[[36minfo[39;49m] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. [ 14.689575][ C1] random: crng init done [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[1G[[32m ok [39;49m8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.41' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 27.041916][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.041924][ T17] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 27.042252][ T102] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 27.049558][ T83] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 27.057444][ T1733] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 27.079762][ T5] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.281851][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 27.291956][ T17] usb 2-1: Using ep0 maxpacket: 16 [ 27.312008][ T83] usb 6-1: Using ep0 maxpacket: 16 [ 27.321986][ T5] usb 3-1: Using ep0 maxpacket: 16 [ 27.327160][ T102] usb 4-1: Using ep0 maxpacket: 16 [ 27.332335][ T1733] usb 5-1: Using ep0 maxpacket: 16 [ 27.412028][ T12] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.412038][ T17] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.412075][ T12] usb 1-1: config 0 has no interface number 0 [ 27.420343][ T17] usb 2-1: config 0 has no interface number 0 [ 27.428867][ T12] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.435080][ T83] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.440702][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.442780][ T12] usb 1-1: config 0 descriptor?? [ 27.449777][ T83] usb 6-1: config 0 has no interface number 0 [ 27.477299][ T17] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.482304][ T5] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.486499][ T17] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.494704][ T5] usb 3-1: config 0 has no interface number 0 [ 27.502798][ T83] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.508867][ T102] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.517796][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.519028][ T17] usb 2-1: config 0 descriptor?? [ 27.526084][ T102] usb 4-1: config 0 has no interface number 0 [ 27.526160][ T1733] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 27.537846][ T83] usb 6-1: config 0 descriptor?? [ 27.539047][ T1733] usb 5-1: config 0 has no interface number 0 [ 27.566058][ T12] rio500 1-1:0.133: USB Rio found at address 2 [ 27.575522][ T102] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.583185][ T17] rio500 2-1:0.133: Second USB Rio at address 2 refused [ 27.584601][ T102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.591593][ T17] rio500: probe of 2-1:0.133 failed with error -16 [ 27.599686][ T5] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.607613][ T83] rio500 6-1:0.133: Second USB Rio at address 2 refused [ 27.615205][ T5] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.622846][ T83] rio500: probe of 6-1:0.133 failed with error -16 [ 27.630810][ T1733] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 27.645773][ T1733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.661612][ T102] usb 4-1: config 0 descriptor?? [ 27.670768][ T5] usb 3-1: config 0 descriptor?? [ 27.676997][ T1733] usb 5-1: config 0 descriptor?? executing program [ 27.723130][ T102] rio500 4-1:0.133: Second USB Rio at address 2 refused [ 27.730195][ T102] rio500: probe of 4-1:0.133 failed with error -16 [ 27.737945][ T5] rio500 3-1:0.133: Second USB Rio at address 2 refused [ 27.746184][ T1733] rio500 5-1:0.133: Second USB Rio at address 2 refused [ 27.752508][ T83] usb 1-1: USB disconnect, device number 2 [ 27.753243][ T5] rio500: probe of 3-1:0.133 failed with error -16 [ 27.767118][ T1733] rio500: probe of 5-1:0.133 failed with error -16 executing program [ 27.772024][ T83] rio500 1-1:0.133: USB Rio disconnected. [ 27.801002][ T1733] usb 2-1: USB disconnect, device number 2 executing program [ 27.831852][ T5] usb 6-1: USB disconnect, device number 2 executing program executing program executing program [ 27.923277][ T102] usb 4-1: USB disconnect, device number 2 [ 27.924398][ T17] usb 5-1: USB disconnect, device number 2 [ 27.935155][ T1736] usb 