Warning: Permanently added '10.128.0.84' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 36.324538][ T2159] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 36.574357][ T2159] usb 1-1: Using ep0 maxpacket: 8 [ 36.704493][ T2159] usb 1-1: config 135 has an invalid interface number: 97 but max is 2 [ 36.712993][ T2159] usb 1-1: config 135 has an invalid interface number: 40 but max is 2 [ 36.721622][ T2159] usb 1-1: config 135 has an invalid interface number: 189 but max is 2 [ 36.730028][ T2159] usb 1-1: config 135 contains an unexpected descriptor of type 0x2, skipping [ 36.738951][ T2159] usb 1-1: config 135 has no interface number 0 [ 36.745267][ T2159] usb 1-1: config 135 has no interface number 1 [ 36.751534][ T2159] usb 1-1: config 135 has no interface number 2 [ 36.757896][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 36.769138][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0x1 has an invalid bInterval 72, changing to 7 [ 36.780409][ T2159] usb 1-1: config 135 interface 97 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 36.791357][ T2159] usb 1-1: config 135 interface 97 altsetting 8 bulk endpoint 0xE has invalid maxpacket 16 [ 36.801458][ T2159] usb 1-1: config 135 interface 97 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 36.812341][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 36.823477][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 36.834940][ T2159] usb 1-1: config 135 interface 97 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 36.845782][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0x3 has an invalid bInterval 255, changing to 7 [ 36.857054][ T2159] usb 1-1: config 135 interface 97 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 36.867043][ T2159] usb 1-1: config 135 interface 97 altsetting 8 bulk endpoint 0xB has invalid maxpacket 8 [ 36.877156][ T2159] usb 1-1: config 135 interface 97 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 36.887954][ T2159] usb 1-1: config 135 interface 40 altsetting 6 bulk endpoint 0xD has invalid maxpacket 16 [ 36.898053][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 36.908938][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0xD, skipping [ 36.919783][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 36.930781][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0x1, skipping [ 36.941655][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 36.952532][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has an invalid endpoint with address 0x0, skipping [ 36.963271][ T2159] usb 1-1: config 135 interface 40 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 36.974138][ T2159] usb 1-1: config 135 interface 189 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 36.985076][ T2159] usb 1-1: config 135 interface 189 altsetting 1 has an invalid endpoint descriptor of length 2, skipping [ 36.996470][ T2159] usb 1-1: config 135 interface 189 altsetting 1 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 37.007833][ T2159] usb 1-1: config 135 interface 189 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 37.018799][ T2159] usb 1-1: config 135 interface 189 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 37.029751][ T2159] usb 1-1: config 135 interface 189 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 37.043052][ T2159] usb 1-1: config 135 interface 97 has no altsetting 0 [ 37.049990][ T2159] usb 1-1: config 135 interface 40 has no altsetting 0 [ 37.056944][ T2159] usb 1-1: config 135 interface 189 has no altsetting 0 [ 37.234088][ T2159] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=fa.6d [ 37.243181][ T2159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.251255][ T2159] usb 1-1: Product: syz [ 37.255492][ T2159] usb 1-1: Manufacturer: syz [ 37.260082][ T2159] usb 1-1: SerialNumber: syz executing program [ 37.616278][ T2159] dw2102: su3000_identify_state [ 37.621319][ T2159] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 37.629300][ T2159] dw2102: su3000_power_ctrl: 1, initialized 0 [ 37.636429][ T2159] dvb-usb: bulk message failed: -22 (2/0) [ 37.644310][ T2159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 37.674075][ T2159] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 37.681200][ T2159] usb 1-1: media controller created [ 37.687311][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.693146][ T2159] dw2102: i2c transfer failed. [ 37.698452][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.704573][ T2159] dw2102: i2c transfer failed. [ 37.709480][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.715286][ T2159] dw2102: i2c transfer failed. [ 37.720092][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.725867][ T2159] dw2102: i2c transfer failed. [ 37.730677][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.736473][ T2159] dw2102: i2c transfer failed. [ 37.741339][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 37.747132][ T2159] dw2102: i2c transfer failed. [ 37.751921][ T2159] dvb-usb: MAC address: 02:02:02:02:02:02 [ 37.762240][ T2159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 37.784524][ T2159] dvb-usb: bulk message failed: -22 (1/0) [ 37.790292][ T2159] dw2102: command 0x51 transfer failed. [ 37.820608][ T2159] DVB: Unable to find symbol m88rs2000_attach() [ 37.826970][ T2159] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 37.933692][ T2159] rc_core: IR keymap rc-su3000 not found [ 37.939415][ T2159] Registered IR keymap rc-empty [ 37.945473][ T2159] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 37.955899][ T2159] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 37.967833][ T2159] dvb-usb: schedule remote query interval to 150 msecs. [ 37.974936][ T2159] dw2102: su3000_power_ctrl: 0, initialized 1 [ 37.981010][ T2159] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 38.047714][ T2159] dw2102: su3000_identify_state [ 38.052611][ T2159] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 38.060508][ T2159] dw2102: su3000_power_ctrl: 1, initialized 0 [ 38.067076][ T2159] dvb-usb: bulk message failed: -22 (2/0) [ 38.074173][ T2159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 38.103760][ T2159] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 38.110756][ T2159] usb 1-1: media controller created [ 38.116505][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.122265][ T2159] dw2102: i2c transfer failed. [ 38.127536][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.133280][ T2159] dw2102: i2c transfer failed. [ 38.138902][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.144685][ T2159] dw2102: i2c transfer failed. [ 38.149489][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.155297][ T2159] dw2102: i2c transfer failed. [ 38.160154][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.166034][ T2159] dw2102: i2c transfer failed. [ 38.170861][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.176666][ T2159] dw2102: i2c transfer failed. [ 38.181449][ T2159] dvb-usb: MAC address: 02:02:02:02:02:02 [ 38.191430][ T2159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 38.200709][ T17] dvb-usb: bulk message failed: -22 (1/0) [ 38.206606][ T17] dw2102: i2c transfer failed. [ 38.218044][ T2159] dvb-usb: bulk message failed: -22 (1/0) [ 38.223913][ T2159] dw2102: command 0x51 transfer failed. [ 38.238083][ T2159] DVB: Unable to find symbol m88rs2000_attach() [ 38.244408][ T2159] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 38.333450][ T2159] rc_core: IR keymap rc-su3000 not found [ 38.339142][ T2159] Registered IR keymap rc-empty [ 38.344692][ T2159] rc rc1: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 38.354084][ T2159] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input6 [ 38.364111][ T17] dvb-usb: bulk message failed: -22 (1/0) [ 38.369854][ T17] dw2102: i2c transfer failed. [ 38.375132][ T2159] dvb-usb: schedule remote query interval to 150 msecs. [ 38.382088][ T2159] dw2102: su3000_power_ctrl: 0, initialized 1 [ 38.388343][ T2159] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 38.435002][ T2159] dw2102: su3000_identify_state [ 38.439899][ T2159] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 38.447662][ T2159] dw2102: su3000_power_ctrl: 1, initialized 0 [ 38.454541][ T2159] dvb-usb: bulk message