Warning: Permanently added '10.128.0.95' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 57.926838][ T102] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 57.935118][ T12] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 57.942588][ T5] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 57.950458][ T103] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 57.958215][ T1745] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 57.966296][ T1746] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 58.316891][ T1745] usb 6-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.325792][ T1745] usb 6-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.336591][ T1745] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.346066][ T1745] usb 6-1: config 0 has no interface number 0 [ 58.352388][ T102] usb 3-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.360981][ T102] usb 3-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.371270][ T102] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.380602][ T102] usb 3-1: config 0 has no interface number 0 [ 58.386964][ T5] usb 5-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.395624][ T5] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.407356][ T5] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.416451][ T5] usb 5-1: config 0 has no interface number 0 [ 58.422767][ T103] usb 4-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.431104][ T103] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.441413][ T103] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.450732][ T103] usb 4-1: config 0 has no interface number 0 [ 58.456885][ T12] usb 1-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.465136][ T12] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.475676][ T12] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.484921][ T12] usb 1-1: config 0 has no interface number 0 [ 58.491087][ T1746] usb 2-1: config 0 has an invalid interface number: 236 but max is 2 [ 58.499540][ T1746] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 58.510789][ T1746] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 58.521042][ T1746] usb 2-1: config 0 has no interface number 0 [ 58.528171][ T1745] usb 6-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.538397][ T1745] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.548312][ T1745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.556509][ T103] usb 4-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.566905][ T103] usb 4-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.577043][ T103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.585672][ T12] usb 1-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.595875][ T12] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.605353][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.613877][ T102] usb 3-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.624222][ T102] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.633677][ T102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.641965][ T5] usb 5-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.652863][ T5] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.663487][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.671882][ T1746] usb 2-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 58.682449][ T1746] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 58.692406][ T1746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.702496][ T1745] usb 6-1: config 0 descriptor?? [ 58.709112][ T12] usb 1-1: config 0 descriptor?? [ 58.714743][ T102] usb 3-1: config 0 descriptor?? [ 58.720906][ T103] usb 4-1: config 0 descriptor?? [ 58.727987][ T5] usb 5-1: config 0 descriptor?? [ 58.735132][ T1746] usb 2-1: config 0 descriptor?? [ 58.752295][ T1745] iowarrior 6-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior0 [ 58.764772][ T12] iowarrior 1-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior1 [ 58.781560][ T5] iowarrior 5-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior2 [ 58.794258][ T102] iowarrior 