Warning: Permanently added '10.128.0.100' (ECDSA) to the list of known hosts. executing program [ 46.586301][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.826405][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 46.946356][ T12] usb 1-1: config 0 has an invalid interface number: 210 but max is 0 [ 46.954691][ T12] usb 1-1: config 0 has no interface number 0 [ 46.960840][ T12] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice= 5.df [ 46.969886][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.979137][ T12] usb 1-1: config 0 descriptor?? [ 47.018061][ T12] dw2102: su3000_identify_state [ 47.023020][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 47.029625][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 47.035838][ T12] dvb-usb: bulk message failed: -22 (2/-639655888) [ 47.043939][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 47.066574][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 47.073634][ T12] usb 1-1: media controller created [ 47.079137][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.085861][ T12] dw2102: i2c transfer failed. [ 47.090694][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.097294][ T12] dw2102: i2c transfer failed. [ 47.102049][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.108677][ T12] dw2102: i2c transfer failed. [ 47.113443][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.120050][ T12] dw2102: i2c transfer failed. [ 47.124819][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.131449][ T12] dw2102: i2c transfer failed. [ 47.136254][ T12] dvb-usb: bulk message failed: -22 (6/-2038461480) [ 47.142835][ T12] dw2102: i2c transfer failed. [ 47.147642][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 47.157263][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 47.172234][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 47.178096][ T12] dw2102: command 0x51 transfer failed. [ 47.185156][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.191942][ T12] dw2102: i2c transfer failed. [ 47.196832][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.203418][ T12] dw2102: i2c transfer failed. [ 47.208257][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.214955][ T12] dw2102: i2c transfer failed. executing program [ 47.220727][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.227365][ T12] dw2102: i2c transfer failed. [ 47.232161][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.238798][ T12] dw2102: i2c transfer failed. [ 47.243569][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.250200][ T12] dw2102: i2c transfer failed. [ 47.296348][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.302946][ T12] dw2102: i2c transfer failed. [ 47.307810][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.314385][ T12] dw2102: i2c transfer failed. [ 47.319195][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.325785][ T12] dw2102: i2c transfer failed. [ 47.330607][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.337222][ T12] dw2102: i2c transfer failed. [ 47.341996][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.348628][ T12] dw2102: i2c transfer failed. [ 47.353403][ T12] dvb-usb: bulk message failed: -22 (5/-2038461480) [ 47.360030][ T12] dw2102: i2c transfer failed. [ 47.364816][ T12] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 47.373274][ T12] dw2102: Attached RS2000/TS2020! [ 47.378495][ T12] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 47.386959][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 47.466473][ T12] Registered IR keymap rc-su3000 [ 47.472115][ T12] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 47.481422][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 47.491942][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 47.498950][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 47.505014][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 47.514151][ T12] usb 1-1: USB disconnect, device number 2 [ 47.520673][ T12] ================================================================== [ 47.528788][ T12] BUG: KASAN: use-after-free in