[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 15.420202][ C1] random: crng init done [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 28.769483][ T4585] can: request_module (can-proto-0) failed. [ 28.815317][ T4585] can: request_module (can-proto-0) failed. Warning: Permanently added '10.128.1.9' (ECDSA) to the list of known hosts. 2019/08/13 13:14:43 parsed 1 programs 2019/08/13 13:14:43 executed programs: 0 [ 36.539572][ T4717] cgroup1: Unknown subsys name 'perf_event' [ 36.546216][ T4717] cgroup1: Unknown subsys name 'net_cls' [ 36.549165][ T4719] cgroup1: Unknown subsys name 'perf_event' [ 36.559049][ T4719] cgroup1: Unknown subsys name 'net_cls' [ 36.566493][ T4722] cgroup1: Unknown subsys name 'perf_event' [ 36.572714][ T4722] cgroup1: Unknown subsys name 'net_cls' [ 36.583271][ T4725] cgroup1: Unknown subsys name 'perf_event' [ 36.583313][ T4728] cgroup1: Unknown subsys name 'perf_event' [ 36.589606][ T4725] cgroup1: Unknown subsys name 'net_cls' [ 36.608958][ T4732] cgroup1: Unknown subsys name 'perf_event' [ 36.615181][ T4732] cgroup1: Unknown subsys name 'net_cls' [ 36.615749][ T4728] cgroup1: Unknown subsys name 'net_cls' [ 39.655454][ T12] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 39.665449][ T2501] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.675936][ T5] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.695778][ T5708] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 39.725432][ T23] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.755427][ T5717] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.895429][ T12] usb 3-1: Using ep0 maxpacket: 8 [ 39.905432][ T2501] usb 1-1: Using ep0 maxpacket: 8 [ 39.915503][ T5] usb 2-1: Using ep0 maxpacket: 8 [ 39.935591][ T5708] usb 4-1: Using ep0 maxpacket: 8 [ 39.975464][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 39.995545][ T5717] usb 5-1: Using ep0 maxpacket: 8 [ 40.015633][ T12] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.023777][ T12] usb 3-1: config 0 has no interface number 0 [ 40.030020][ T12] usb 3-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.039151][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.045544][ T2501] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.047225][ T5] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.055153][ T2501] usb 1-1: config 0 has no interface number 0 [ 40.063124][ T5] usb 2-1: config 0 has no interface number 0 [ 40.067993][ T12] usb 3-1: config 0 descriptor?? [ 40.069916][ T2501] usb 1-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.075654][ T5] usb 2-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.080342][ T2501] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.089449][ T5] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.105019][ T2501] usb 1-1: config 0 descriptor?? [ 40.106529][ T5708] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.106540][ T5708] usb 4-1: config 0 has no interface number 0 [ 40.106588][ T5708] usb 4-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.106603][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.114708][ T23] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.126046][ T5708] usb 4-1: config 0 descriptor?? [ 40.127543][ T23] usb 6-1: config 0 has no interface number 0 [ 40.141342][ T5] usb 2-1: config 0 descriptor?? [ 40.143145][ T23] usb 6-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.155504][ T5717] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 40.158835][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.163655][ T5717] usb 5-1: config 0 has no interface number 0 [ 40.175984][ T23] usb 6-1: config 0 descriptor?? [ 40.179460][ T5708] sysfs: cannot create duplicate filename '/class/tty/ttyHS0' [ 40.187025][ T2501] sysfs: cannot create duplicate filename '/class/tty/ttyHS0' [ 40.193533][ T5708] CPU: 0 PID: 5708 Comm: kworker/0:2 Not tainted 5.2.0-rc1+ #1 [ 40.193540][ T5708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.193558][ T5708] Workqueue: usb_hub_wq hub_event [ 40.193569][ T5708] Call Trace: [ 40.253946][ T5708] dump_stack+0xca/0x13e [ 40.258202][ T5708] sysfs_warn_dup.cold+0x1c/0x2d [ 40.263301][ T5708] sysfs_do_create_link_sd.isra.0+0x119/0x130 [ 40.269529][ T5708] sysfs_create_link+0x61/0xc0 [ 40.274292][ T5708] device_add+0x788/0x1700 [ 40.278691][ T5708] ? uevent_store+0x50/0x50 [ 40.283197][ T5708] ? __init_waitqueue_head+0x31/0x90 [ 40.288470][ T5708] tty_register_device_attr+0x341/0x6f0 [ 40.294004][ T5708] ? hung_up_tty_compat_ioctl+0x40/0x40 [ 40.299623][ T5708] ? do_raw_spin_lock+0x11a/0x280 [ 40.304645][ T5708] ? mark_held_locks+0x9f/0xe0 [ 40.309392][ T5708] ? tty_port_link_device+0x55/0xd0 [ 40.314576][ T5708] hso_serial_common_create+0x113/0x710 [ 40.320108][ T5708] ? lockdep_init_map+0x1b0/0x5e0 [ 40.325114][ T5708] hso_probe+0xc96/0x1a50 [ 40.329427][ T5708] usb_probe_interface+0x30b/0x7a0 [ 40.334522][ T5708] ? usb_probe_device+0x100/0x100 [ 40.339530][ T5708] really_probe+0x287/0x660 [ 40.344022][ T5708] driver_probe_device+0x104/0x210 [ 40.349178][ T5708] __device_attach_driver+0x1c4/0x230 [ 40.354536][ T5708] ? driver_allows_async_probing+0x160/0x160 [ 40.360674][ T5708] bus_for_each_drv+0x15e/0x1e0 [ 40.365513][ T5708] ? bus_rescan_devices+0x20/0x20 [ 40.370570][ T5708] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.376379][ T5708] ? lockdep_hardirqs_on+0x379/0x580 [ 40.381654][ T5708] __device_attach+0x217/0x360 [ 40.386407][ T5708] ? device_bind_driver+0xd0/0xd0 [ 40.391417][ T5708] ? kobject_uevent_env+0x2a2/0x1170 [ 40.396690][ T5708] ? kobject_uevent_env+0x2ac/0x1170 [ 40.401975][ T5708] bus_probe_device+0x1e6/0x290 [ 40.406923][ T5708] ? blocking_notifier_call_chain+0x54/0xa0 [ 40.413408][ T5708] device_add+0xae6/0x1700 [ 40.417809][ T5708] ? uevent_store+0x50/0x50 [ 40.422298][ T5708] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.428092][ T5708] usb_set_configuration+0xdf6/0x1670 [ 40.433451][ T5708] generic_probe+0x9d/0xd5 [ 40.437870][ T5708] usb_probe_device+0xa2/0x100 [ 40.442619][ T5708] ? usb_suspend+0x620/0x620 [ 40.447371][ T5708] really_probe+0x287/0x660 [ 40.451860][ T5708] driver_probe_device+0x104/0x210 [ 40.456955][ T5708] __device_attach_driver+0x1c4/0x230 [ 40.462315][ T5708] ? driver_allows_async_probing+0x160/0x160 [ 40.468278][ T5708] bus_for_each_drv+0x15e/0x1e0 [ 40.473111][ T5708] ? bus_rescan_devices+0x20/0x20 [ 40.478213][ T5708] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.484097][ T5708] ? lockdep_hardirqs_on+0x379/0x580 [ 40.489633][ T5708] __device_attach+0x217/0x360 [ 40.494383][ T5708] ? device_bind_driver+0xd0/0xd0 [ 40.499390][ T5708] ? kobject_uevent_env+0x2a2/0x1170 [ 40.504657][ T5708] ? kobject_uevent_env+0x2ac/0x1170 [ 40.509925][ T5708] bus_probe_device+0x1e6/0x290 [ 40.514757][ T5708] ? blocking_notifier_call_chain+0x54/0xa0 [ 40.520634][ T5708] device_add+0xae6/0x1700 [ 40.525035][ T5708] ? uevent_store+0x50/0x50 [ 40.529532][ T5708] usb_new_device.cold+0x8c1/0x1016 [ 40.534712][ T5708] ? usb_port_suspend+0xa40/0xa40 [ 40.539722][ T5708] ? mark_held_locks+0x9f/0xe0 [ 40.544472][ T5708] ? _raw_spin_unlock_irq+0x24/0x30 [ 40.549655][ T5708] hub_event+0x1adc/0x35a0 [ 40.554062][ T5708] ? hub_port_debounce+0x260/0x260 [ 40.559608][ T5708] process_one_work+0x90a/0x1580 [ 40.564535][ T5708] ? pwq_dec_nr_in_flight+0x310/0x310 [ 40.569902][ T5708] worker_thread+0x96/0xe20 [ 40.574393][ T5708] ? process_one_work+0x1580/0x1580 [ 40.579576][ T5708] kthread+0x30e/0x420 [ 40.583629][ T5708] ? kthread_park+0x1a0/0x1a0 [ 40.588378][ T5708] ret_from_fork+0x3a/0x50 [ 40.592782][ T2501] CPU: 1 PID: 2501 Comm: kworker/1:2 Not tainted 5.2.0-rc1+ #1 [ 40.600489][ T2501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.610547][ T2501] Workqueue: usb_hub_wq hub_event [ 40.615562][ T2501] Call Trace: [ 40.616238][ T12] hso 3-1:0.2: Failed to find BULK IN ep [ 40.618857][ T2501] dump_stack+0xca/0x13e [ 40.618871][ T2501] sysfs_warn_dup.cold+0x1c/0x2d [ 40.618883][ T2501] sysfs_do_create_link_sd.isra.0+0x119/0x130 [ 40.618893][ T2501] sysfs_create_link+0x61/0xc0 [ 40.618908][ T2501] device_add+0x788/0x1700 [ 40.646871][ T5717] usb 5-1: New USB device found, idVendor=0af0, idProduct=7031, bcdDevice=20.5c [ 40.649273][ T2501] ? uevent_store+0x50/0x50 [ 40.649287][ T2501] ? __init_waitqueue_head+0x31/0x90 [ 40.649300][ T2501] tty_register_device_attr+0x341/0x6f0 [ 40.649310][ T2501] ? hung_up_tty_compat_ioctl+0x40/0x40 [ 40.649326][ T2501] ? do_raw_spin_lock+0x11a/0x280 [ 40.658432][ T5717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.662819][ T2501] ? mark_held_locks+0x9f/0xe0 [ 40.673620][ T2501] ? tty_port_link_device+0x55/0xd0 [ 40.673634][ T2501] hso_serial_common_create+0x113/0x710 [ 40.684711][ T2501] ? lockdep_init_map+0x1b0/0x5e0 [ 40.697852][ T2501] hso_probe+0xc96/0x1a50 [ 40.697866][ T2501] usb_probe_interface+0x30b/0x7a0 [ 40.697878][ T2501] ? usb_probe_device+0x100/0x100 [ 40.697890][ T2501] really_probe+0x287/0x660 [ 40.697901][ T2501] driver_probe_device+0x104/0x210 [ 40.697912][ T2501] __device_attach_driver+0x1c4/0x230 [ 40.697926][ T2501] ? driver_allows_async_probing+0x160/0x160 [ 40.711056][ T2501] bus_for_each_drv+0x15e/0x1e0 [ 40.730492][ T2501] ? bus_rescan_devices+0x20/0x20 [ 40.730507][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.730518][ T2501] ? lockdep_hardirqs_on+0x379/0x580 [ 40.730535][ T2501] __device_attach+0x217/0x360 [ 40.735976][ T5] hso 2-1:0.2: Failed to find BULK IN ep [ 40.740133][ T2501] ? device_bind_driver+0xd0/0xd0 [ 40.740147][ T2501] ? kobject_uevent_env+0x2a2/0x1170 [ 40.740158][ T2501] ? kobject_uevent_env+0x2ac/0x1170 [ 40.740174][ T2501] bus_probe_device+0x1e6/0x290 [ 40.746890][ T12] ================================================================== [ 40.751496][ T2501] ? blocking_notifier_call_chain+0x54/0xa0 [ 40.751513][ T2501] device_add+0xae6/0x1700 [ 40.756497][ T12] BUG: KASAN: use-after-free in hso_free_interface+0x3f2/0x4f0 [ 40.761489][ T2501] ? uevent_store+0x50/0x50 [ 40.767265][ T12] Read of size 8 at addr ffff8881d112d998 by task kworker/0:1/12 [ 40.772530][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.777254][ T12] [ 40.783128][ T2501] usb_set_configuration+0xdf6/0x1670 [ 40.855078][ T2501] generic_probe+0x9d/0xd5 [ 40.859479][ T2501] usb_probe_device+0xa2/0x100 [ 40.864228][ T2501] ? usb_suspend+0x620/0x620 [ 40.868814][ T2501] really_probe+0x287/0x660 [ 40.873300][ T2501] driver_probe_device+0x104/0x210 [ 40.878394][ T2501] __device_attach_driver+0x1c4/0x230 [ 40.883749][ T2501] ? driver_allows_async_probing+0x160/0x160 [ 40.889707][ T2501] bus_for_each_drv+0x15e/0x1e0 [ 40.894540][ T2501] ? bus_rescan_devices+0x20/0x20 [ 40.899549][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 40.905360][ T2501] ? lockdep_hardirqs_on+0x379/0x580 [ 40.910628][ T2501] __device_attach+0x217/0x360 [ 40.915394][ T2501] ? device_bind_driver+0xd0/0xd0 [ 40.920402][ T2501] ? kobject_uevent_env+0x2a2/0x1170 [ 40.925776][ T2501] ? kobject_uevent_env+0x2ac/0x1170 [ 40.931650][ T2501] bus_probe_device+0x1e6/0x290 [ 40.936488][ T2501] ? blocking_notifier_call_chain+0x54/0xa0 [ 40.942364][ T2501] device_add+0xae6/0x1700 [ 40.946767][ T2501] ? uevent_store+0x50/0x50 [ 40.951289][ T2501] usb_new_device.cold+0x8c1/0x1016 [ 40.956479][ T2501] ? usb_port_suspend+0xa40/0xa40 [ 40.961517][ T2501] ? mark_held_locks+0x9f/0xe0 [ 40.966268][ T2501] ? _raw_spin_unlock_irq+0x24/0x30 [ 40.971548][ T2501] hub_event+0x1adc/0x35a0 [ 40.975948][ T2501] ? hub_port_debounce+0x260/0x260 [ 40.981047][ T2501] process_one_work+0x90a/0x1580 [ 40.985975][ T2501] ? pwq_dec_nr_in_flight+0x310/0x310 [ 40.991333][ T2501] ? do_raw_spin_lock+0x11a/0x280 [ 40.996429][ T2501] worker_thread+0x96/0xe20 [ 41.000916][ T2501] ? process_one_work+0x1580/0x1580 [ 41.006294][ T2501] kthread+0x30e/0x420 [ 41.011043][ T2501] ? kthread_park+0x1a0/0x1a0 [ 41.015704][ T2501] ret_from_fork+0x3a/0x50 [ 41.020109][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.2.0-rc1+ #1 [ 41.027465][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.027484][ T12] Workqueue: usb_hub_wq hub_event [ 41.043057][ T12] Call Trace: [ 41.046440][ T12] dump_stack+0xca/0x13e [ 41.048535][ T2501] hso 1-1:0.2: Failed to find BULK IN ep [ 41.050702][ T12] ? hso_free_interface+0x3f2/0x4f0 [ 41.050715][ T12] ? hso_free_interface+0x3f2/0x4f0 [ 41.050729][ T12] print_address_description+0x67/0x231 [ 41.050738][ T12] ? hso_free_interface+0x3f2/0x4f0 [ 41.050753][ T12] ? hso_free_interface+0x3f2/0x4f0 [ 41.056583][ T2501] kasan: CONFIG_KASAN_INLINE enabled [ 41.062263][ T12] __kasan_report.cold+0x1a/0x32 [ 41.062278][ T12] ? hso_free_interface+0x3f2/0x4f0 [ 41.067515][ T2501] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 41.073106][ T12] kasan_report+0xe/0x20 [ 41.078299][ T2501] general protection fault: 0000 [#1] SMP KASAN PTI [ 41.083467][ T12] hso_free_interface+0x3f2/0x4f0 [ 41.088722][ T2501] CPU: 1 PID: 2501 Comm: kworker/1:2 Not tainted 5.2.0-rc1+ #1 [ 41.093630][ T12] ? hso_probe+0x13c6/0x1a50 [ 41.098794][ T2501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.106827][ T12] hso_probe+0x362/0x1a50 [ 41.111038][ T2501] Workqueue: usb_hub_wq hub_event [ 41.117608][ T12] usb_probe_interface+0x30b/0x7a0 [ 41.122607][ T2501] RIP: 0010:cdev_del+0x22/0x90 [ 41.130207][ T12] ? usb_probe_device+0x100/0x100 [ 41.134766][ T2501] Code: cf 0f 1f 80 00 00 00 00 55 48 89 fd 48 83 ec 08 e8 93 a5 d5 ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f 48 [ 41.144917][ T12] really_probe+0x287/0x660 [ 41.149223][ T2501] RSP: 0018:ffff8881d1937218 EFLAGS: 00010207 [ 41.154235][ T12] driver_probe_device+0x104/0x210 [ 41.159407][ T2501] RAX: dffffc0000000000 RBX: ffff8881d28e4800 RCX: ffffffff820d879e [ 41.164167][ T12] __device_attach_driver+0x1c4/0x230 [ 41.169192][ T2501] RDX: 000000000000000c RSI: ffffffff8167705d RDI: 0000000000000064 [ 41.188861][ T12] ? driver_allows_async_probing+0x160/0x160 [ 41.193327][ T2501] RBP: 0000000000000000 R08: ffff8881d18a1800 R09: 0000000000000000 [ 41.199539][ T12] bus_for_each_drv+0x15e/0x1e0 [ 41.204614][ T2501] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 41.212744][ T12] ? bus_rescan_devices+0x20/0x20 [ 41.218079][ T2501] R13: ffff8881d247aa80 R14: ffff8881d3f88000 R15: ffff8881d3f8c470 [ 41.226026][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.231971][ T2501] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 41.239917][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 41.244744][ T2501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.252788][ T12] __device_attach+0x217/0x360 [ 41.257877][ T2501] CR2: 00007fffbfa1cf30 CR3: 00000001d3440000 CR4: 00000000001406e0 [ 41.265839][ T12] ? device_bind_driver+0xd0/0xd0 [ 41.271609][ T2501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.280525][ T12] ? kobject_uevent_env+0x2a2/0x1170 [ 41.285786][ T2501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.292353][ T12] ? kobject_uevent_env+0x2ac/0x1170 [ 41.297166][ T2501] Call Trace: [ 41.305415][ T12] bus_probe_device+0x1e6/0x290 [ 41.311026][ T2501] tty_unregister_device+0x10d/0x1a0 [ 41.319414][ T12] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.324754][ T2501] hso_probe.cold+0xc1/0x116 [ 41.333150][ T12] device_add+0xae6/0x1700 [ 41.338599][ T2501] usb_probe_interface+0x30b/0x7a0 [ 41.341865][ T12] ? uevent_store+0x50/0x50 [ 41.346803][ T2501] ? usb_probe_device+0x100/0x100 [ 41.356230][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.362102][ T2501] really_probe+0x287/0x660 [ 41.366849][ T12] usb_set_configuration+0xdf6/0x1670 [ 41.371236][ T2501] driver_probe_device+0x104/0x210 [ 41.376325][ T12] generic_probe+0x9d/0xd5 [ 41.381592][ T2501] __device_attach_driver+0x1c4/0x230 [ 41.386684][ T12] usb_probe_device+0xa2/0x100 [ 41.393628][ T2501] ? driver_allows_async_probing+0x160/0x160 [ 41.398198][ T12] ? usb_suspend+0x620/0x620 [ 41.403546][ T2501] bus_for_each_drv+0x15e/0x1e0 [ 41.408630][ T12] really_probe+0x287/0x660 [ 41.413015][ T2501] ? bus_rescan_devices+0x20/0x20 [ 41.418445][ T12] driver_probe_device+0x104/0x210 [ 41.423222][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.429220][ T12] __device_attach_driver+0x1c4/0x230 [ 41.433781][ T2501] ? lockdep_hardirqs_on+0x379/0x580 [ 41.439217][ T12] ? driver_allows_async_probing+0x160/0x160 [ 41.443701][ T2501] __device_attach+0x217/0x360 [ 41.448733][ T12] bus_for_each_drv+0x15e/0x1e0 [ 41.453826][ T2501] ? device_bind_driver+0xd0/0xd0 [ 41.459600][ T12] ? bus_rescan_devices+0x20/0x20 [ 41.465030][ T2501] ? kobject_uevent_env+0x2a2/0x1170 [ 41.470296][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.476246][ T2501] ? kobject_uevent_env+0x2ac/0x1170 [ 41.481069][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 41.485890][ T2501] bus_probe_device+0x1e6/0x290 [ 41.490886][ T12] __device_attach+0x217/0x360 [ 41.495998][ T2501] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.501251][ T12] ? device_bind_driver+0xd0/0xd0 [ 41.507110][ T2501] device_add+0xae6/0x1700 [ 41.512453][ T12] ? kobject_uevent_env+0x2a2/0x1170 [ 41.517708][ T2501] ? uevent_store+0x50/0x50 [ 41.522549][ T12] ? kobject_uevent_env+0x2ac/0x1170 [ 41.527281][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.533230][ T12] bus_probe_device+0x1e6/0x290 [ 41.538233][ T2501] usb_set_configuration+0xdf6/0x1670 [ 41.542619][ T12] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.547873][ T2501] generic_probe+0x9d/0xd5 [ 41.552605][ T12] device_add+0xae6/0x1700 [ 41.558304][ T2501] usb_probe_device+0xa2/0x100 [ 41.564077][ T12] ? uevent_store+0x50/0x50 [ 41.568896][ T2501] ? usb_suspend+0x620/0x620 [ 41.574247][ T12] usb_new_device.cold+0x8c1/0x1016 [ 41.580108][ T2501] really_probe+0x287/0x660 [ 41.584496][ T12] ? usb_port_suspend+0xa40/0xa40 [ 41.588882][ T2501] driver_probe_device+0x104/0x210 [ 41.593627][ T12] ? mark_held_locks+0x9f/0xe0 [ 41.598102][ T2501] __device_attach_driver+0x1c4/0x230 [ 41.602665][ T12] ? _raw_spin_unlock_irq+0x24/0x30 [ 41.607833][ T2501] ? driver_allows_async_probing+0x160/0x160 [ 41.612303][ T12] hub_event+0x1adc/0x35a0 [ 41.617307][ T2501] bus_for_each_drv+0x15e/0x1e0 [ 41.622387][ T12] ? hub_port_debounce+0x260/0x260 [ 41.627118][ T2501] ? bus_rescan_devices+0x20/0x20 [ 41.632473][ T12] process_one_work+0x90a/0x1580 [ 41.637643][ T2501] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 41.643603][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 41.648001][ T2501] ? lockdep_hardirqs_on+0x379/0x580 [ 41.652818][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 41.657908][ T2501] __device_attach+0x217/0x360 [ 41.662912][ T12] worker_thread+0x96/0xe20 [ 41.667817][ T2501] ? device_bind_driver+0xd0/0xd0 [ 41.673690][ T12] ? process_one_work+0x1580/0x1580 [ 41.679032][ T2501] ? kobject_uevent_env+0x2a2/0x1170 [ 41.684284][ T12] kthread+0x30e/0x420 [ 41.689278][ T2501] ? kobject_uevent_env+0x2ac/0x1170 [ 41.694005][ T12] ? kthread_park+0x1a0/0x1a0 [ 41.698491][ T2501] bus_probe_device+0x1e6/0x290 [ 41.703482][ T12] ret_from_fork+0x3a/0x50 [ 41.708648][ T2501] ? blocking_notifier_call_chain+0x54/0xa0 [ 41.713992][ T12] [ 41.718211][ T2501] device_add+0xae6/0x1700 [ 41.723458][ T12] Allocated by task 12: [ 41.728120][ T2501] ? uevent_store+0x50/0x50 [ 41.733127][ T12] save_stack+0x1b/0x80 [ 41.737509][ T2501] usb_new_device.cold+0x8c1/0x1016 [ 41.743370][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 41.745671][ T2501] ? usb_port_suspend+0xa40/0xa40 [ 41.750058][ T12] hso_create_device+0x43/0x390 [ 41.754182][ T2501] ? mark_held_locks+0x9f/0xe0 [ 41.758653][ T12] hso_probe+0xbb0/0x1a50 [ 41.762780][ T2501] ? _raw_spin_unlock_irq+0x24/0x30 [ 41.767947][ T12] usb_probe_interface+0x30b/0x7a0 [ 41.773547][ T2501] hub_event+0x1adc/0x35a0 [ 41.778541][ T12] really_probe+0x287/0x660 [ 41.783465][ T2501] ? hub_port_debounce+0x260/0x260 [ 41.788208][ T12] driver_probe_device+0x104/0x210 [ 41.792520][ T2501] process_one_work+0x90a/0x1580 [ 41.797689][ T12] __device_attach_driver+0x1c4/0x230 [ 41.802783][ T2501] ? pwq_dec_nr_in_flight+0x310/0x310 [ 41.807169][ T12] bus_for_each_drv+0x15e/0x1e0 [ 41.812097][ T2501] ? do_raw_spin_lock+0x11a/0x280 [ 41.817177][ T12] __device_attach+0x217/0x360 [ 41.822258][ T2501] worker_thread+0x96/0xe20 [ 41.827170][ T12] bus_probe_device+0x1e6/0x290 [ 41.832511][ T2501] ? process_one_work+0x1580/0x1580 [ 41.837936][ T12] device_add+0xae6/0x1700 [ 41.842843][ T2501] kthread+0x30e/0x420 [ 41.847846][ T12] usb_set_configuration+0xdf6/0x1670 [ 41.852577][ T2501] ? kthread_park+0x1a0/0x1a0 [ 41.857049][ T12] generic_probe+0x9d/0xd5 [ 41.861881][ T2501] ret_from_fork+0x3a/0x50 [ 41.867045][ T12] usb_probe_device+0xa2/0x100 [ 41.871436][ T2501] Modules linked in: [ 41.875491][ T12] really_probe+0x287/0x660 [ 41.880899][ T2501] ---[ end trace 69019d8f2721b22d ]--- [ 41.885470][ T12] driver_probe_device+0x104/0x210 [ 41.885484][ T12] __device_attach_driver+0x1c4/0x230 [ 41.889874][ T2501] RIP: 0010:cdev_del+0x22/0x90 [ 41.894258][ T12] bus_for_each_drv+0x15e/0x1e0 [ 41.899010][ T2501] Code: cf 0f 1f 80 00 00 00 00 55 48 89 fd 48 83 ec 08 e8 93 a5 d5 ff 48 8d 7d 64 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 4f 48 [ 41.902869][ T12] __device_attach+0x217/0x360 [ 41.907344][ T2501] RSP: 0018:ffff8881d1937218 EFLAGS: 00010207 [ 41.912772][ T12] bus_probe_device+0x1e6/0x290 [ 41.917854][ T2501] RAX: dffffc0000000000 RBX: ffff8881d28e4800 RCX: ffffffff820d879e [ 41.923271][ T12] device_add+0xae6/0x1700 [ 41.923284][ T12] usb_new_device.cold+0x8c1/0x1016 [ 41.928019][ T2501] RDX: 000000000000000c RSI: ffffffff8167705d RDI: 0000000000000064 [ 41.932839][ T12] hub_event+0x1adc/0x35a0 [ 41.952509][ T2501] RBP: 0000000000000000 R08: ffff8881d18a1800 R09: 0000000000000000 [ 41.957430][ T12] process_one_work+0x90a/0x1580 [ 41.957444][ T12] worker_thread+0x96/0xe20 [ 41.963489][ T2501] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 41.968320][ T12] kthread+0x30e/0x420 [ 41.968328][ T12] ret_from_fork+0x3a/0x50 [ 41.968335][ T12] [ 41.976299][ T2501] R13: ffff8881d247aa80 R14: ffff8881d3f88000 R15: ffff8881d3f8c470 [ 41.980678][ T12] Freed by task 12: [ 41.985861][ T2501] FS: 