failed: -22 (2/0) [ 38.460974][ T2159] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 38.483734][ T2159] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 38.490816][ T2159] usb 1-1: media controller created [ 38.498973][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.505024][ T2159] dw2102: i2c transfer failed. [ 38.509873][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.515904][ T2159] dw2102: i2c transfer failed. [ 38.520716][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.526513][ T2159] dw2102: i2c transfer failed. [ 38.531341][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.537167][ T2159] dw2102: i2c transfer failed. [ 38.542031][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.547847][ T2159] dw2102: i2c transfer failed. [ 38.552667][ T2159] dvb-usb: bulk message failed: -22 (6/0) [ 38.558441][ T2159] dw2102: i2c transfer failed. [ 38.563341][ T2159] dvb-usb: MAC address: 02:02:02:02:02:02 [ 38.572933][ T2159] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 38.581968][ T17] dvb-usb: bulk message failed: -22 (1/0) [ 38.587817][ T17] dw2102: i2c transfer failed. [ 38.598032][ T17] dvb-usb: bulk message failed: -22 (1/0) [ 38.603857][ T17] dw2102: i2c transfer failed. [ 38.609055][ T2159] dvb-usb: bulk message failed: -22 (1/0) [ 38.614920][ T2159] dw2102: command 0x51 transfer failed. [ 38.646114][ T2159] DVB: Unable to find symbol m88rs2000_attach() [ 38.652446][ T2159] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 38.753586][ T2159] rc_core: IR keymap rc-su3000 not found [ 38.759280][ T2159] Registered IR keymap rc-empty [ 38.764823][ T2159] rc rc2: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc2 [ 38.774160][ T2159] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc2/input7 [ 38.783816][ T17] dvb-usb: bulk message failed: -22 (1/0) [ 38.789545][ T17] dw2102: i2c transfer failed. [ 38.794915][ T2159] dvb-usb: schedule remote query interval to 150 msecs. [ 38.801876][ T2159] dw2102: su3000_power_ctrl: 0, initialized 1 [ 38.808139][ T2159] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 38.819307][ T2159] usb 1-1: USB disconnect, device number 2 [ 38.833521][ T2159] ================================================================== [ 38.841779][ T2159] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0 [ 38.849428][ T2159] Read of size 8 at addr ffff888101e623e0 by task kworker/1:2/2159 [ 38.857322][ T2159] [ 38.859667][ T2159] CPU: 1 PID: 2159 Comm: kworker/1:2 Not tainted 5.10.0-rc7-syzkaller #0 [ 38.868084][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.878154][ T2159] Workqueue: usb_hub_wq hub_event [ 38.883177][ T2159] Call Trace: [ 38.886479][ T2159] dump_stack+0x107/0x163 [ 38.890815][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 38.896091][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 38.901376][ T2159] print_address_description.constprop.0.cold+0xae/0x4c8 [ 38.908403][ T2159] ? usb_hcd_flush_endpoint+0x140/0x410 [ 38.913966][ T2159] ? vprintk_func+0x93/0x140 [ 38.918558][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 38.923871][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 38.929187][ T2159] kasan_report.cold+0x1f/0x37 [ 38.933971][ T2159] ? _raw_spin_unlock_bh+0x10/0x30 [ 38.939082][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 38.944363][ T2159] dvb_usb_device_exit+0x19a/0x1a0 [ 38.949471][ T2159] ? dvb_usb_exit.isra.0+0x310/0x310 [ 38.954751][ T2159] ? usb_disable_interface+0x177/0x3c0 [ 38.960219][ T2159] usb_unbind_interface+0x1d8/0x8d0 [ 38.965528][ T2159] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 38.971091][ T2159] ? usb_unbind_device+0x1a0/0x1a0 [ 38.976252][ T2159] __device_release_driver+0x3bd/0x6f0 [ 38.981881][ T2159] device_release_driver+0x26/0x40 [ 38.987091][ T2159] bus_remove_device+0x2eb/0x5a0 [ 38.992018][ T2159] device_del+0x502/0xec0 [ 38.996365][ T2159] ? device_link_add_missing_supplier_links+0x370/0x370 [ 39.003291][ T2159] ? kobject_put+0x1f3/0x540 [ 39.007951][ T2159] usb_disable_device+0x35b/0x7b0 [ 39.012989][ T2159] usb_disconnect.cold+0x27d/0x780 [ 39.018103][ T2159] hub_event+0x1c8a/0x42d0 [ 39.022552][ T2159] ? hub_port_debounce+0x3b0/0x3b0 [ 39.027663][ T2159] ? __lock_acquire+0x821/0x54f0 [ 39.032608][ T2159] ? put_pwq+0xb1/0x1b0 [ 39.036762][ T2159] ? lock_release+0x6d0/0x6d0 [ 39.041470][ T2159] ? lock_downgrade+0x6d0/0x6d0 [ 39.046382][ T2159] ? do_raw_spin_lock+0x120/0x2b0 [ 39.051441][ T2159] process_one_work+0x933/0x1520 [ 39.056485][ T2159] ? lock_release+0x6d0/0x6d0 [ 39.061270][ T2159] ? pwq_dec_nr_in_flight+0x320/0x320 [ 39.066635][ T2159] ? rwlock_bug.part.0+0x90/0x90 [ 39.071594][ T2159] worker_thread+0x82b/0x1120 [ 39.076281][ T2159] ? __kthread_parkme+0x118/0x1d0 [ 39.081329][ T2159] ? process_one_work+0x1520/0x1520 [ 39.086517][ T2159] kthread+0x38c/0x460 [ 39.090614][ T2159] ? _raw_spin_unlock_irq+0x1f/0x30 [ 39.095808][ T2159] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 39.101692][ T2159] ret_from_fork+0x1f/0x30 [ 39.106087][ T2159] [ 39.108399][ T2159] Allocated by task 2159: [ 39.112715][ T2159] kasan_save_stack+0x1b/0x40 [ 39.117381][ T2159] __kasan_kmalloc.constprop.0+0xc2/0xd0 [ 39.123006][ T2159] __kmalloc_track_caller+0x14c/0x2e0 [ 39.128388][ T2159] kmemdup+0x23/0x50 [ 39.132293][ T2159] dw2102_probe+0x57c/0xb10 [ 39.136780][ T2159] usb_probe_interface+0x315/0x7f0 [ 39.141877][ T2159] really_probe+0x291/0xde0 [ 39.146386][ T2159] driver_probe_device+0x26b/0x3d0 [ 39.151533][ T2159] __device_attach_driver+0x1d1/0x290 [ 39.156912][ T2159] bus_for_each_drv+0x15f/0x1e0 [ 39.161748][ T2159] __device_attach+0x228/0x4a0 [ 39.166505][ T2159] bus_probe_device+0x1e4/0x290 [ 39.171342][ T2159] device_add+0xbb2/0x1ce0 [ 39.175767][ T2159] usb_set_configuration+0x113c/0x1910 [ 39.181221][ T2159] usb_generic_driver_probe+0xba/0x100 [ 39.186698][ T2159] usb_probe_device+0xd9/0x2c0 [ 39.191455][ T2159] really_probe+0x291/0xde0 [ 39.195945][ T2159] driver_probe_device+0x26b/0x3d0 [ 39.201055][ T2159] __device_attach_driver+0x1d1/0x290 [ 39.206421][ T2159] bus_for_each_drv+0x15f/0x1e0 [ 39.211254][ T2159] __device_attach+0x228/0x4a0 [ 39.216009][ T2159] bus_probe_device+0x1e4/0x290 [ 39.220845][ T2159] device_add+0xbb2/0x1ce0 [ 39.225314][ T2159] usb_new_device.cold+0x71d/0xfe9 [ 39.230451][ T2159] hub_event+0x2348/0x42d0 [ 39.234862][ T2159] process_one_work+0x933/0x1520 [ 39.239798][ T2159] worker_thread+0x64c/0x1120 [ 39.244471][ T2159] kthread+0x38c/0x460 [ 39.248528][ T2159] ret_from_fork+0x1f/0x30 [ 39.252952][ T2159] [ 39.255300][ T2159] Freed by task 2159: [ 39.259281][ T2159] kasan_save_stack+0x1b/0x40 [ 39.263961][ T2159] kasan_set_track+0x1c/0x30 [ 39.268558][ T2159] kasan_set_free_info+0x1b/0x30 [ 39.273513][ T2159] __kasan_slab_free+0x102/0x140 [ 39.278441][ T2159] slab_free_freelist_hook+0x5d/0x150 [ 39.283793][ T2159] kfree+0xe5/0x5e0 [ 39.287588][ T2159] dw2102_probe+0x782/0xb10 [ 39.292076][ T2159] usb_probe_interface+0x315/0x7f0 [ 39.297172][ T2159] really_probe+0x291/0xde0 [ 39.301676][ T2159] driver_probe_device+0x26b/0x3d0 [ 39.306790][ T2159] __device_attach_driver+0x1d1/0x290 [ 39.312147][ T2159] bus_for_each_drv+0x15f/0x1e0 [ 39.316999][ T2159] __device_attach+0x228/0x4a0 [ 39.321758][ T2159] bus_probe_device+0x1e4/0x290 [ 39.326591][ T2159] device_add+0xbb2/0x1ce0 [ 39.330991][ T2159] usb_set_configuration+0x113c/0x1910 [ 39.336462][ T2159] usb_generic_driver_probe+0xba/0x100 [ 39.341908][ T2159] usb_probe_device+0xd9/0x2c0 [ 39.346676][ T2159] really_probe+0x291/0xde0 [ 39.351187][ T2159] driver_probe_device+0x26b/0x3d0 [ 39.356294][ T2159] __device_attach_driver+0x1d1/0x290 [ 39.361664][ T2159] bus_for_each_drv+0x15f/0x1e0 [ 39.366505][ T2159] __device_attach+0x228/0x4a0 [ 39.371382][ T2159] bus_probe_device+0x1e4/0x290 [ 39.376235][ T2159] device_add+0xbb2/0x1ce0 [ 39.380646][ T2159] usb_new_device.cold+0x71d/0xfe9 [ 39.385747][ T2159] hub_event+0x2348/0x42d0 [ 39.390164][ T2159] process_one_work+0x933/0x1520 [ 39.395089][ T2159] worker_thread+0x64c/0x1120 [ 39.399755][ T2159] kthread+0x38c/0x460 [ 39.403838][ T2159] ret_from_fork+0x1f/0x30 [ 39.408244][ T2159] [ 39.410577][ T2159] The buggy address belongs to the object at ffff888101e62000 [ 39.410577][ T2159] which belongs to the cache