3-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior3 [ 58.806745][ T103] iowarrior 4-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior4 [ 58.819207][ T1746] iowarrior 2-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior5 executing program [ 58.949403][ T5] usb 1-1: USB disconnect, device number 2 [ 58.968471][ T5] iowarrior 1-1:0.236: I/O-Warror #1 now disconnected [ 58.988664][ T83] usb 6-1: USB disconnect, device number 2 executing program executing program [ 58.989641][ T103] usb 3-1: USB disconnect, device number 2 [ 59.007314][ T1741] iowarrior 6-1:0.236: Error -19 while submitting URB [ 59.007960][ T17] usb 5-1: USB disconnect, device number 2 [ 59.017280][ T102] usb 4-1: USB disconnect, device number 2 [ 59.021452][ T1742] iowarrior_open - error, can't find device for minor 0 [ 59.036262][ T103] iowarrior 3-1:0.236: I/O-Warror #3 now disconnected executing program executing program executing program [ 59.036325][ T83] iowarrior 6-1:0.236: I/O-Warror #0 now disconnected [ 59.045903][ T102] iowarrior 4-1:0.236: I/O-Warror #4 now disconnected [ 59.054469][ T17] iowarrior 5-1:0.236: I/O-Warror #2 now disconnected [ 59.070615][ T1761] usb 2-1: USB disconnect, device number 2 [ 59.078495][ T1761] iowarrior 2-1:0.236: I/O-Warror #5 now disconnected [ 59.336800][ T5] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 59.426792][ T17] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 59.426814][ T103] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 59.434545][ T83] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 59.442503][ T102] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 59.458956][ T1761] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 59.696947][ T5] usb 1-1: config 0 has an invalid interface number: 236 but max is 2 [ 59.705961][ T5] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 59.717276][ T5] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 59.726807][ T5] usb 1-1: config 0 has no interface number 0 [ 59.734383][ T5] usb 1-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 59.745795][ T5] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 59.755776][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.767999][ T5] usb 1-1: config 0 descriptor?? [ 59.807011][ T102] usb 4-1: config 0 has an invalid interface number: 236 but max is 2 [ 59.824250][ T102] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 59.859059][ T102] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 59.868551][ T102] usb 4-1: config 0 has no interface number 0 [ 59.874750][ T103] usb 3-1: config 0 has an invalid interface number: 236 but max is 2 [ 59.884224][ T103] usb 3-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 59.886939][ T83] usb 6-1: config 0 has an invalid interface number: 236 but max is 2 [ 59.895222][ T103] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 59.895238][ T103] usb 3-1: config 0 has no interface number 0 [ 59.904049][ T83] usb 6-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 59.916070][ T103] usb 3-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 59.921593][ T83] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 59.933827][ T103] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 59.945176][ T83] usb 6-1: config 0 has no interface number 0 [ 59.945291][ T1761] usb 2-1: config 0 has an invalid interface number: 236 but max is 2 [ 59.954778][ T103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.965316][ T1761] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config executing program [ 59.972496][ T5] iowarrior 1-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior0 [ 59.980908][ T1761] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 59.980924][ T1761] usb 2-1: config 0 has no interface number 0 [ 59.990786][ T102] usb 4-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 60.000447][ T17] usb 5-1: config 0 has an invalid interface number: 236 but max is 2 [ 60.011452][ T102] usb 4-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 60.011469][ T102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.021348][ T17] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 60.032242][ T103] usb 3-1: config 0 descriptor?? [ 60.039845][ T17] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 60.039854][ T17] usb 5-1: config 0 has no interface number 0 [ 60.044644][ T17] usb 5-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 60.055467][ T102] usb 4-1: config 0 descriptor?? [ 60.059330][ T17] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 60.059342][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.060591][ T17] usb 5-1: config 0 descriptor?? [ 60.130806][ T103] iowarrior 3-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior1 [ 60.135262][ T1761] usb 2-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 60.144206][ T102] iowarrior 4-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior2 [ 60.152223][ T1761] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 60.152234][ T1761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.152287][ T83] usb 6-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 60.206637][ T83] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 60.217160][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.227358][ T1761] usb 2-1: config 0 descriptor?? [ 60.233108][ T1765] usb 1-1: USB disconnect, device number 3 [ 60.239882][ T83] usb 6-1: config 0 descriptor?? [ 60.245840][ T1765] iowarrior 1-1:0.236: I/O-Warror #0 now disconnected [ 60.269600][ T17] iowarrior 5-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior0 [ 60.281628][ T1761] iowarrior 2-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior3 [ 60.295556][ T83] iowarrior 6-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior4 executing program executing program [ 60.318758][ T102] usb 3-1: USB disconnect, device number 3 [ 60.338086][ T102] iowarrior 3-1:0.236: I/O-Warror #1 now disconnected [ 60.367430][ T103] usb 4-1: USB disconnect, device number 3 [ 60.374806][ T103] iowarrior 4-1:0.236: I/O-Warror #2 now disconnected executing program executing program executing program [ 60.487466][ T5] usb 5-1: USB disconnect, device number 3 [ 60.494290][ T1759] iowarrior_open - error, can't find device for minor 0 [ 60.503072][ T83] usb 6-1: USB disconnect, device number 3 [ 60.510413][ T5] iowarrior 5-1:0.236: I/O-Warror #0 now disconnected [ 60.510890][ T83] iowarrior 6-1:0.236: I/O-Warror #4 now disconnected [ 60.528082][ T1761] usb 2-1: USB disconnect, device number 3 [ 60.536015][ T1761] iowarrior 2-1:0.236: I/O-Warror #3 now disconnected [ 60.636792][ T1765] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 60.696798][ T102] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 60.726819][ T103] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 60.876917][ T5] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 60.886882][ T83] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 60.896830][ T1761] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 60.996907][ T1765] usb 1-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.005518][ T1765] usb 1-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.016180][ T1765] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.026079][ T1765] usb 1-1: config 0 has no interface number 0 [ 61.033567][ T1765] usb 1-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.044453][ T1765] usb 1-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 61.054089][ T1765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.063420][ T1765] usb 1-1: config 0 descriptor?? [ 61.067161][ T102] usb 3-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.076945][ T102] usb 3-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.087642][ T102] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.097020][ T102] usb 3-1: config 0 has no interface number 0 [ 61.103677][ T102] usb 3-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.114739][ T102] usb 3-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 61.122637][ T1765] iowarrior 1-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior0 [ 61.124449][ T102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.143576][ T103] usb 4-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.152119][ T103] usb 4-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.162861][ T103] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.172813][ T103] usb 4-1: config 0 has no interface number 0 [ 61.179998][ T103] usb 4-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.191018][ T103] usb 4-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 61.200723][ T103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.209621][ T102] usb 3-1: config 0 descriptor?? [ 61.215911][ T103] usb 4-1: config 0 descriptor?? [ 61.248353][ T102] iowarrior 3-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior1 [ 61.262356][ T103] iowarrior 4-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior2 [ 61.296851][ T5] usb 5-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.296879][ T83] usb 6-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.305949][ T5] usb 5-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.315618][ T83] usb 6-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.326481][ T5] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.326496][ T5] usb 5-1: config 0 has no interface number 0 [ 61.337393][ T83] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.348338][ T5] usb 5-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.354085][ T83] usb 6-1: config 0 has no interface number 0 [ 61.354208][ T1761] usb 2-1: config 0 has an invalid interface number: 236 but max is 2 [ 61.363380][ T5] usb 5-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 executing program [ 61.363391][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.369490][ T5] usb 5-1: config 0 descriptor?? [ 61.374061][ T1761] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 61.407420][ T103] usb 1-1: USB disconnect, device number 4 [ 61.411962][ T1761] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 61.429618][ T5] iowarrior 5-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior3 [ 61.438219][ T1761] usb 2-1: config 0 has no interface number 0 [ 61.439347][ T83] usb 6-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.461617][ T103] iowarrior 1-1:0.236: I/O-Warror #0 now disconnected [ 61.466758][ T83] usb 6-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 61.483361][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program executing program [ 61.491601][ T1761] usb 2-1: config 0 interface 236 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 61.502826][ T1761] usb 2-1: New USB device found, idVendor=07c0, idProduct=1501, bcdDevice=74.a0 [ 61.510585][ T5] usb 4-1: USB disconnect, device number 4 [ 61.513841][ T1761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.530741][ T83] usb 6-1: config 0 descriptor?? [ 61.535280][ T5] iowarrior 4-1:0.236: I/O-Warror #2 now disconnected [ 61.537137][ T1761] usb 2-1: config 0 descriptor?? [ 61.550729][ T102] usb 3-1: USB disconnect, device number 4 [ 61.560028][ T102] iowarrior 3-1:0.236: I/O-Warror #1 now disconnected [ 61.568971][ T83] iowarrior 6-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior0 [ 61.591590][ T1761] iowarrior 2-1:0.236: IOWarrior product=0x1501, serial= interface=236 now attached to iowarrior1 executing program [ 61.657400][ T1761] usb 5-1: USB disconnect, device number 4 [ 61.665326][ T1761] iowarrior 5-1:0.236: I/O-Warror #3 now disconnected executing program [ 61.808198][ T1746] usb 6-1: USB disconnect, device number 4 [ 61.827677][ T83] usb 2-1: USB disconnect, device number 4 [ 61.827692][ T1746] ================================================================== [ 61.842702][ T1746] BUG: KASAN: use-after-free in __mutex_lock+0xf23/0x1360 [ 61.845173][ T83] iowarrior 2-1:0.236: I/O-Warror #1 now disconnected [ 61.850433][ T1746] Read of size 8 at addr ffff8881d2978cd8 by task kworker/0:5/1746 [ 61.850437][ T1746] [ 61.850448][ T1746] CPU: 0 PID: 1746 Comm: kworker/0:5 Not tainted 5.3.0-rc5+ #28 [ 61.850453][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.850467][ T1746] Workqueue: usb_hub_wq hub_event [ 61.850474][ T1746] Call