Warning: Permanently added '10.128.10.60' (ECDSA) to the list of known hosts. executing program [ 48.186689][ T107] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 48.546314][ T107] usb 1-1: config 0 has an invalid interface number: 17 but max is 0 [ 48.554627][ T107] usb 1-1: config 0 has no interface number 0 [ 48.560780][ T107] usb 1-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice= 3.f9 [ 48.569828][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.579470][ T107] usb 1-1: config 0 descriptor?? [ 48.618269][ T107] dw2102: su3000_identify_state [ 48.623222][ T107] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 48.629838][ T107] dw2102: su3000_power_ctrl: 1, initialized 0 [ 48.636075][ T107] dvb-usb: bulk message failed: -22 (2/0) [ 48.643442][ T107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 48.666690][ T107] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 48.673855][ T107] usb 1-1: media controller created [ 48.679412][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.686039][ T107] dw2102: i2c transfer failed. [ 48.690897][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.697511][ T107] dw2102: i2c transfer failed. [ 48.702272][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.708979][ T107] dw2102: i2c transfer failed. [ 48.713753][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.720364][ T107] dw2102: i2c transfer failed. [ 48.725210][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.731841][ T107] dw2102: i2c transfer failed. [ 48.736640][ T107] dvb-usb: bulk message failed: -22 (6/-2035711240) [ 48.743211][ T107] dw2102: i2c transfer failed. [ 48.748467][ T107] dvb-usb: MAC address: 02:02:02:02:02:02 [ 48.758221][ T107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. executing program [ 48.774283][ T107] dvb-usb: bulk message failed: -22 (1/0) [ 48.780175][ T107] dw2102: command 0x51 transfer failed. [ 48.787463][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.794118][ T107] dw2102: i2c transfer failed. [ 48.800003][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.806769][ T107] dw2102: i2c transfer failed. [ 48.807221][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.818297][ T107] dw2102: i2c transfer failed. [ 48.823082][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.829759][ T107] dw2102: i2c transfer failed. [ 48.834643][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.841282][ T107] dw2102: i2c transfer failed. [ 48.846083][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.852842][ T107] dw2102: i2c transfer failed. [ 48.907777][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.914754][ T107] dw2102: i2c transfer failed. [ 48.919619][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.926241][ T107] dw2102: i2c transfer failed. [ 48.931001][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.937610][ T107] dw2102: i2c transfer failed. [ 48.942390][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.948999][ T107] dw2102: i2c transfer failed. [ 48.953780][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.960402][ T107] dw2102: i2c transfer failed. [ 48.965303][ T107] dvb-usb: bulk message failed: -22 (5/-2035711240) [ 48.972061][ T107] dw2102: i2c transfer failed. [ 48.977240][ T107] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 48.985762][ T107] dw2102: Attached RS2000/TS2020! [ 48.991090][ T107] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 48.999509][ T107] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 49.066544][ T107] Registered IR keymap rc-su3000 [ 49.072086][ T107] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 49.081527][ T107] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 49.092221][ T107] dvb-usb: schedule remote query interval to 150 msecs. [ 49.099249][ T107] dw2102: su3000_power_ctrl: 0, initialized 1 [ 49.105325][ T107] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 49.114655][ T107] usb 1-1: USB disconnect, device number 2 [ 49.121328][ T107] ================================================================== [ 49.129444][ T107] BUG: KASAN: use-after-free in dvb_usb_device_exit+0xb6/0xc0 [ 49.137011][ T107] Read of size 8 at addr ffff8881cf6924d8 by task kworker/0:2/107 [ 49.144784][ T107] [ 49.147098][ T107] CPU: 0 PID: 107 Comm: kworker/0:2 Not tainted 5.2.0-rc1+ #10 [ 49.154610][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.164652][ T107] Workqueue: usb_hub_wq hub_event [ 49.169806][ T107] Call Trace: [ 49.173087][ T107] dump_stack+0xca/0x13e [ 49.177320][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.182428][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.187526][ T107] print_address_description+0x67/0x231 [ 49.193049][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.198179][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.203277][ T107] __kasan_report.cold+0x1a/0x32 [ 49.208189][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.213275][ T107] kasan_report+0xe/0x20 [ 49.217518][ T107] dvb_usb_device_exit+0xb6/0xc0 [ 49.222438][ T107] usb_unbind_interface+0x1bd/0x8a0 [ 49.227616][ T107] ? usb_autoresume_device+0x60/0x60 [ 49.232881][ T107] device_release_driver_internal+0x404/0x4c0 [ 49.238926][ T107] bus_remove_device+0x2dc/0x4a0 [ 49.243855][ T107] device_del+0x460/0xb80 [ 49.248286][ T107] ? __device_links_no_driver+0x240/0x240 [ 49.254088][ T107] ? lockdep_hardirqs_on+0x379/0x580 [ 49.259356][ T107] ? remove_intf_ep_devs+0x13f/0x1d0 [ 49.264616][ T107] usb_disable_device+0x211/0x690 [ 49.269621][ T107] usb_disconnect+0x284/0x830 [ 49.274278][ T107] hub_event+0x1409/0x3590 [ 49.278673][ T107] ? hub_port_debounce+0x260/0x260 [ 49.283767][ T107] process_one_work+0x905/0x1570 [ 49.288737][ T107] ? pwq_dec_nr_in_flight+0x310/0x310 [ 49.294155][ T107] ? do_raw_spin_lock+0x11a/0x280 [ 49.299175][ T107] worker_thread+0x7ab/0xe20 [ 49.303749][ T107] ? process_one_work+0x1570/0x1570 [ 49.308927][ T107] kthread+0x30b/0x410 [ 49.312971][ T107] ? kthread_park+0x1a0/0x1a0 [ 49.317627][ T107] ret_from_fork+0x24/0x30 [ 49.322022][ T107] [ 49.324333][ T107] Allocated by task 107: [ 49.328556][ T107] save_stack+0x1b/0x80 [ 49.332789][ T107] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 49.338409][ T107] __kmalloc_track_caller+0xe2/0x2b0 [ 49.343674][ T107] kmemdup+0x23/0x50 [ 49.347550][ T107] dw2102_probe+0x627/0xc40 [ 49.352033][ T107] usb_probe_interface+0x305/0x7a0 [ 49.357133][ T107] really_probe+0x281/0x660 [ 49.361614][ T107] driver_probe_device+0x104/0x210 [ 49.366698][ T107] __device_attach_driver+0x1c2/0x220 [ 49.372053][ T107] bus_for_each_drv+0x15c/0x1e0 [ 49.376886][ T107] __device_attach+0x217/0x360 [ 49.381628][ T107] bus_probe_device+0x1e4/0x290 [ 49.386452][ T107] device_add+0xae6/0x16f0 [ 49.390846][ T107] usb_set_configuration+0xdf6/0x1670 [ 49.396204][ T107] generic_probe+0x9d/0xd5 [ 49.400696][ T107] usb_probe_device+0x99/0x100 [ 49.405450][ T107] really_probe+0x281/0x660 [ 49.409933][ T107] driver_probe_device+0x104/0x210 [ 49.415021][ T107] __device_attach_driver+0x1c2/0x220 [ 49.420373][ T107] bus_for_each_drv+0x15c/0x1e0 [ 49.425214][ T107] __device_attach+0x217/0x360 [ 49.429951][ T107] bus_probe_device+0x1e4/0x290 [ 49.434779][ T107] device_add+0xae6/0x16f0 [ 49.439179][ T107] usb_new_device.cold+0x8c1/0x1016 [ 49.444378][ T107] hub_event+0x1ada/0x3590 [ 49.448780][ T107] process_one_work+0x905/0x1570 [ 49.453692][ T107] worker_thread+0x96/0xe20 [ 49.458167][ T107] kthread+0x30b/0x410 [ 49.462251][ T107] ret_from_fork+0x24/0x30 [ 49.466645][ T107] [ 49.468956][ T107] Freed by task 107: [ 49.472943][ T107] save_stack+0x1b/0x80 [ 49.477086][ T107] __kasan_slab_free+0x130/0x180 [ 49.481997][ T107] kfree+0xd7/0x280 [ 49.485837][ T107] dw2102_probe+0x871/0xc40 [ 49.490348][ T107] usb_probe_interface+0x305/0x7a0 [ 49.495445][ T107] really_probe+0x281/0x660 [ 49.499938][ T107] driver_probe_device+0x104/0x210 [ 49.505142][ T107] __device_attach_driver+0x1c2/0x220 [ 49.510495][ T107] bus_for_each_drv+0x15c/0x1e0 [ 49.515328][ T107] __device_attach+0x217/0x360 [ 49.520072][ T107] bus_probe_device+0x1e4/0x290 [ 49.524898][ T107] device_add+0xae6/0x16f0 [ 49.529294][ T107] usb_set_configuration+0xdf6/0x1670 [ 49.534750][ T107] generic_probe+0x9d/0xd5 [ 49.539144][ T107] usb_probe_device+0x99/0x100 [ 49.543882][ T107] really_probe+0x281/0x660 [ 49.548358][ T107] driver_probe_device+0x104/0x210 [ 49.553444][ T107] __device_attach_driver+0x1c2/0x220 [ 49.558793][ T107] bus_for_each_drv+0x15c/0x1e0 [ 49.563622][ T107] __device_attach+0x217/0x360 [ 49.568359][ T107] bus_probe_device+0x1e4/0x290 [ 49.573182][ T107] device_add+0xae6/0x16f0 [ 49.577580][ T107] usb_new_device.cold+0x8c1/0x1016 [ 49.582750][ T107] hub_event+0x1ada/0x3590 [ 49.587251][ T107] process_one_work+0x905/0x1570 [ 49.592167][ T107] worker_thread+0x96/0xe20 [ 49.596649][ T107] kthread+0x30b/0x410 [ 49.600695][ T107] ret_from_fork+0x24/0x30 [ 49.605093][ T107] [ 49.607401][ T107] The buggy address belongs to the object at ffff8881cf692200 [ 49.607401][ T107] which belongs to the cache kmalloc-4k of size 4096 [ 49.621426][ T107] The buggy address is located 728 bytes inside of [ 49.621426][ T107] 4096-byte region [ffff8881cf692200, ffff8881cf693200) [ 49.634758][ T107] The buggy address belongs to the page: [ 49.640411][ T107] page:ffffea00073da400 refcount:1 mapcount:0 mapping:ffff8881dac02600 index:0xffff8881cf696600 compound_mapcount: 0 [ 49.652627][ T107] flags: 0x200000000010200(slab|head) [ 49.657981][ T107] raw: 0200000000010200 ffff8881dac00700 ffffea00073de408 ffff8881dac02600 [ 49.666546][ T107] raw: ffff8881cf696600 0000000000070005 00000001ffffffff 0000000000000000 [ 49.675106][ T107] page dumped because: kasan: bad access detected [ 49.681491][ T107] [ 49.683797][ T107] Memory state around the buggy address: [ 49.689411][ T107] ffff8881cf692380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.697455][ T107] ffff8881cf692400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.705510][ T107] >ffff8881cf692480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.713544][ T107] ^ [ 49.720451][ T107] ffff8881cf692500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.728542][ T107] ffff8881cf692580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 49.736592][ T107] ================================================================== [ 49.744738][ T107] Disabling lock debugging due to kernel taint [ 49.750964][ T107] Kernel panic - not syncing: panic_on_warn set ... [ 49.757574][ T107] CPU: 0 PID: 107 Comm: kworker/0:2 Tainted: G B 5.2.0-rc1+ #10 [ 49.766488][ T107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.776539][ T107] Workqueue: usb_hub_wq hub_event [ 49.781535][ T107] Call Trace: [ 49.784809][ T107] dump_stack+0xca/0x13e [ 49.789030][ T107] panic+0x292/0x6c9 [ 49.792904][ T107] ? __warn_printk+0xf3/0xf3 [ 49.797470][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.802619][ T107] ? trace_hardirqs_on+0x55/0x1c0 [ 49.807626][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.813836][ T107] end_report+0x43/0x49 [ 49.818053][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.830801][ T107] __kasan_report.cold+0xd/0x32 [ 49.835647][ T107] ? dvb_usb_device_exit+0xb6/0xc0 [ 49.840742][ T107] kasan_report+0xe/0x20 [ 49.844959][ T107] dvb_usb_device_exit+0xb6/0xc0 [ 49.849880][ T107] usb_unbind_interface+0x1bd/0x8a0 [ 49.855060][ T107] ? usb_autoresume_device+0x60/0x60 [ 49.860338][ T107] device_release_driver_internal+0x404/0x4c0 [ 49.866461][ T107] bus_remove_device+0x2dc/0x4a0 [ 49.871384][ T107] device_del+0x460/0xb80 [ 49.875698][ T107] ? __device_links_no_driver+0x240/0x240 [ 49.881399][ T107] ? lockdep_hardirqs_on+0x379/0x580 [ 49.886781][ T107] ? remove_intf_ep_devs+0x13f/0x1d0 [ 49.892041][ T107] usb_disable_device+0x211/0x690 [ 49.897051][ T107] usb_disconnect+0x284/0x830 [ 49.901707][ T107] hub_event+0x1409/0x3590 [ 49.906106][ T107] ? hub_port_debounce+0x260/0x260 [ 49.911282][ T107] process_one_work+0x905/0x1570 [ 49.916205][ T107] ? pwq_dec_nr_in_flight+0x310/0x310 [ 49.921613][ T107] ? do_raw_spin_lock+0x11a/0x280 [ 49.926656][ T107] worker_thread+0x7ab/0xe20 [ 49.931230][ T107] ? process_one_work+0x1570/0x1570 [ 49.936405][ T107] kthread+0x30b/0x410 [ 49.940452][ T107] ? kthread_park+0x1a0/0x1a0 [ 49.945229][ T107] ret_from_fork+0x24/0x30 [ 49.950068][ T107] Kernel Offset: disabled [ 49.954384][ T107] Rebooting in 86400 seconds..