3-1: USB disconnect, device number 2 [ 28.131858][ T83] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.161854][ T1733] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.191871][ T5] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 28.301879][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.341872][ T102] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.341934][ T1736] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 28.381915][ T83] usb 1-1: Using ep0 maxpacket: 16 [ 28.401886][ T1733] usb 2-1: Using ep0 maxpacket: 16 [ 28.431848][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 28.511969][ T83] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.520232][ T83] usb 1-1: config 0 has no interface number 0 [ 28.522516][ T1733] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.526854][ T83] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 28.534861][ T1733] usb 2-1: config 0 has no interface number 0 [ 28.543897][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.550297][ T1733] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 28.562561][ T83] usb 1-1: config 0 descriptor?? [ 28.567055][ T1733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.579978][ T5] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.588328][ T5] usb 6-1: config 0 has no interface number 0 [ 28.591936][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 28.594494][ T5] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 28.608594][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.611865][ T1736] usb 3-1: Using ep0 maxpacket: 16 [ 28.621869][ T102] usb 4-1: Using ep0 maxpacket: 16 [ 28.622653][ T1733] usb 2-1: config 0 descriptor?? [ 28.632626][ T5] usb 6-1: config 0 descriptor?? [ 28.635044][ T83] rio500 1-1:0.133: USB Rio found at address 3 [ 28.673215][ T1733] rio500 2-1:0.133: Second USB Rio at address 3 refused [ 28.680243][ T1733] rio500: probe of 2-1:0.133 failed with error -16 [ 28.687960][ T5] rio500 6-1:0.133: Second USB Rio at address 3 refused [ 28.695281][ T5] rio500: probe of 6-1:0.133 failed with error -16 [ 28.721952][ T17] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.730179][ T17] usb 5-1: config 0 has no interface number 0 [ 28.736805][ T17] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 28.746025][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.751914][ T102] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.758928][ T17] usb 5-1: config 0 descriptor?? [ 28.762262][ T102] usb 4-1: config 0 has no interface number 0 [ 28.762350][ T102] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 28.781936][ T1736] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 28.782377][ T102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.790551][ T1736] usb 3-1: config 0 has no interface number 0 [ 28.805285][ T102] usb 4-1: config 0 descriptor?? [ 28.808947][ T1736] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 executing program [ 28.819596][ T1736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.828744][ T17] rio500 5-1:0.133: Second USB Rio at address 3 refused [ 28.837296][ T17] rio500: probe of 5-1:0.133 failed with error -16 [ 28.846080][ T1736] usb 3-1: config 0 descriptor?? [ 28.853222][ T102] rio500 4-1:0.133: Second USB Rio at address 3 refused [ 28.853227][ T17] usb 1-1: USB disconnect, device number 3 [ 28.853970][ T17] rio500 1-1:0.133: USB Rio disconnected. executing program executing program [ 28.860213][ T102] rio500: probe of 4-1:0.133 failed with error -16 [ 28.874064][ T1748] usb 6-1: USB disconnect, device number 3 [ 28.886672][ T1736] rio500 3-1:0.133: USB Rio found at address 3 [ 28.894375][ T83] usb 2-1: USB disconnect, device number 3 executing program executing program [ 29.021124][ T102] usb 5-1: USB disconnect, device number 3 [ 29.053007][ T1733] usb 4-1: USB disconnect, device number 3 executing program [ 29.086662][ T1736] usb 3-1: USB disconnect, device number 3 [ 29.093359][ T1736] rio500 3-1:0.133: USB Rio disconnected. [ 29.211836][ T17] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.251890][ T1748] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 29.301867][ T83] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 