kmalloc-4k of size 4096 [ 39.425147][ T2159] The buggy address is located 992 bytes inside of [ 39.425147][ T2159] 4096-byte region [ffff888101e62000, ffff888101e63000) [ 39.438504][ T2159] The buggy address belongs to the page: [ 39.444204][ T2159] page:00000000068431cd refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x101e60 [ 39.454549][ T2159] head:00000000068431cd order:3 compound_mapcount:0 compound_pincount:0 [ 39.462886][ T2159] flags: 0x200000000010200(slab|head) [ 39.468260][ T2159] raw: 0200000000010200 ffffea0004077000 0000000200000002 ffff888100042140 [ 39.476853][ T2159] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 39.485422][ T2159] page dumped because: kasan: bad access detected [ 39.491829][ T2159] [ 39.494151][ T2159] Memory state around the buggy address: [ 39.499767][ T2159] ffff888101e62280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.507865][ T2159] ffff888101e62300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.515966][ T2159] >ffff888101e62380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.524078][ T2159] ^ [ 39.531490][ T2159] ffff888101e62400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.539603][ T2159] ffff888101e62480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 39.547686][ T2159] ================================================================== [ 39.555784][ T2159] Disabling lock debugging due to kernel taint [ 39.562033][ T2159] Kernel panic - not syncing: panic_on_warn set ... [ 39.568630][ T2159] CPU: 1 PID: 2159 Comm: kworker/1:2 Tainted: G B 5.10.0-rc7-syzkaller #0 [ 39.578457][ T2159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.588536][ T2159] Workqueue: usb_hub_wq hub_event [ 39.593565][ T2159] Call Trace: [ 39.596863][ T2159] dump_stack+0x107/0x163 [ 39.601198][ T2159] ? dvb_usb_device_exit+0xe0/0x1a0 [ 39.606434][ T2159] panic+0x306/0x73d [ 39.610333][ T2159] ? __warn_printk+0xf3/0xf3 [ 39.614921][ T2159] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 39.621058][ T2159] ? trace_hardirqs_on+0x51/0x1a0 [ 39.626118][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 39.631403][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 39.636711][ T2159] end_report+0x58/0x5e [ 39.640957][ T2159] kasan_report.cold+0xd/0x37 [ 39.645629][ T2159] ? _raw_spin_unlock_bh+0x10/0x30 [ 39.650733][ T2159] ? dvb_usb_device_exit+0x19a/0x1a0 [ 39.656015][ T2159] dvb_usb_device_exit+0x19a/0x1a0 [ 39.661117][ T2159] ? dvb_usb_exit.isra.0+0x310/0x310 [ 39.666404][ T2159] ? usb_disable_interface+0x177/0x3c0 [ 39.671846][ T2159] usb_unbind_interface+0x1d8/0x8d0 [ 39.677033][ T2159] ? kernfs_remove_by_name_ns+0x62/0xb0 [ 39.682577][ T2159] ? usb_unbind_device+0x1a0/0x1a0 [ 39.687796][ T2159] __device_release_driver+0x3bd/0x6f0 [ 39.693251][ T2159] device_release_driver+0x26/0x40 [ 39.698342][ T2159] bus_remove_device+0x2eb/0x5a0 [ 39.703278][ T2159] device_del+0x502/0xec0 [ 39.707600][ T2159] ? device_link_add_missing_supplier_links+0x370/0x370 [ 39.714541][ T2159] ? kobject_put+0x1f3/0x540 [ 39.719112][ T2159] usb_disable_device+0x35b/0x7b0 [ 39.724126][ T2159] usb_disconnect.cold+0x27d/0x780 [ 39.729243][ T2159] hub_event+0x1c8a/0x42d0 [ 39.733645][ T2159] ? hub_port_debounce+0x3b0/0x3b0 [ 39.738737][ T2159] ? __lock_acquire+0x821/0x54f0 [ 39.743654][ T2159] ? put_pwq+0xb1/0x1b0 [ 39.747797][ T2159] ? lock_release+0x6d0/0x6d0 [ 39.752454][ T2159] ? lock_downgrade+0x6d0/0x6d0 [ 39.757285][ T2159] ? do_raw_spin_lock+0x120/0x2b0 [ 39.762290][ T2159] process_one_work+0x933/0x1520 [ 39.767294][ T2159] ? lock_release+0x6d0/0x6d0 [ 39.771952][ T2159] ? pwq_dec_nr_in_flight+0x320/0x320 [ 39.777308][ T2159] ? rwlock_bug.part.0+0x90/0x90 [ 39.782230][ T2159] worker_thread+0x82b/0x1120 [ 39.786907][ T2159] ? __kthread_parkme+0x118/0x1d0 [ 39.791918][ T2159] ? process_one_work+0x1520/0x1520 [ 39.797114][ T2159] kthread+0x38c/0x460 [ 39.801168][ T2159] ? _raw_spin_unlock_irq+0x1f/0x30 [ 39.806362][ T2159] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 39.812239][ T2159] ret_from_fork+0x1f/0x30 [ 39.817097][ T2159] Kernel Offset: disabled [ 39.821416][ T2159] Rebooting in 86400 seconds..