Warning: Permanently added '10.128.0.8' (ECDSA) to the list of known hosts. executing program [ 26.900927][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.140894][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 27.300947][ T83] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.380971][ T83] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 95, changing to 7 [ 27.630941][ T83] usb 1-1: string descriptor 0 read error: -22 [ 27.637213][ T83] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 27.646262][ T83] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.693876][ T83] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 27.701425][ T83] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 27.707531][ T83] usb 1-1: 2:1 : invalid channels 0 [ 27.921070][ T83] ================================================================== [ 27.929391][ T83] BUG: KASAN: slab-out-of-bounds in build_audio_procunit+0x1306/0x13f0 [ 27.937603][ T83] Read of size 1 at addr ffff8881d5b604d5 by task kworker/1:2/83 [ 27.945384][ T83] [ 27.947692][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.4.0-rc3+ #0 [ 27.955034][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.965072][ T83] Workqueue: usb_hub_wq hub_event [ 27.970068][ T83] Call Trace: [ 27.973335][ T83] dump_stack+0xca/0x13e [ 27.977551][ T83] ? build_audio_procunit+0x1306/0x13f0 [ 27.983071][ T83] ? build_audio_procunit+0x1306/0x13f0 [ 27.988606][ T83] print_address_description.constprop.0+0x36/0x50 [ 27.995079][ T83] ? build_audio_procunit+0x1306/0x13f0 [ 28.000596][ T83] ? build_audio_procunit+0x1306/0x13f0 [ 28.006112][ T83] __kasan_report.cold+0x1a/0x33 [ 28.011023][ T83] ? build_audio_procunit+0x1306/0x13f0 [ 28.016541][ T83] kasan_report+0xe/0x20 [ 28.020761][ T83] build_audio_procunit+0x1306/0x13f0 [ 28.026114][ T83] parse_audio_unit+0x17e9/0x36f0 [ 28.031110][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 28.036892][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 28.042153][ T83] ? stack_depot_save+0x252/0x440 [ 28.047173][ T83] ? build_audio_procunit+0x13f0/0x13f0 [ 28.052706][ T83] ? save_stack+0x4c/0x80 [ 28.057007][ T83] ? save_stack+0x1b/0x80 [ 28.061309][ T83] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 28.067101][ T83] ? snd_usb_create_mixer+0x180/0x1890 [ 28.072528][ T83] ? usb_audio_probe+0xc76/0x2010 [ 28.077525][ T83] ? usb_probe_interface+0x305/0x7a0 [ 28.082783][ T83] ? really_probe+0x281/0x6d0 [ 28.087433][ T83] ? driver_probe_device+0x104/0x210 [ 28.092707][ T83] ? __device_attach_driver+0x1c2/0x220 [ 28.098241][ T83] ? bus_for_each_drv+0x162/0x1e0 [ 28.103238][ T83] ? __device_attach+0x217/0x360 [ 28.108147][ T83] ? bus_probe_device+0x1e4/0x290 [ 28.113141][ T83] ? device_add+0xae6/0x16f0 [ 28.117720][ T83] ? usb_set_configuration+0xdf6/0x1670 [ 28.123237][ T83] ? validate_desc.part.0+0x17f/0x240 [ 28.128596][ T83] snd_usb_mixer_controls+0x715/0xb90 [ 28.133953][ T83] ? parse_audio_unit+0x36f0/0x36f0 [ 28.139147][ T83] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 28.144761][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.150023][ T83] ? __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 28.155806][ T83] ? kasan_unpoison_shadow+0x30/0x40 [ 28.161505][ T83] ? usb_ifnum_to_if+0x12b/0x180 [ 28.166435][ T83] snd_usb_create_mixer+0x2b5/0x1890 [ 28.171696][ T83] ? mark_lock+0xbc/0x1160 [ 28.176092][ T83] ? mark_held_locks+0x9f/0xe0 [ 28.180838][ T83] ? snd_usb_mixer_interrupt+0x800/0x800 [ 28.186456][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 28.191714][ T83] ? usb_driver_claim_interface+0x210/0x420 [ 28.197577][ T83] ? snd_usb_create_stream+0x16a/0x4c0 [ 28.203008][ T83] usb_audio_probe+0xc76/0x2010 [ 28.207832][ T83] ? usb_audio_resume+0x20/0x20 [ 28.212655][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 28.218433][ T83] usb_probe_interface+0x305/0x7a0 [ 28.223537][ T83] ? usb_probe_device+0x100/0x100 [ 28.228536][ T83] really_probe+0x281/0x6d0 [ 28.233028][ T83] driver_probe_device+0x104/0x210 [ 28.238118][ T83] __device_attach_driver+0x1c2/0x220 [ 28.243475][ T83] ? driver_allows_async_probing+0x160/0x160 [ 28.249484][ T83] bus_for_each_drv+0x162/0x1e0 [ 28.254315][ T83] ? bus_rescan_devices+0x20/0x20 [ 28.259317][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 28.265112][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 28.270372][ T83] __device_attach+0x217/0x360 [ 28.275120][ T83] ? device_bind_driver+0xd0/0xd0 [ 28.280115][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 28.285373][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 28.290632][ T83] bus_probe_device+0x1e4/0x290 [ 28.295457][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 28.301321][ T83] device_add+0xae6/0x16f0 [ 28.305712][ T83] ? uevent_store+0x50/0x50 [ 28.310245][ T83] usb_set_configuration+0xdf6/0x1670 [ 28.315596][ T83] generic_probe+0x9d/0xd5 [ 28.319983][ T83] usb_probe_device+0x99/0x100 [ 28.324721][ T83] ? usb_suspend+0x620/0x620 [ 28.329287][ T83] really_probe+0x281/0x6d0 [ 28.333803][ T83] driver_probe_device+0x104/0x210 [ 28.338891][ T83] __device_attach_driver+0x1c2/0x220 [ 28.344239][ T83] ? driver_allows_async_probing+0x160/0x160 [ 28.350197][ T83] bus_for_each_drv+0x162/0x1e0 [ 28.355023][ T83] ? bus_rescan_devices+0x20/0x20 [ 28.360022][ T83] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 28.365803][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 28.371064][ T83] __device_attach+0x217/0x360 [ 28.375801][ T83] ? device_bind_driver+0xd0/0xd0 [ 28.380816][ T83] ? kobject_uevent_env+0x29e/0x1150 [ 28.386081][ T83] ? kobject_uevent_env+0x2a8/0x1150 [ 28.391339][ T83] bus_probe_device+0x1e4/0x290 [ 28.396163][ T83] ? blocking_notifier_call_chain+0x54/0xa0 [ 28.402026][ T83] device_add+0xae6/0x16f0 [ 28.406414][ T83] ? uevent_store+0x50/0x50 [ 28.410903][ T83] usb_new_device.cold+0x6a4/0xe79 [ 28.415985][ T83] hub_event+0x1dd0/0x37e0 [ 28.420379][ T83] ? hub_port_debounce+0x260/0x260 [ 28.425464][ T83] ? find_held_lock+0x2d/0x110 [ 28.430201][ T83] ? mark_held_locks+0xe0/0xe0 [ 28.434972][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 28.440501][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 28.445759][ T83] process_one_work+0x92b/0x1530 [ 28.450672][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 28.456029][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 28.461037][ T83] worker_thread+0x96/0xe20 [ 28.465539][ T83] ? process_one_work+0x1530/0x1530 [ 28.470708][ T83] kthread+0x318/0x420 [ 28.474761][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 28.480103][ T83] ret_from_fork+0x24/0x30 [ 28.484490][ T83] [ 28.486792][ T83] Allocated by task 83: [ 28.490923][ T83] save_stack+0x1b/0x80 [ 28.495050][ T83] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 28.500652][ T83] usb_get_configuration+0x314/0x3050 [ 28.506005][ T83] usb_new_device+0xd3/0x160 [ 28.510565][ T83] hub_event+0x1dd0/0x37e0 [ 28.514975][ T83] process_one_work+0x92b/0x1530 [ 28.519898][ T83] worker_thread+0x96/0xe20 [ 28.524372][ T83] kthread+0x318/0x420 [ 28.528414][ T83] ret_from_fork+0x24/0x30 [ 28.532799][ T83] [ 28.535101][ T83] Freed by task 1: [ 28.538796][ T83] save_stack+0x1b/0x80 [ 28.542925][ T83] __kasan_slab_free+0x130/0x180 [ 28.547833][ T83] kfree+0xe4/0x320 [ 28.551614][ T83] scsi_probe_and_add_lun+0x2815/0x2cd0 [ 28.557131][ T83] __scsi_scan_target+0x273/0xc30 [ 28.562130][ T83] scsi_scan_channel.part.0+0x126/0x1a0 [ 28.567645][ T83] scsi_scan_host_selected+0x2bb/0x3f0 [ 28.573101][ T83] do_scsi_scan_host+0x1e8/0x260 [ 28.578007][ T83] scsi_scan_host+0x37c/0x440 [ 28.582660][ T83] virtscsi_probe+0x9b7/0xbb5 [ 28.587310][ T83] virtio_dev_probe+0x463/0x710 [ 28.592135][ T83] really_probe+0x281/0x6d0 [ 28.596610][ T83] driver_probe_device+0x104/0x210 [ 28.601693][ T83] device_driver_attach+0x108/0x140 [ 28.606881][ T83] __driver_attach+0xda/0x240 [ 28.611530][ T83] bus_for_each_dev+0x14b/0x1d0 [ 28.616354][ T83] bus_add_driver+0x457/0x5a0 [ 28.621002][ T83] driver_register+0x1c4/0x330 [ 28.625738][ T83] init+0xa1/0x115 [ 28.629431][ T83] do_one_initcall+0xf0/0x614 [ 28.634095][ T83] kernel_init_freeable+0x4a9/0x596 [ 28.639267][ T83] kernel_init+0xd/0x1bf [ 28.643479][ T83] ret_from_fork+0x24/0x30 [ 28.647876][ T83] [ 28.650178][ T83] The buggy address belongs to the object at ffff8881d5b60400 [ 28.650178][ T83] which belongs to the cache kmalloc-256 of size 256 [ 28.664203][ T83] The buggy address is located 213 bytes inside of [ 28.664203][ T83] 256-byte region [ffff8881d5b60400, ffff8881d5b60500) [ 28.677442][ T83] The buggy address belongs to the page: [ 28.683050][ T83] page:ffffea000756d800 refcount:1 mapcount:0 mapping:ffff8881da002780 index:0x0 compound_mapcount: 0 [ 28.693963][ T83] flags: 0x200000000010200(slab|head) [ 28.706006][ T83] raw: 0200000000010200 ffffea00075b3980 0000000300000003 ffff8881da002780 [ 28.714577][ T83] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 28.723148][ T83] page dumped because: kasan: bad access detected [ 28.729530][ T83] [ 28.731828][ T83] Memory state around the buggy address: [ 28.737429][ T83] ffff8881d5b60380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 28.745478][ T83] ffff8881d5b60400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 28.753510][ T83] >ffff8881d5b60480: 00 00 00 00 00 00 00 00 00 02 fc fc fc fc fc fc [ 28.761539][ T83] ^ [ 28.768182][ T83] ffff8881d5b60500: fc fc fc fc fc fc fc fc fc fc fc fc