29.391851][ T102] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 29.411884][ T1733] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.441841][ T1736] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.451893][ T17] usb 1-1: Using ep0 maxpacket: 16 [ 29.491898][ T1748] usb 6-1: Using ep0 maxpacket: 16 [ 29.541832][ T83] usb 2-1: Using ep0 maxpacket: 16 [ 29.571942][ T17] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.580207][ T17] usb 1-1: config 0 has no interface number 0 [ 29.586630][ T17] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.595739][ T17] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.604701][ T17] usb 1-1: config 0 descriptor?? [ 29.622052][ T1748] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.630256][ T1748] usb 6-1: config 0 has no interface number 0 [ 29.636610][ T1748] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.645737][ T1748] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.651907][ T102] usb 5-1: Using ep0 maxpacket: 16 [ 29.655011][ T17] rio500 1-1:0.133: USB Rio found at address 4 [ 29.668985][ T1748] usb 6-1: config 0 descriptor?? [ 29.671851][ T1733] usb 4-1: Using ep0 maxpacket: 16 [ 29.676752][ T83] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.687415][ T83] usb 2-1: config 0 has no interface number 0 [ 29.693543][ T1736] usb 3-1: Using ep0 maxpacket: 16 [ 29.698782][ T83] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.707840][ T83] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.716700][ T83] usb 2-1: config 0 descriptor?? [ 29.733322][ T1748] rio500 6-1:0.133: Second USB Rio at address 4 refused [ 29.740311][ T1748] rio500: probe of 6-1:0.133 failed with error -16 [ 29.753132][ T83] rio500 2-1:0.133: Second USB Rio at address 4 refused [ 29.760119][ T83] rio500: probe of 2-1:0.133 failed with error -16 [ 29.791924][ T102] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.800269][ T102] usb 5-1: config 0 has no interface number 0 [ 29.806758][ T102] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.811903][ T1736] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.815871][ T102] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.824001][ T1736] usb 3-1: config 0 has no interface number 0 executing program [ 29.832088][ T1733] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 29.838566][ T1736] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.846265][ T1733] usb 4-1: config 0 has no interface number 0 [ 29.855296][ T1736] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.863244][ T102] usb 5-1: config 0 descriptor?? [ 29.875708][ T1733] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 29.882033][ T1736] usb 3-1: config 0 descriptor?? [ 29.884818][ T1733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.898341][ T5] usb 1-1: USB disconnect, device number 4 [ 29.904762][ T1733] usb 4-1: config 0 descriptor?? [ 29.910136][ T5] rio500 1-1:0.133: USB Rio disconnected. [ 29.923384][ T1736] rio500 3-1:0.133: USB Rio found at address 4 [ 29.933245][ T102] rio500 5-1:0.133: Second USB Rio at address 4 refused executing program executing program [ 29.940231][ T102] rio500: probe of 5-1:0.133 failed with error -16 [ 29.943042][ T83] usb 6-1: USB disconnect, device number 4 [ 29.963287][ T1733] rio500 4-1:0.133: Second USB Rio at address 4 refused [ 29.964820][ T1736] usb 2-1: USB disconnect, device number 4 [ 29.970263][ T1733] rio500: probe of 4-1:0.133 failed with error -16 executing program executing program [ 30.123012][ T1748] usb 3-1: USB disconnect, device number 4 [ 30.130506][ T1748] rio500 3-1:0.133: USB Rio disconnected. [ 30.138871][ T17] usb 5-1: USB disconnect, device number 4 executing program [ 30.163327][ T1733] usb 4-1: USB disconnect, device number 4 [ 30.291870][ T5] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.311875][ T83] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 30.331924][ T1736] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 30.491853][ T17] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 30.499429][ T1748] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.511859][ T1733] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.541849][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 30.561853][ T83] usb 6-1: Using ep0 maxpacket: 16 [ 30.571859][ T1736] usb 2-1: Using ep0 maxpacket: 16 [ 30.661977][ T5] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.670195][ T5] usb 1-1: config 0 has no interface number 0 [ 30.676322][ T5] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 30.681924][ T83] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.685374][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.686251][ T5] usb 1-1: config 0 descriptor?? [ 30.693649][ T83] usb 6-1: config 0 has no interface number 0 [ 30.712678][ T1736] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.720892][ T1736] usb 2-1: config 0 has no interface number 0 [ 30.727020][ T1736] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 30.736121][ T1736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.744243][ T83] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 30.746845][ T5] rio500 1-1:0.133: USB Rio found at address 5 [ 30.753308][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.762752][ T1736] usb 2-1: config 0 descriptor?? [ 30.767699][ T1733] usb 4-1: Using ep0 maxpacket: 16 [ 30.772536][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 30.782753][ T1748] usb 3-1: Using ep0 maxpacket: 16 [ 30.788716][ T83] usb 6-1: config 0 descriptor?? [ 30.833289][ T1736] rio500 2-1:0.133: Second USB Rio at address 5 refused [ 30.841596][ T83] rio500 6-1:0.133: Second USB Rio at address 5 refused [ 30.849247][ T1736] rio500: probe of 2-1:0.133 failed with error -16 [ 30.856017][ T83] rio500: probe of 6-1:0.133 failed with error -16 [ 30.902042][ T1748] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.910231][ T1748] usb 3-1: config 0 has no interface number 0 [ 30.916436][ T17] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.921930][ T1733] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 30.924626][ T17] usb 5-1: config 0 has no interface number 0 [ 30.924664][ T17] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 executing program [ 30.932827][ T1733] usb 4-1: config 0 has no interface number 0 [ 30.938962][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.952506][ T1733] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 30.954098][ T1748] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 30.962205][ T1733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.971223][ T1748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.985150][ T1733] usb 4-1: config 0 descriptor?? [ 31.001857][ T17] usb 5-1: config 0 descriptor?? [ 31.002135][ T5] usb 1-1: USB disconnect, device number 5 [ 31.013302][ T1748] usb 3-1: config 0 descriptor?? [ 31.014209][ T5] rio500 1-1:0.133: USB Rio disconnected. [ 31.033940][ T102] usb 2-1: USB disconnect, device number 5 [ 31.034021][ T83] usb 6-1: USB disconnect, device number 5 [ 31.043037][ T1733] rio500 4-1:0.133: USB Rio found at address 5 executing program executing program [ 31.047442][ T17] rio500 5-1:0.133: USB Rio found at address 5 [ 31.059654][ T1748] rio500 3-1:0.133: Second USB Rio at address 5 refused [ 31.067901][ T1748] rio500: probe of 3-1:0.133 failed with error -16 executing program executing program executing program [ 31.243064][ T1748] usb 4-1: USB disconnect, device number 5 [ 31.250705][ T17] usb 5-1: USB disconnect, device number 5 [ 31.257412][ T1748] rio500 4-1:0.133: USB Rio disconnected. [ 31.259674][ T1733] usb 3-1: USB disconnect, device number 5 [ 31.269279][ T17] ================================================================== [ 31.277623][ T17] BUG: KASAN: double-free or invalid-free in disconnect_rio+0x12b/0x1b0 [ 31.285933][ T17] [ 31.288248][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Not tainted 5.3.0+ #0 [ 31.295308][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.305344][ T17] Workqueue: usb_hub_wq hub_event [ 31.310348][ T17] Call Trace: [ 31.313617][ T17] dump_stack+0xca/0x13e [ 31.317847][ T17] print_address_description+0x6a/0x32c [ 31.323379][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.328220][ T17] kasan_report_invalid_free+0x61/0xa0 [ 31.333661][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.338487][ T17] __kasan_slab_free+0x162/0x180 [ 31.343456][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.348287][ T17] kfree+0xe4/0x2f0 [ 31.352082][ T17] disconnect_rio+0x12b/0x1b0 [ 31.356759][ T17] usb_unbind_interface+0x1bd/0x8a0 [ 31.361935][ T17] ? usb_autoresume_device+0x60/0x60 [ 31.367193][ T17] device_release_driver_internal+0x42f/0x500 [ 31.373233][ T17] bus_remove_device+0x2dc/0x4a0 [ 31.378145][ T17] device_del+0x420/0xb10 [ 31.382452][ T17] ? __device_links_no_driver+0x240/0x240 [ 31.388145][ T17] ? lockdep_hardirqs_on+0x379/0x580 [ 31.391848][ T5] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 31.393409][ T17] ? remove_intf_ep_devs+0x13f/0x1d0 [ 31.393428][ T17] usb_disable_device+0x211/0x690 [ 31.393438][ T17] usb_disconnect+0x284/0x8d0 [ 31.393450][ T17] hub_event+0x1454/0x3640 [ 31.420240][ T17] ? find_held_lock+0x2d/0x110 [ 31.425000][ T17] ? mark_held_locks+0xe0/0xe0 [ 31.429764][ T17] ? hub_port_debounce+0x260/0x260 [ 31.434861][ T17] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 31.440379][ T17] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.441847][ T102] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 31.445643][ T17] process_one_work+0x92b/0x1530 [ 31.445657][ T17] ? pwq_dec_nr_in_flight+0x310/0x310 [ 31.445669][ T17] ? do_raw_spin_lock+0x11a/0x280 [ 31.445684][ T17] worker_thread+0x96/0xe20 [ 31.472857][ T17] ? process_one_work+0x1530/0x1530 [ 31.478034][ T17] kthread+0x318/0x420 [ 31.482081][ T17] ? kthread_create_on_node+0xf0/0xf0 [ 31.487431][ T17] ret_from_fork+0x24/0x30 [ 31.491822][ T17] [ 31.494133][ T17] Allocated by task 17: [ 31.498265][ T17] save_stack+0x1b/0x80 [ 31.502407][ T17] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 31.508017][ T17] probe_rio+0x135/0x248 [ 31.512236][ T17] usb_probe_interface+0x305/0x7a0 [ 31.517494][ T17] really_probe+0x281/0x6d0 [ 31.521968][ T17] driver_probe_device+0x101/0x1b0 [ 31.527053][ T17] __device_attach_driver+0x1c2/0x220 [ 31.532397][ T17] bus_for_each_drv+0x162/0x1e0 [ 31.537308][ T17] __device_attach+0x217/0x360 [ 31.542047][ T17] bus_probe_device+0x1e4/0x290 [ 31.546871][ T17] device_add+0xae6/0x16f0 [ 31.551274][ T17] usb_set_configuration+0xdf6/0x1670 [ 31.556622][ T17] generic_probe+0x9d/0xd5 [ 31.561099][ T17] usb_probe_device+0x99/0x100 [ 31.565838][ T17] really_probe+0x281/0x6d0 [ 31.570313][ T17] driver_probe_device+0x101/0x1b0 [ 31.575399][ T17] __device_attach_driver+0x1c2/0x220 [ 31.580750][ T17] bus_for_each_drv+0x162/0x1e0 [ 31.585581][ T17] __device_attach+0x217/0x360 [ 31.590318][ T17] bus_probe_device+0x1e4/0x290 [ 31.595149][ T17] device_add+0xae6/0x16f0 [ 31.599556][ T17] usb_new_device.cold+0x6a4/0xe79 [ 31.604658][ T17] hub_event+0x1b5c/0x3640 [ 31.609138][ T17] process_one_work+0x92b/0x1530 [ 31.614049][ T17] worker_thread+0x96/0xe20 [ 31.618527][ T17] kthread+0x318/0x420 [ 31.621843][ T1733] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 31.622570][ T17] ret_from_fork+0x24/0x30 [ 31.622578][ T17] [ 31.632273][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 31.634402][ T17] Freed by task 1748: [ 31.645769][ T17] save_stack+0x1b/0x80 [ 31.649922][ T17] __kasan_slab_free+0x130/0x180 [ 31.654848][ T17] kfree+0xe4/0x2f0 [ 31.658644][ T17] disconnect_rio+0x12b/0x1b0 [ 31.663311][ T17] usb_unbind_interface+0x1bd/0x8a0 [ 31.668486][ T17] device_release_driver_internal+0x42f/0x500 [ 31.674523][ T17] bus_remove_device+0x2dc/0x4a0 [ 31.679433][ T17] device_del+0x420/0xb10 [ 31.683738][ T17] usb_disable_device+0x211/0x690 [ 31.688734][ T17] usb_disconnect+0x284/0x8d0 [ 31.691914][ T102] usb 2-1: Using ep0 maxpacket: 16 [ 31.693385][ T17] hub_event+0x1454/0x3640 [ 31.693401][ T17] process_one_work+0x92b/0x1530 [ 31.707778][ T17] worker_thread+0x96/0xe20 [ 31.712253][ T17] kthread+0x318/0x420 [ 31.716296][ T17] ret_from_fork+0x24/0x30 [ 31.720678][ T17] [ 31.722983][ T17] The buggy address belongs to the object at ffff8881d0b74400 [ 31.722983][ T17] which belongs to the cache kmalloc-4k of size 4096 [ 31.737016][ T17] The buggy address is located 0 bytes inside of [ 31.737016][ T17] 4096-byte region [ffff8881d0b74400, ffff8881d0b75400) [ 31.750167][ T17] The buggy address