, free_ts 0 [ 42.491895][ T7] post_alloc_hook+0x2db/0x350 [ 42.506623][ T25] usb 3-1: config 0 descriptor?? [ 42.510843][ T7] get_page_from_freelist+0x13d5/0x2cb0 [ 42.510884][ T7] __alloc_pages+0x1cb/0x4a0 [ 42.510915][ T7] alloc_page_interleave+0x1e/0x1e0 [ 42.510941][ T7] alloc_pages+0x233/0x270 [ 42.510961][ T7] allocate_slab+0x25f/0x390 [ 42.510988][ T7] ___slab_alloc+0xbc3/0x15d0 [ 42.548303][ T2327] usb 5-1: Using ep0 maxpacket: 8 [ 42.556323][ T7] __slab_alloc.constprop.0+0x56/0xa0 [ 42.556363][ T7] __kmem_cache_alloc_node+0x2c3/0x300 [ 42.567043][ T25] hub 3-1:0.0: bad descriptor, ignoring hub [ 42.568487][ T7] __kmalloc_node_track_caller+0x4f/0x1a0 [ 42.568529][ T7] krealloc+0x5e/0xf0 [ 42.568559][ T7] add_sysfs_param+0xca/0x960 [ 42.568578][ T7] param_sysfs_builtin_init+0x241/0x440 [ 42.568609][ T7] do_one_initcall+0x105/0x630 [ 42.588269][ T25] hub: probe of 3-1:0.0 failed with error -5 [ 42.592939][ T7] kernel_init_freeable+0x649/0xb90 [ 42.598491][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 42.603369][ T7] kernel_init+0x1e/0x2c0 [ 42.603397][ T7] page_owner free stack trace missing [ 42.603403][ T7] [ 42.701181][ T7] Memory state around the buggy address: [ 42.706877][ T7] ffff88810eb98580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.715030][ T7] ffff88810eb98600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.718394][ T21] usb 6-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice=e2.65 [ 42.723067][ T7] >ffff88810eb98680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.723079][ T7] ^ [ 42.723092][ T7] ffff88810eb98700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.723107][ T7] ffff88810eb98780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.723118][ T7] ================================================================== [ 42.723252][ T7] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 42.723262][ T7] CPU: 0 PID: 7 Comm: kworker/0:0 Not tainted 6.4.0-syzkaller-11311-g24be4d0b46bb #0 [ 42.723286][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 42.723298][ T7] Workqueue: usb_hub_wq hub_event [ 42.723327][ T7] Call Trace: [ 42.723332][ T7] [ 42.723340][ T7] dump_stack_lvl+0xd9/0x150 [ 42.723373][ T7] panic+0x686/0x730 [ 42.723408][ T7] ? panic_smp_self_stop+0xa0/0xa0 [ 42.723437][ T7] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 42.723465][ T7] check_panic_on_warn+0xb1/0xc0 [ 42.723494][ T7] end_report+0x108/0x150 [ 42.723515][ T7] kasan_report+0xfa/0x130 [ 42.723536][ T7] ? pvr2_context_set_notify+0x2c4/0x310 [ 42.723570][ T7] pvr2_context_set_notify+0x2c4/0x310 [ 42.723604][ T7] pvr_disconnect+0x80/0xf0 [ 42.723632][ T7] usb_unbind_interface+0x1dc/0x8e0 [ 42.723655][ T7] ? usb_unbind_device+0x1a0/0x1a0 [ 42.723675][ T7] device_remove+0x11f/0x170 [ 42.723705][ T7] device_release_driver_internal+0x443/0x610 [ 42.723738][ T7] ? put_device+0x1f/0x30 [ 42.723772][ T7] bus_remove_device+0x22c/0x420 [ 42.723802][ T7] device_del+0x399/0xa30 [ 42.723823][ T7] ? usb_disconnect+0xff/0x8a0 [ 42.723848][ T7] ? __device_link_del+0x380/0x380 [ 42.723870][ T7] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 42.723901][ T7] ? lock_downgrade+0x690/0x690 [ 42.723923][ T7] usb_disable_device+0x360/0x7b0 [ 42.723958][ T7] usb_disconnect+0x2db/0x8a0 [ 42.723985][ T7] hub_event+0x2073/0x4ed0 [ 42.724015][ T7] ? hub_port_debounce+0x3b0/0x3b0 [ 42.724042][ T7] ? lock_sync+0x190/0x190 [ 42.724063][ T7] ? lock_downgrade+0x690/0x690 [ 42.724083][ T7] ? do_raw_spin_lock+0x124/0x2b0 [ 42.724108][ T7] ? _raw_spin_unlock_irq+0x23/0x50 [ 42.724160][ T7] process_one_work+0xa34/0x16f0 [ 42.724190][ T7] ? rcuwait_wake_up+0xce/0x290 [ 42.724224][ T7] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 42.724255][ T7] worker_thread+0x881/0x10c0 [ 42.724283][ T7] ? process_one_work+0x16f0/0x16f0 [ 42.724311][ T7] kthread+0x344/0x440 [ 42.724334][ T7] ? kthread_complete_and_exit+0x40/0x40 [ 42.724359][ T7] ret_from_fork+0x1f/0x30 [ 42.724389][ T7] [ 42.732308][ T7] Kernel Offset: disabled [ 42.996839][ T7] Rebooting in 86400 seconds..