Warning: Permanently added '10.128.0.138' (ECDSA) to the list of known hosts. executing program [ 41.546211][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.946280][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 42.026244][ T12] usb 1-1: config 127 has an invalid interface number: 209 but max is 0 [ 42.034756][ T12] usb 1-1: config 127 has no interface number 0 [ 42.041342][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x4 has invalid maxpacket 408, setting to 64 [ 42.052558][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x2 has invalid maxpacket 271, setting to 64 [ 42.063772][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x7 has invalid maxpacket 390, setting to 64 [ 42.074987][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0x8 has invalid maxpacket 441, setting to 64 [ 42.086297][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0xE has invalid maxpacket 685, setting to 64 [ 42.097526][ T12] usb 1-1: config 127 interface 209 altsetting 159 endpoint 0xB has an invalid bInterval 48, changing to 7 [ 42.108926][ T12] usb 1-1: config 127 interface 209 has no altsetting 0 [ 42.346257][ T12] usb 1-1: string descriptor 0 read error: -22 [ 42.352489][ T12] usb 1-1: New USB device found, idVendor=9022, idProduct=d421, bcdDevice=b1.79 [ 42.361547][ T12] usb 1-1: New USB device strings: Mfr=200, Product=31, SerialNumber=255 [ 42.408080][ T12] dw2102: su3000_identify_state [ 42.413007][ T12] dvb-usb: found a 'TeVii S421 PCI' in warm state. [ 42.419593][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 42.425787][ T12] dvb-usb: bulk message failed: -22 (2/-635461568) [ 42.433693][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 42.456486][ T12] dvbdev: DVB: registering new adapter (TeVii S421 PCI) [ 42.463541][ T12] usb 1-1: media controller created [ 42.469019][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.475639][ T12] dw2102: i2c transfer failed. [ 42.480514][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.487110][ T12] dw2102: i2c transfer failed. [ 42.491854][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.498449][ T12] dw2102: i2c transfer failed. [ 42.503203][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.509821][ T12] dw2102: i2c transfer failed. [ 42.514586][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.521187][ T12] dw2102: i2c transfer failed. [ 42.525938][ T12] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 42.532551][ T12] dw2102: i2c transfer failed. [ 42.537331][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 42.549879][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. executing program [ 42.564739][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 42.570641][ T12] dw2102: command 0x51 transfer failed. [ 42.577544][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.584187][ T12] dw2102: i2c transfer failed. [ 42.589092][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.595663][ T12] dw2102: i2c transfer failed. [ 42.600470][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.607081][ T12] dw2102: i2c transfer failed. [ 42.612071][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.618694][ T12] dw2102: i2c transfer failed. [ 42.623467][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.630064][ T12] dw2102: i2c transfer failed. [ 42.634825][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.641425][ T12] dw2102: i2c transfer failed. [ 42.676259][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.682868][ T12] dw2102: i2c transfer failed. [ 42.687701][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.694280][ T12] dw2102: i2c transfer failed. [ 42.699076][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.705644][ T12] dw2102: i2c transfer failed. [ 42.710440][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.717026][ T12] dw2102: i2c transfer failed. [ 42.721782][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.728402][ T12] dw2102: i2c transfer failed. [ 42.733152][ T12] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 42.739744][ T12] dw2102: i2c transfer failed. [ 42.744524][ T12] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 42.752948][ T12] dw2102: Attached RS2000/TS2020! [ 42.758131][ T12] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 42.766734][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 42.836418][ T12] Registered IR keymap rc-su3000 [ 42.842052][ T12] rc rc0: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 42.851321][ T12] input: TeVii S421 PCI as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 