dvb_usb_device_exit+0xb6/0xc0 [ 47.536392][ T12] Read of size 8 at addr ffff8881d36403d0 by task kworker/0:1/12 [ 47.544081][ T12] [ 47.546394][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0-rc6+ #15 [ 47.553826][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.563878][ T12] Workqueue: usb_hub_wq hub_event [ 47.568888][ T12] Call Trace: [ 47.572165][ T12] dump_stack+0xca/0x13e [ 47.576395][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 47.581586][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 47.586680][ T12] print_address_description+0x67/0x231 [ 47.592213][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 47.597308][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 47.602406][ T12] __kasan_report.cold+0x1a/0x32 [ 47.607329][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 47.612425][ T12] kasan_report+0xe/0x20 [ 47.616660][ T12] dvb_usb_device_exit+0xb6/0xc0 [ 47.621660][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 47.626855][ T12] ? usb_autoresume_device+0x60/0x60 [ 47.632136][ T12] device_release_driver_internal+0x404/0x4c0 [ 47.638202][ T12] bus_remove_device+0x2dc/0x4a0 [ 47.643117][ T12] device_del+0x460/0xb80 [ 47.647425][ T12] ? __device_links_no_driver+0x240/0x240 [ 47.653123][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 47.658394][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 47.663665][ T12] usb_disable_device+0x211/0x690 [ 47.668672][ T12] usb_disconnect+0x284/0x830 [ 47.673327][ T12] hub_event+0x13bd/0x3550 [ 47.677730][ T12] ? hub_port_debounce+0x260/0x260 [ 47.682824][ T12] process_one_work+0x905/0x1570 [ 47.687747][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 47.693113][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 47.698129][ T12] worker_thread+0x7ab/0xe20 [ 47.702714][ T12] ? process_one_work+0x1570/0x1570 [ 47.707910][ T12] kthread+0x30b/0x410 [ 47.711970][ T12] ? kthread_park+0x1a0/0x1a0 [ 47.716635][ T12] ret_from_fork+0x24/0x30 [ 47.721044][ T12] [ 47.723365][ T12] Allocated by task 12: [ 47.727568][ T12] save_stack+0x1b/0x80 [ 47.731710][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 47.737323][ T12] __kmalloc_track_caller+0xe2/0x2b0 [ 47.742588][ T12] kmemdup+0x23/0x50 [ 47.746479][ T12] dw2102_probe+0x627/0xc40 [ 47.750989][ T12] usb_probe_interface+0x305/0x7a0 [ 47.756087][ T12] really_probe+0x281/0x660 [ 47.760568][ T12] driver_probe_device+0x104/0x210 [ 47.765657][ T12] __device_attach_driver+0x1c2/0x220 [ 47.771011][ T12] bus_for_each_drv+0x15c/0x1e0 [ 47.775847][ T12] __device_attach+0x217/0x360 [ 47.780736][ T12] bus_probe_device+0x1e4/0x290 [ 47.786307][ T12] device_add+0xae6/0x16f0 [ 47.790709][ T12] usb_set_configuration+0xdf6/0x1670 [ 47.796066][ T12] generic_probe+0x9d/0xd5 [ 47.800506][ T12] usb_probe_device+0x99/0x100 [ 47.805259][ T12] really_probe+0x281/0x660 [ 47.809777][ T12] driver_probe_device+0x104/0x210 [ 47.814869][ T12] __device_attach_driver+0x1c2/0x220 [ 47.820337][ T12] bus_for_each_drv+0x15c/0x1e0 [ 47.825182][ T12] __device_attach+0x217/0x360 [ 47.829926][ T12] bus_probe_device+0x1e4/0x290 [ 47.834757][ T12] device_add+0xae6/0x16f0 [ 47.839157][ T12] usb_new_device.cold+0x6a4/0xe61 [ 47.844293][ T12] hub_event+0x1abd/0x3550 [ 47.848697][ T12] process_one_work+0x905/0x1570 [ 47.853609][ T12] worker_thread+0x96/0xe20 [ 47.858133][ T12] kthread+0x30b/0x410 [ 47.862277][ T12] ret_from_fork+0x24/0x30 [ 47.866666][ T12] [ 47.868971][ T12] Freed by task 12: [ 47.872759][ T12] save_stack+0x1b/0x80 [ 47.876896][ T12] __kasan_slab_free+0x130/0x180 [ 47.881810][ T12] kfree+0xd7/0x280 [ 47.885604][ T12] dw2102_probe+0x871/0xc40 [ 47.890126][ T12] usb_probe_interface+0x305/0x7a0 [ 47.895223][ T12] really_probe+0x281/0x660 [ 47.899707][ T12] driver_probe_device+0x104/0x210 [ 47.904795][ T12] __device_attach_driver+0x1c2/0x220 [ 47.910150][ T12] bus_for_each_drv+0x15c/0x1e0 [ 47.914982][ T12] __device_attach+0x217/0x360 [ 47.919723][ T12] bus_probe_device+0x1e4/0x290 [ 47.924563][ T12] device_add+0xae6/0x16f0 [ 47.928982][ T12] usb_set_configuration+0xdf6/0x1670 [ 47.934631][ T12] generic_probe+0x9d/0xd5 [ 47.939037][ T12] usb_probe_device+0x99/0x100 [ 47.943782][ T12] really_probe+0x281/0x660 [ 47.948342][ T12] driver_probe_device+0x104/0x210 [ 47.953608][ T12] __device_attach_driver+0x1c2/0x220 [ 47.958960][ T12] bus_for_each_drv+0x15c/0x1e0 [ 47.963792][ T12] __device_attach+0x217/0x360 [ 47.968536][ T12] bus_probe_device+0x1e4/0x290 [ 47.973365][ T12] device_add+0xae6/0x16f0 [ 47.977765][ T12] usb_new_device.cold+0x6a4/0xe61 [ 47.982857][ T12] hub_event+0x1abd/0x3550 [ 47.987255][ T12] process_one_work+0x905/0x1570 [ 47.992174][ T12] worker_thread+0x96/0xe20 [ 47.996659][ T12] kthread+0x30b/0x410 [ 48.000714][ T12] ret_from_fork+0x24/0x30 [ 48.005102][ T12] [ 48.007410][ T12] The buggy address belongs to the object at ffff8881d3640000 [ 48.007410][ T12] which belongs to the cache kmalloc-4k of size 4096 [ 48.021549][ T12] The buggy address is located 976 bytes inside of [ 48.021549][ T12] 4096-byte region [ffff8881d3640000, ffff8881d3641000) [ 48.035060][ T12] The buggy address belongs to the page: [ 48.040676][ T12] page:ffffea00074d9000 refcount:1 mapcount:0 mapping:ffff8881dac02600 index:0x0 compound_mapcount: 0 [ 48.051631][ T12] flags: 0x200000000010200(slab|head) [ 48.056988][ T12] raw: 0200000000010200 dead000000000100 dead000000000200 ffff8881dac02600 [ 48.065552][ T12] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 48.074209][ T12] page dumped because: kasan: bad access detected [ 48.080592][ T12] [ 48.082900][ T12] Memory state around the buggy address: [ 48.088509][ T12] ffff8881d3640280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.096550][ T12] ffff8881d3640300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.104738][ T12] >ffff8881d3640380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.112772][ T12] ^ [ 48.119423][ T12] ffff8881d3640400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.127617][ T12] ffff8881d3640480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.135650][ T12] ================================================================== [ 48.143687][ T12] Disabling lock debugging due to kernel taint [ 48.149870][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 48.156581][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.2.0-rc6+ #15 [ 48.165401][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.175454][ T12] Workqueue: usb_hub_wq hub_event [ 48.180456][ T12] Call Trace: [ 48.183727][ T12] dump_stack+0xca/0x13e [ 48.187951][ T12] panic+0x292/0x6c9 [ 48.191826][ T12] ? __warn_printk+0xf3/0xf3 [ 48.196565][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 48.201668][ T12] ? trace_hardirqs_on+0x55/0x1c0 [ 48.206677][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 48.211777][ T12] end_report+0x43/0x49 [ 48.215924][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 48.221020][ T12] __kasan_report.cold+0xd/0x32 [ 48.225857][ T12] ? dvb_usb_device_exit+0xb6/0xc0 [ 48.230959][ T12] kasan_report+0xe/0x20 [ 48.235187][ T12] dvb_usb_device_exit+0xb6/0xc0 [ 48.240104][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 48.245295][ T12] ? usb_autoresume_device+0x60/0x60 [ 48.250561][ T12] device_release_driver_internal+0x404/0x4c0 [ 48.256617][ T12] bus_remove_device+0x2dc/0x4a0 [ 48.261566][ T12] device_del+0x460/0xb80 [ 48.265878][ T12] ? __device_links_no_driver+0x240/0x240 [ 48.271675][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 48.276938][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 48.282435][ T12] usb_disable_device+0x211/0x690 [ 48.287444][ T12] usb_disconnect+0x284/0x830 [ 48.292141][ T12] hub_event+0x13bd/0x3550 [ 48.296541][ T12] ? hub_port_debounce+0x260/0x260 [ 48.301637][ T12] process_one_work+0x905/0x1570 [ 48.306561][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 48.311914][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 48.316923][ T12] worker_thread+0x7ab/0xe20 [ 48.321499][ T12] ? process_one_work+0x1570/0x1570 [ 48.326681][ T12] kthread+0x30b/0x410 [ 48.330732][ T12] ? kthread_park+0x1a0/0x1a0 [ 48.335389][ T12] ret_from_fork+0x24/0x30 [ 48.340125][ T12] Kernel Offset: disabled [ 48.344451][ T12] Rebooting in 86400 seconds..