belongs to the page: [ 31.751969][ T5] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 31.755779][ T17] page:ffffea000742dc00 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 31.755792][ T17] flags: 0x200000000010200(slab|head) [ 31.755808][ T17] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 31.755820][ T17] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 31.763975][ T5] usb 1-1: config 0 has no interface number 0 [ 31.774842][ T17] page dumped because: kasan: bad access detected [ 31.774846][ T17] [ 31.774850][ T17] Memory state around the buggy address: [ 31.774859][ T17] ffff8881d0b74300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.774869][ T17] ffff8881d0b74380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 31.774877][ T17] >ffff8881d0b74400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.774881][ T17] ^ [ 31.774889][ T17] ffff8881d0b74480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.774898][ T17] ffff8881d0b74500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 31.774901][ T17] ================================================================== [ 31.774905][ T17] Disabling lock debugging due to kernel taint [ 31.775006][ T17] Kernel panic - not syncing: panic_on_warn set ... [ 31.781766][ T5] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 31.788924][ T17] CPU: 1 PID: 17 Comm: kworker/1:0 Tainted: G B 5.3.0+ #0 [ 31.788930][ T17] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 31.788943][ T17] Workqueue: usb_hub_wq hub_event [ 31.797553][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.803541][ T17] Call Trace: [ 31.803557][ T17] dump_stack+0xca/0x13e [ 31.803571][ T17] panic+0x2a3/0x6da [ 31.813068][ T102] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 31.817875][ T17] ? add_taint.cold+0x16/0x16 [ 31.825948][ T102] usb 2-1: config 0 has no interface number 0 [ 31.833957][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.833969][ T17] ? trace_hardirqs_on+0x55/0x1e0 [ 31.833987][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.842814][ T5] usb 1-1: config 0 descriptor?? [ 31.846060][ T17] end_report+0x43/0x49 [ 31.846072][ T17] kasan_report_invalid_free+0x7d/0xa0 [ 31.846088][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.854303][ T102] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 31.862149][ T17] __kasan_slab_free+0x162/0x180 [ 31.862161][ T17] ? disconnect_rio+0x12b/0x1b0 [ 31.862170][ T17] kfree+0xe4/0x2f0 [ 31.862179][ T17] disconnect_rio+0x12b/0x1b0 [ 31.862191][ T17] usb_unbind_interface+0x1bd/0x8a0 [ 31.862201][ T17] ? usb_autoresume_device+0x60/0x60 [ 31.862217][ T17] device_release_driver_internal+0x42f/0x500 [ 31.870256][ T102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.876375][ T17] bus_remove_device+0x2dc/0x4a0 [ 31.876386][ T17] device_del+0x420/0xb10 [ 31.876398][ T17] ? __device_links_no_driver+0x240/0x240 [ 31.876409][ T17] ? lockdep_hardirqs_on+0x379/0x580 [ 31.876424][ T17] ? remove_intf_ep_devs+0x13f/0x1d0 [ 31.886576][ T102] usb 2-1: config 0 descriptor?? [ 31.891981][ T17] usb_disable_device+0x211/0x690 [ 31.891991][ T17] usb_disconnect+0x284/0x8d0 [ 31.892000][ T17] hub_event+0x1454/0x3640 [ 31.892012][ T17] ? find_held_lock+0x2d/0x110 [ 31.892022][ T17] ? mark_held_locks+0xe0/0xe0 [ 31.892030][ T17] ? hub_port_debounce+0x260/0x260 [ 31.892046][ T17] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 31.901387][ T5] rio500 1-1:0.133: USB Rio found at address 6 [ 31.910465][ T17] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.910477][ T17] process_one_work+0x92b/0x1530 [ 31.910489][ T17] ? pwq_dec_nr_in_flight+0x310/0x310 [ 31.910504][ T17] ? do_raw_spin_lock+0x11a/0x280 [ 31.915819][ T1733] usb 3-1: Using ep0 maxpacket: 16 [ 31.923449][ T17] worker_thread+0x96/0xe20 [ 31.923465][ T17] ? process_one_work+0x1530/0x1530 [ 31.923478][ T17] kthread+0x318/0x420 [ 31.962783][ T102] rio500 2-1:0.133: USB Rio found at address 6 [ 31.963435][ T17] ? kthread_create_on_node+0xf0/0xf0 [ 32.051885][ T1733] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 32.053926][ T17] ret_from_fork+0x24/0x30 [ 32.059976][ T17] Kernel Offset: disabled [ 32.177918][ T17] Rebooting in 86400 seconds..