42.861624][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 42.868630][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 42.874684][ T12] dvb-usb: TeVii S421 PCI successfully initialized and connected. [ 42.885412][ T12] usb 1-1: USB disconnect, device number 2 [ 42.892799][ T12] ================================================================== [ 42.900905][ T12] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0 [ 42.908504][ T12] Read of size 8 at addr ffff8881d4d502e8 by task kworker/0:1/12 [ 42.916184][ T12] [ 42.918487][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.3.0-rc5+ #28 [ 42.925931][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.935972][ T12] Workqueue: usb_hub_wq hub_event [ 42.940972][ T12] Call Trace: [ 42.944240][ T12] dump_stack+0xca/0x13e [ 42.948459][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.953717][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.958993][ T12] print_address_description+0x6a/0x32c [ 42.964518][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.969787][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.975045][ T12] __kasan_report.cold+0x1a/0x33 [ 42.979957][ T12] ? _raw_spin_trylock+0x50/0x50 [ 42.984961][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 42.990218][ T12] kasan_report+0xe/0x12 [ 42.994560][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 42.999654][ T12] ? dvb_usb_exit+0x290/0x290 [ 43.004435][ T12] ? usb_disable_endpoint+0x1ba/0x1f0 [ 43.009786][ T12] ? usb_disable_interface+0x140/0x1a0 [ 43.015233][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 43.020409][ T12] ? usb_autoresume_device+0x60/0x60 [ 43.025675][ T12] device_release_driver_internal+0x42f/0x500 [ 43.031720][ T12] bus_remove_device+0x2dc/0x4a0 [ 43.036751][ T12] device_del+0x420/0xb10 [ 43.041055][ T12] ? __device_links_no_driver+0x240/0x240 [ 43.046745][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 43.051741][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 43.056996][ T12] usb_disable_device+0x211/0x690 [ 43.061995][ T12] usb_disconnect+0x284/0x8d0 [ 43.066645][ T12] hub_event+0x1454/0x3640 [ 43.071089][ T12] ? find_held_lock+0x2d/0x110 [ 43.075834][ T12] ? mark_held_locks+0xe0/0xe0 [ 43.080586][ T12] ? hub_port_debounce+0x260/0x260 [ 43.085672][ T12] process_one_work+0x92b/0x1530 [ 43.090583][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 43.095925][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 43.100977][ T12] worker_thread+0x7ab/0xe20 [ 43.105553][ T12] ? process_one_work+0x1530/0x1530 [ 43.110723][ T12] kthread+0x318/0x420 [ 43.114777][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 43.120125][ T12] ret_from_fork+0x24/0x30 [ 43.124514][ T12] [ 43.126817][ T12] Allocated by task 12: [ 43.130945][ T12] save_stack+0x1b/0x80 [ 43.135074][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 43.140679][ T12] __kmalloc_track_caller+0xfd/0x330 [ 43.145938][ T12] kmemdup+0x23/0x50 [ 43.149813][ T12] dw2102_probe+0x627/0xc40 [ 43.154289][ T12] usb_probe_interface+0x305/0x7a0 [ 43.159377][ T12] really_probe+0x281/0x6d0 [ 43.163855][ T12] driver_probe_device+0x101/0x1b0 [ 43.168954][ T12] __device_attach_driver+0x1c2/0x220 [ 43.174300][ T12] bus_for_each_drv+0x162/0x1e0 [ 43.179125][ T12] __device_attach+0x217/0x360 [ 43.183866][ T12] bus_probe_device+0x1e4/0x290 [ 43.188690][ T12] device_add+0xae6/0x16f0 [ 43.193088][ T12] usb_set_configuration+0xdf6/0x1670 [ 43.198570][ T12] generic_probe+0x9d/0xd5 [ 43.202957][ T12] usb_probe_device+0x99/0x100 [ 43.207711][ T12] really_probe+0x281/0x6d0 [ 43.212187][ T12] driver_probe_device+0x101/0x1b0 [ 43.217291][ T12] __device_attach_driver+0x1c2/0x220 [ 43.222640][ T12] bus_for_each_drv+0x162/0x1e0 [ 43.227465][ T12] __device_attach+0x217/0x360 [ 43.232214][ T12] bus_probe_device+0x1e4/0x290 [ 43.237037][ T12] device_add+0xae6/0x16f0 [ 43.241437][ T12] usb_new_device.cold+0x6a4/0xe79 [ 43.246523][ T12] hub_event+0x1b5c/0x3640 [ 43.250912][ T12] process_one_work+0x92b/0x1530 [ 43.255823][ T12] worker_thread+0x96/0xe20 [ 43.260307][ T12] kthread+0x318/0x420 [ 43.264350][ T12] ret_from_fork+0x24/0x30 [ 43.268736][ T12] [ 43.271039][ T12] Freed by task 12: [ 43.274823][ T12] save_stack+0x1b/0x80 [ 43.278948][ T12] __kasan_slab_free+0x130/0x180 [ 43.283858][ T12] kfree+0xe4/0x2f0 [ 43.287653][ T12] dw2102_probe+0x871/0xc40 [ 43.292147][ T12] usb_probe_interface+0x305/0x7a0 [ 43.297236][ T12] really_probe+0x281/0x6d0 [ 43.301717][ T12] driver_probe_device+0x101/0x1b0 [ 43.306799][ T12] __device_attach_driver+0x1c2/0x220 [ 43.312143][ T12] bus_for_each_drv+0x162/0x1e0 [ 43.316967][ T12] __device_attach+0x217/0x360 [ 43.321705][ T12] bus_probe_device+0x1e4/0x290 [ 43.326529][ T12] device_add+0xae6/0x16f0 [ 43.330921][ T12] usb_set_configuration+0xdf6/0x1670 [ 43.336268][ T12] generic_probe+0x9d/0xd5 [ 43.340657][ T12] usb_probe_device+0x99/0x100 [ 43.345393][ T12] really_probe+0x281/0x6d0 [ 43.349868][ T12] driver_probe_device+0x101/0x1b0 [ 43.354950][ T12] __device_attach_driver+0x1c2/0x220 [ 43.360294][ T12] bus_for_each_drv+0x162/0x1e0 [ 43.365169][ T12] __device_attach+0x217/0x360 [ 43.369911][ T12] bus_probe_device+0x1e4/0x290 [ 43.374802][ T12] device_add+0xae6/0x16f0 [ 43.379201][ T12] usb_new_device.cold+0x6a4/0xe79 [ 43.384284][ T12] hub_event+0x1b5c/0x3640 [ 43.388676][ T12] process_one_work+0x92b/0x1530 [ 43.393602][ T12] worker_thread+0x96/0xe20 [ 43.398078][ T12] kthread+0x318/0x420 [ 43.402119][ T12] ret_from_fork+0x24/0x30 [ 43.406498][ T12] [ 43.408800][ T12] The buggy address belongs to the object at ffff8881d4d50000 [ 43.408800][ T12] which belongs to the cache kmalloc-4k of size 4096 [ 43.422974][ T12] The buggy address is located 744 bytes inside of [ 43.422974][ T12] 4096-byte region [ffff8881d4d50000, ffff8881d4d51000) [ 43.436308][ T12] The buggy address belongs to the page: [ 43.441926][ T12] page:ffffea0007535400 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 43.453002][ T12] flags: 0x200000000010200(slab|head) [ 43.458347][ T12] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 43.466906][ T12] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 43.475468][ T12] page dumped because: kasan: bad access detected [ 43.481850][ T12] [ 43.484151][ T12] Memory state around the buggy address: [ 43.489755][ T12] ffff8881d4d50180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.497786][ T12] ffff8881d4d50200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.505818][ T12] >ffff8881d4d50280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.513858][ T12] ^ [ 43.521301][ T12] ffff8881d4d50300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.529337][ T12] ffff8881d4d50380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 43.537373][ T12] ================================================================== [ 43.545410][ T12] Disabling lock debugging due to kernel taint [ 43.551792][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 43.558362][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.3.0-rc5+ #28 [ 43.567185][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.577226][ T12] Workqueue: usb_hub_wq hub_event [ 43.582270][ T12] Call Trace: [ 43.585542][ T12] dump_stack+0xca/0x13e [ 43.589756][ T12] panic+0x2a3/0x6da [ 43.593624][ T12] ? add_taint.cold+0x16/0x16 [ 43.598271][ T12] ? retint_kernel+0x10/0x10 [ 43.602833][ T12] ? trace_hardirqs_on+0x55/0x1e0 [ 43.607975][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 43.613238][ T12] end_report+0x43/0x49 [ 43.617370][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 43.622675][ T12] __kasan_report.cold+0xd/0x33 [ 43.627515][ T12] ? _raw_spin_trylock+0x50/0x50 [ 43.632427][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 43.637684][ T12] kasan_report+0xe/0x12 [ 43.641898][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 43.646983][ T12] ? dvb_usb_exit+0x290/0x290 [ 43.651634][ T12] ? usb_disable_endpoint+0x1ba/0x1f0 [ 43.656988][ T12] ? usb_disable_interface+0x140/0x1a0 [ 43.662419][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 43.667599][ T12] ? usb_autoresume_device+0x60/0x60 [ 43.672950][ T12] device_release_driver_internal+0x42f/0x500 [ 43.679003][ T12] bus_remove_device+0x2dc/0x4a0 [ 43.683981][ T12] device_del+0x420/0xb10 [ 43.688289][ T12] ? __device_links_no_driver+0x240/0x240 [ 43.693987][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 43.698990][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 43.704246][ T12] usb_disable_device+0x211/0x690 [ 43.709283][ T12] usb_disconnect+0x284/0x8d0 [ 43.713990][ T12] hub_event+0x1454/0x3640 [ 43.718390][ T12] ? find_held_lock+0x2d/0x110 [ 43.723124][ T12] ? mark_held_locks+0xe0/0xe0 [ 43.727856][ T12] ? hub_port_debounce+0x260/0x260 [ 43.732948][ T12] process_one_work+0x92b/0x1530 [ 43.737854][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 43.743513][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 43.748516][ T12] worker_thread+0x7ab/0xe20 [ 43.753080][ T12] ? process_one_work+0x1530/0x1530 [ 43.758245][ T12] kthread+0x318/0x420 [ 43.762281][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 43.767628][ T12] ret_from_fork+0x24/0x30 [ 43.772448][ T12] Kernel Offset: disabled [ 43.776754][ T12] Rebooting in 86400 seconds..