0000000000000000(0000) GS:ffff8881db300000(0000) knlGS:0000000000000000 [ 41.993818][ T12] save_stack+0x1b/0x80 [ 41.998209][ T2501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.006152][ T12] __kasan_slab_free+0x130/0x180 [ 42.006164][ T12] kfree+0xd7/0x290 [ 42.011080][ T2501] CR2: 00007fffbfa1cf30 CR3: 00000001d3440000 CR4: 00000000001406e0 [ 42.015561][ T12] hso_probe+0x13c6/0x1a50 [ 42.015574][ T12] usb_probe_interface+0x30b/0x7a0 [ 42.023524][ T2501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.027559][ T12] really_probe+0x287/0x660 [ 42.027573][ T12] driver_probe_device+0x104/0x210 [ 42.031954][ T2501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.034258][ T12] __device_attach_driver+0x1c4/0x230 [ 42.042207][ T2501] Kernel panic - not syncing: Fatal exception [ 42.045984][ T12] bus_for_each_drv+0x15e/0x1e0 [ 42.136187][ T12] __device_attach+0x217/0x360 [ 42.141111][ T12] bus_probe_device+0x1e6/0x290 [ 42.146048][ T12] device_add+0xae6/0x1700 [ 42.150527][ T12] usb_set_configuration+0xdf6/0x1670 [ 42.155884][ T12] generic_probe+0x9d/0xd5 [ 42.160275][ T12] usb_probe_device+0xa2/0x100 [ 42.165024][ T12] really_probe+0x287/0x660 [ 42.169863][ T12] driver_probe_device+0x104/0x210 [ 42.174953][ T12] __device_attach_driver+0x1c4/0x230 [ 42.180771][ T12] bus_for_each_drv+0x15e/0x1e0 [ 42.185948][ T12] __device_attach+0x217/0x360 [ 42.191042][ T12] bus_probe_device+0x1e6/0x290 [ 42.195868][ T12] device_add+0xae6/0x1700 [ 42.200350][ T12] usb_new_device.cold+0x8c1/0x1016 [ 42.205611][ T12] hub_event+0x1adc/0x35a0 [ 42.210003][ T12] process_one_work+0x90a/0x1580 [ 42.214913][ T12] worker_thread+0x96/0xe20 [ 42.219391][ T12] kthread+0x30e/0x420 [ 42.223431][ T12] ret_from_fork+0x3a/0x50 [ 42.227814][ T12] [ 42.230118][ T12] The buggy address belongs to the object at ffff8881d112d900 [ 42.230118][ T12] which belongs to the cache kmalloc-512 of size 512 [ 42.244142][ T12] The buggy address is located 152 bytes inside of [ 42.244142][ T12] 512-byte region [ffff8881d112d900, ffff8881d112db00) [ 42.257381][ T12] The buggy address belongs to the page: [ 42.262984][ T12] page:ffffea0007444b00 refcount:1 mapcount:0 mapping:ffff8881dac02c00 index:0x0 compound_mapcount: 0 [ 42.273970][ T12] flags: 0x200000000010200(slab|head) [ 42.279316][ T12] raw: 0200000000010200 ffffea000744ea80 0000000400000004 ffff8881dac02c00 [ 42.287878][ T12] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 42.296429][ T12] page dumped because: kasan: bad access detected [ 42.302808][ T12] [ 42.305107][ T12] Memory state around the buggy address: [ 42.310713][ T12] ffff8881d112d880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.318746][ T12] ffff8881d112d900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.326886][ T12] >ffff8881d112d980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.334921][ T12] ^ [ 42.339744][ T12] ffff8881d112da00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.347779][ T12] ffff8881d112da80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.355808][ T12] ================================================================== [ 42.364234][ T2501] Kernel Offset: disabled [ 42.368548][ T2501] Rebooting in 86400 seconds..