Trace: [ 61.850492][ T1746] dump_stack+0xca/0x13e [ 61.850500][ T1746] ? __mutex_lock+0xf23/0x1360 [ 61.850507][ T1746] ? __mutex_lock+0xf23/0x1360 [ 61.850527][ T1746] print_address_description+0x6a/0x32c [ 61.933285][ T1746] ? __mutex_lock+0xf23/0x1360 [ 61.938593][ T1746] ? __mutex_lock+0xf23/0x1360 [ 61.943616][ T1746] __kasan_report.cold+0x1a/0x33 [ 61.948558][ T1746] ? __mutex_lock+0xf23/0x1360 [ 61.953785][ T1746] kasan_report+0xe/0x12 [ 61.958485][ T1746] __mutex_lock+0xf23/0x1360 [ 61.963063][ T1746] ? lock_downgrade+0x6e0/0x6e0 [ 61.968001][ T1746] ? iowarrior_disconnect+0xf0/0x2c0 [ 61.973720][ T1746] ? mutex_trylock+0x2c0/0x2c0 [ 61.979094][ T1746] ? mutex_trylock+0x2c0/0x2c0 [ 61.984729][ T1746] ? __mutex_unlock_slowpath+0xea/0x670 [ 61.990585][ T1746] ? wait_for_completion+0x3c0/0x3c0 [ 61.995952][ T1746] ? __down_timeout+0x2d0/0x2d0 [ 62.001265][ T1746] ? iowarrior_disconnect+0xf0/0x2c0 [ 62.007241][ T1746] iowarrior_disconnect+0xf0/0x2c0 [ 62.012653][ T1746] usb_unbind_interface+0x1bd/0x8a0 [ 62.018431][ T1746] ? usb_autoresume_device+0x60/0x60 [ 62.023849][ T1746] device_release_driver_internal+0x42f/0x500 [ 62.030386][ T1746] bus_remove_device+0x2dc/0x4a0 [ 62.035405][ T1746] device_del+0x420/0xb10 [ 62.039714][ T1746] ? __device_links_no_driver+0x240/0x240 [ 62.045595][ T1746] ? usb_remove_ep_devs+0x3e/0x80 [ 62.051246][ T1746] ? remove_intf_ep_devs+0x13f/0x1d0 [ 62.057074][ T1746] usb_disable_device+0x211/0x690 [ 62.062616][ T1746] usb_disconnect+0x284/0x8d0 [ 62.067299][ T1746] hub_event+0x1454/0x3640 [ 62.073537][ T1746] ? find_held_lock+0x2d/0x110 [ 62.078658][ T1746] ? mark_held_locks+0xe0/0xe0 [ 62.083769][ T1746] ? hub_port_debounce+0x260/0x260 [ 62.089043][ T1746] process_one_work+0x92b/0x1530 [ 62.094374][ T1746] ? pwq_dec_nr_in_flight+0x310/0x310 [ 62.100403][ T1746] ? do_raw_spin_lock+0x11a/0x280 [ 62.105533][ T1746] worker_thread+0x96/0xe20 [ 62.110054][ T1746] ? process_one_work+0x1530/0x1530 [ 62.115657][ T1746] kthread+0x318/0x420 [ 62.120196][ T1746] ? kthread_create_on_node+0xf0/0xf0 [ 62.125738][ T1746] ret_from_fork+0x24/0x30 [ 62.130719][ T1746] [ 62.133289][ T1746] Allocated by task 83: [ 62.137743][ T1746] save_stack+0x1b/0x80 [ 62.142640][ T1746] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 62.148555][ T1746] iowarrior_probe+0x7a/0x10b2 [ 62.153696][ T1746] usb_probe_interface+0x305/0x7a0 [ 62.159351][ T1746] really_probe+0x281/0x6d0 [ 62.164713][ T1746] driver_probe_device+0x101/0x1b0 [ 62.170596][ T1746] __device_attach_driver+0x1c2/0x220 [ 62.176507][ T1746] bus_for_each_drv+0x162/0x1e0 [ 62.181414][ T1746] __device_attach+0x217/0x360 [ 62.186767][ T1746] bus_probe_device+0x1e4/0x290 [ 62.192413][ T1746] device_add+0xae6/0x16f0 [ 62.197308][ T1746] usb_set_configuration+0xdf6/0x1670 [ 62.203204][ T1746] generic_probe+0x9d/0xd5 [ 62.207813][ T1746] usb_probe_device+0x99/0x100 [ 62.213097][ T1746] really_probe+0x281/0x6d0 [ 62.217824][ T1746] driver_probe_device+0x101/0x1b0 [ 62.223008][ T1746] __device_attach_driver+0x1c2/0x220 [ 62.228649][ T1746] bus_for_each_drv+0x162/0x1e0 [ 62.233625][ T1746] __device_attach+0x217/0x360 [ 62.238602][ T1746] bus_probe_device+0x1e4/0x290 [ 62.243448][ T1746] device_add+0xae6/0x16f0 [ 62.247862][ T1746] usb_new_device.cold+0x6a4/0xe79 [ 62.253212][ T1746] hub_event+0x1b5c/0x3640 [ 62.258028][ T1746] process_one_work+0x92b/0x1530 [ 62.263119][ T1746] worker_thread+0x96/0xe20 [ 62.267942][ T1746] kthread+0x318/0x420 [ 62.272215][ T1746] ret_from_fork+0x24/0x30 [ 62.277112][ T1746] [ 62.279787][ T1746] Freed by task 1778: [ 62.284178][ T1746] save_stack+0x1b/0x80 [ 62.288527][ T1746] __kasan_slab_free+0x130/0x180 [ 62.293920][ T1746] kfree+0xe4/0x2f0 [ 62.299249][ T1746] iowarrior_release+0x187/0x280 [ 62.304443][ T1746] __fput+0x2d7/0x840 [ 62.308553][ T1746] task_work_run+0x13f/0x1c0 [ 62.313473][ T1746] do_exit+0x8ef/0x2c00 [ 62.317743][ T1746] do_group_exit+0x125/0x340 [ 62.322503][ T1746] __x64_sys_exit_group+0x3a/0x50 [ 62.327706][ T1746] do_syscall_64+0xb7/0x580 [ 62.332442][ T1746] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 62.338740][ T1746] [ 62.341060][ T1746] The buggy address belongs to the object at ffff8881d2978c80 [ 62.341060][ T1746] which belongs to the cache kmalloc-512 of size 512 [ 62.355868][ T1746] The buggy address is located 88 bytes inside of [ 62.355868][ T1746] 512-byte region [ffff8881d2978c80, ffff8881d2978e80) [ 62.369976][ T1746] The buggy address belongs to the page: [ 62.375632][ T1746] page:ffffea00074a5e00 refcount:1 mapcount:0 mapping:ffff8881da002500 index:0x0 compound_mapcount: 0 [ 62.386945][ T1746] flags: 0x200000000010200(slab|head) [ 62.392908][ T1746] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da002500 [ 62.403303][ T1746] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 62.413045][ T1746] page dumped because: kasan: bad access detected [ 62.420121][ T1746] [ 62.422437][ T1746] Memory state around the buggy address: [ 62.428247][ T1746] ffff8881d2978b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.436905][ T1746] ffff8881d2978c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 62.445514][ T1746] >ffff8881d2978c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb executing program [ 62.454291][ T1746] ^ [ 62.462198][ T1746] ffff8881d2978d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.470731][ T1746] ffff8881d2978d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 62.479192][ T1746] ================================================================== [ 62.487432][ T1746] Disabling lock debugging due to kernel taint [ 62.494009][ T1746] Kernel panic - not syncing: panic_on_warn set ... [ 62.500963][ T1746] CPU: 0 PID: 1746 Comm: kworker/0:5 Tainted: G B 5.3.0-rc5+ #28 [ 62.510900][ T1746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.522347][ T1746] Workqueue: usb_hub_wq hub_event [ 62.528440][ T1746] Call Trace: [ 62.532006][ T1746] dump_stack+0xca/0x13e [ 62.536515][ T1746] panic+0x2a3/0x6da [ 62.541420][ T1746] ? add_taint.cold+0x16/0x16 [ 62.546876][ T1746] ? retint_kernel+0x10/0x10 [ 62.551648][ T1746] ? trace_hardirqs_on+0x55/0x1e0 [ 62.557021][ T1746] ? __mutex_lock+0xf23/0x1360 [ 62.561960][ T1746] end_report+0x43/0x49 [ 62.566482][ T1746] ? __mutex_lock+0xf23/0x1360 [ 62.571876][ T1746] __kasan_report.cold+0xd/0x33 [ 62.577187][ T1746] ? __mutex_lock+0xf23/0x1360 [ 62.582136][ T1746] kasan_report+0xe/0x12 [ 62.587263][ T1746] __mutex_lock+0xf23/0x1360 [ 62.591918][ T1746] ? lock_downgrade+0x6e0/0x6e0 [ 62.596975][ T1746] ? iowarrior_disconnect+0xf0/0x2c0 [ 62.602409][ T1746] ? mutex_trylock+0x2c0/0x2c0 [ 62.607454][ T1746] ? mutex_trylock+0x2c0/0x2c0 [ 62.613589][ T1746] ? __mutex_unlock_slowpath+0xea/0x670 [ 62.620523][ T1746] ? wait_for_completion+0x3c0/0x3c0 [ 62.625887][ T1746] ? __down_timeout+0x2d0/0x2d0 [ 62.631089][ T1746] ? iowarrior_disconnect+0xf0/0x2c0 [ 62.637255][ T1746] iowarrior_disconnect+0xf0/0x2c0 [ 62.642840][ T1746] usb_unbind_interface+0x1bd/0x8a0 [ 62.648745][ T1746] ? usb_autoresume_device+0x60/0x60 [ 62.654815][ T1746] device_release_driver_internal+0x42f/0x500 [ 62.661130][ T1746] bus_remove_device+0x2dc/0x4a0 [ 62.666431][ T1746] device_del+0x420/0xb10 [ 62.671737][ T1746] ? __device_links_no_driver+0x240/0x240 [ 62.678089][ T1746] ? usb_remove_ep_devs+0x3e/0x80 [ 62.683121][ T1746] ? remove_intf_ep_devs+0x13f/0x1d0 [ 62.688401][ T1746] usb_disable_device+0x211/0x690 [ 62.693979][ T1746] usb_disconnect+0x284/0x8d0 [ 62.699185][ T1746] hub_event+0x1454/0x3640 [ 62.703718][ T1746] ? find_held_lock+0x2d/0x110 [ 62.708467][ T1746] ? mark_held_locks+0xe0/0xe0 [ 62.713347][ T1746] ? hub_port_debounce+0x260/0x260 [ 62.718658][ T1746] process_one_work+0x92b/0x1530 [ 62.724008][ T1746] ? pwq_dec_nr_in_flight+0x310/0x310 [ 62.729665][ T1746] ? do_raw_spin_lock+0x11a/0x280 [ 62.734931][ T1746] worker_thread+0x96/0xe20 [ 62.740165][ T1746] ? process_one_work+0x1530/0x1530 [ 62.747028][ T1746] kthread+0x318/0x420 [ 62.751195][ T1746] ? kthread_create_on_node+0xf0/0xf0 [ 62.756919][ T1746] ret_from_fork+0x24/0x30 [ 62.763278][ T1746] Kernel Offset: disabled [ 62.767740][ T1746] Rebooting in 86400 seconds..