Warning: Permanently added '10.128.0.85' (ECDSA) to the list of known hosts. executing program [ 27.189548][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.429456][ T12] usb 1-1: Using ep0 maxpacket: 32 [ 27.589532][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.669559][ T12] usb 1-1: config 4 has an invalid interface number: 151 but max is 3 [ 27.677852][ T12] usb 1-1: config 4 has an invalid interface number: 60 but max is 3 [ 27.686013][ T12] usb 1-1: config 4 has an invalid interface number: 106 but max is 3 [ 27.694321][ T12] usb 1-1: config 4 has an invalid interface number: 199 but max is 3 [ 27.702511][ T12] usb 1-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 27.712625][ T12] usb 1-1: config 4 has no interface number 0 [ 27.718679][ T12] usb 1-1: config 4 has no interface number 1 [ 27.724792][ T12] usb 1-1: config 4 has no interface number 2 [ 27.730888][ T12] usb 1-1: config 4 has no interface number 3 [ 27.736979][ T12] usb 1-1: config 4 interface 151 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 27.747612][ T12] usb 1-1: config 4 interface 60 altsetting 3 endpoint 0xE has invalid maxpacket 871, setting to 64 [ 27.758427][ T12] usb 1-1: config 4 interface 106 altsetting 3 bulk endpoint 0x2 has invalid maxpacket 491 [ 27.768459][ T12] usb 1-1: config 4 interface 199 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 27.781692][ T12] usb 1-1: config 4 interface 60 has no altsetting 0 [ 27.788426][ T12] usb 1-1: config 4 interface 106 has no altsetting 0 [ 27.795234][ T12] usb 1-1: config 4 interface 199 has no altsetting 0 [ 28.039562][ T12] usb 1-1: string descriptor 0 read error: -22 [ 28.045882][ T12] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=b8.22 [ 28.054978][ T12] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.079765][ T1729] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 28.101643][ T12] dw2102: su3000_identify_state [ 28.106624][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 28.113245][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 28.119718][ T12] dvb-usb: bulk message failed: -22 (2/256) [ 28.127119][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 28.149861][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 28.157084][ T12] usb 1-1: media controller created [ 28.162817][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.169683][ T12] dw2102: i2c transfer failed. [ 28.174574][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.181188][ T12] dw2102: i2c transfer failed. [ 28.185954][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.192564][ T12] dw2102: i2c transfer failed. [ 28.197331][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.203941][ T12] dw2102: i2c transfer failed. [ 28.208715][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.215355][ T12] dw2102: i2c transfer failed. [ 28.220144][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.226708][ T12] dw2102: i2c transfer failed. [ 28.231518][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 28.241596][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 28.256552][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 28.262397][ T12] dw2102: command 0x51 transfer failed. [ 28.269481][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.276163][ T12] dw2102: i2c transfer failed. executing program [ 28.281109][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.287694][ T12] dw2102: i2c transfer failed. [ 28.292505][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.299195][ T12] dw2102: i2c transfer failed. [ 28.304049][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.310860][ T12] dw2102: i2c transfer failed. [ 28.315685][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.322312][ T12] dw2102: i2c transfer failed. [ 28.327104][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.333714][ T12] dw2102: i2c transfer failed. [ 28.359510][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.366123][ T12] dw2102: i2c transfer failed. [ 28.370957][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.377538][ T12] dw2102: i2c transfer failed. [ 28.382533][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.389120][ T12] dw2102: i2c transfer failed. [ 28.393961][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.400575][ T12] dw2102: i2c transfer failed. [ 28.405349][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.411954][ T12] dw2102: i2c transfer failed. [ 28.416729][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.423341][ T12] dw2102: i2c transfer failed. [ 28.428126][ T12] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 28.436748][ T12] dw2102: Attached RS2000/TS2020! [ 28.442141][ T12] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 28.450570][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 28.519757][ T12] Registered IR keymap rc-su3000 [ 28.525307][ T12] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 28.534695][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 28.545083][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 28.552100][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 28.558172][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 28.567967][ T12] dw2102: su3000_identify_state [ 28.572879][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 28.579462][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 28.585582][ T12] dvb-usb: bulk message failed: -22 (2/256) [ 28.592309][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 28.619725][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 28.626725][ T12] usb 1-1: media controller created [ 28.632059][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.638698][ T12] dw2102: i2c transfer failed. [ 28.643512][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.650118][ T12] dw2102: i2c transfer failed. [ 28.654875][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.661485][ T12] dw2102: i2c transfer failed. [ 28.666254][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.672862][ T12] dw2102: i2c transfer failed. [ 28.677800][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.684471][ T12] dw2102: i2c transfer failed. [ 28.689244][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 28.695857][ T12] dw2102: i2c transfer failed. [ 28.700640][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 28.710271][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 28.719107][ T102] dvb-usb: bulk message failed: -22 (1/-2128214268) [ 28.725841][ T102] dw2102: i2c transfer failed. [ 28.736801][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 28.742640][ T12] dw2102: command 0x51 transfer failed. [ 28.749217][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.755895][ T12] dw2102: i2c transfer failed. [ 28.760730][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.767315][ T12] dw2102: i2c transfer failed. [ 28.772124][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.778717][ T12] dw2102: i2c transfer failed. [ 28.783555][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.790183][ T12] dw2102: i2c transfer failed. [ 28.794951][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.801555][ T12] dw2102: i2c transfer failed. [ 28.806322][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.812930][ T12] dw2102: i2c transfer failed. [ 28.839498][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.846123][ T12] dw2102: i2c transfer failed. [ 28.850951][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.857540][ T12] dw2102: i2c transfer failed. [ 28.862482][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.869244][ T12] dw2102: i2c transfer failed. [ 28.874097][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.880727][ T12] dw2102: i2c transfer failed. [ 28.885502][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.892168][ T12] dw2102: i2c transfer failed. [ 28.896944][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 28.903623][ T12] dw2102: i2c transfer failed. [ 28.908402][ T12] ts2020 1-0060: Montage Technology TS2020 successfully identified [ 28.916606][ T12] dw2102: Attached RS2000/TS2020! [ 28.921692][ T12] usb 1-1: DVB: registering adapter 1 frontend 0 (M88RS2000 DVB-S)... [ 28.929987][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 28.939257][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 28.945923][ T102] dw2102: i2c transfer failed. [ 29.019567][ T12] Registered IR keymap rc-su3000 [ 29.025153][ T12] rc rc1: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1 [ 29.034624][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc1/input6 [ 29.044843][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 29.051882][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 29.057962][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 29.067999][ T12] dw2102: su3000_identify_state [ 29.072937][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 29.079529][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 29.085629][ T12] dvb-usb: bulk message failed: -22 (2/256) [ 29.092265][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 29.109646][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.116270][ T102] dw2102: i2c transfer failed. [ 29.121399][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 29.128360][ T12] usb 1-1: media controller created [ 29.133646][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.140311][ T12] dw2102: i2c transfer failed. [ 29.145123][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.151738][ T12] dw2102: i2c transfer failed. [ 29.156523][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.163169][ T12] dw2102: i2c transfer failed. [ 29.167951][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.174570][ T12] dw2102: i2c transfer failed. [ 29.179346][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.185982][ T12] dw2102: i2c transfer failed. [ 29.190812][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.197389][ T12] dw2102: i2c transfer failed. [ 29.202183][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 29.211603][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 29.220305][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.226906][ T102] dw2102: i2c transfer failed. [ 29.237448][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 29.243294][ T12] dw2102: command 0x51 transfer failed. [ 29.249818][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.256437][ T12] dw2102: i2c transfer failed. [ 29.261479][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.268149][ T12] dw2102: i2c transfer failed. [ 29.272989][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.279647][ T12] dw2102: i2c transfer failed. [ 29.284441][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.291056][ T12] dw2102: i2c transfer failed. [ 29.295948][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.302630][ T12] dw2102: i2c transfer failed. [ 29.307457][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.314089][ T12] dw2102: i2c transfer failed. [ 29.319244][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.325882][ T102] dw2102: i2c transfer failed. [ 29.359473][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.366088][ T12] dw2102: i2c transfer failed. [ 29.370911][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.377560][ T12] dw2102: i2c transfer failed. [ 29.382424][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.389011][ T12] dw2102: i2c transfer failed. [ 29.393842][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.400504][ T12] dw2102: i2c transfer failed. [ 29.405283][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.411903][ T12] dw2102: i2c transfer failed. [ 29.416673][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.423287][ T12] dw2102: i2c transfer failed. [ 29.428066][ T12] ts2020 2-0060: Montage Technology TS2020 successfully identified [ 29.436271][ T12] dw2102: Attached RS2000/TS2020! [ 29.441377][ T12] usb 1-1: DVB: registering adapter 2 frontend 0 (M88RS2000 DVB-S)... [ 29.449674][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 29.458886][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.465535][ T102] dw2102: i2c transfer failed. [ 29.489437][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.496082][ T102] dw2102: i2c transfer failed. [ 29.519615][ T12] Registered IR keymap rc-su3000 [ 29.525004][ T12] rc rc2: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc2 [ 29.534359][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc2/input7 [ 29.544450][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 29.551490][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 29.557558][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 29.567783][ T12] dw2102: su3000_identify_state [ 29.572710][ T12] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 29.579233][ T12] dw2102: su3000_power_ctrl: 1, initialized 0 [ 29.585344][ T12] dvb-usb: bulk message failed: -22 (2/256) [ 29.592117][ T12] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 29.629478][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.636141][ T102] dw2102: i2c transfer failed. [ 29.641353][ T12] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 29.648338][ T12] usb 1-1: media controller created [ 29.653616][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.660229][ T12] dw2102: i2c transfer failed. [ 29.664992][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.671605][ T12] dw2102: i2c transfer failed. [ 29.676375][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.682989][ T12] dw2102: i2c transfer failed. [ 29.687755][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.694389][ T12] dw2102: i2c transfer failed. [ 29.699156][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.705778][ T12] dw2102: i2c transfer failed. [ 29.710621][ T12] dvb-usb: bulk message failed: -22 (6/-2035936744) [ 29.717192][ T12] dw2102: i2c transfer failed. [ 29.721978][ T12] dvb-usb: MAC address: 02:02:02:02:02:02 [ 29.731451][ T12] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 29.740411][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.747005][ T102] dw2102: i2c transfer failed. [ 29.756613][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.763273][ T102] dw2102: i2c transfer failed. [ 29.769012][ T12] dvb-usb: bulk message failed: -22 (1/0) [ 29.774845][ T12] dw2102: command 0x51 transfer failed. [ 29.781283][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.787893][ T12] dw2102: i2c transfer failed. [ 29.792756][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.799421][ T12] dw2102: i2c transfer failed. [ 29.804200][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.810816][ T12] dw2102: i2c transfer failed. [ 29.815596][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.822227][ T12] dw2102: i2c transfer failed. [ 29.827011][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.833645][ T12] dw2102: i2c transfer failed. [ 29.838414][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.845028][ T12] dw2102: i2c transfer failed. [ 29.849884][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.856463][ T102] dw2102: i2c transfer failed. [ 29.879488][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.886149][ T12] dw2102: i2c transfer failed. [ 29.890980][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.897558][ T12] dw2102: i2c transfer failed. [ 29.902370][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.908953][ T12] dw2102: i2c transfer failed. [ 29.913838][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.920582][ T12] dw2102: i2c transfer failed. [ 29.925362][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.931971][ T12] dw2102: i2c transfer failed. [ 29.936805][ T12] dvb-usb: bulk message failed: -22 (5/-2035936744) [ 29.943447][ T12] dw2102: i2c transfer failed. [ 29.948232][ T12] ts2020 3-0060: Montage Technology TS2020 successfully identified [ 29.956399][ T12] dw2102: Attached RS2000/TS2020! [ 29.961486][ T12] usb 1-1: DVB: registering adapter 3 frontend 0 (M88RS2000 DVB-S)... [ 29.969765][ T12] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 29.978972][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 29.985748][ T102] dw2102: i2c transfer failed. [ 30.007645][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 30.014375][ T102] dw2102: i2c transfer failed. [ 30.019554][ T102] dvb-usb: bulk message failed: -22 (1/-2128218050) [ 30.026149][ T102] dw2102: i2c transfer failed. [ 30.069615][ T12] Registered IR keymap rc-su3000 [ 30.075011][ T12] rc rc3: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc3 [ 30.084325][ T12] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc3/input8 [ 30.094374][ T12] dvb-usb: schedule remote query interval to 150 msecs. [ 30.101430][ T12] dw2102: su3000_power_ctrl: 0, initialized 1 [ 30.107504][ T12] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 30.116674][ T12] usb 1-1: USB disconnect, device number 2 [ 30.123203][ T12] ================================================================== [ 30.131354][ T12] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0 [ 30.138967][ T12] Read of size 8 at addr ffff8881cf01c3e0 by task kworker/0:1/12 [ 30.146658][ T12] [ 30.148976][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.5.0-rc1-syzkaller #0 [ 30.157103][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.167161][ T12] Workqueue: usb_hub_wq hub_event [ 30.172171][ T12] Call Trace: [ 30.175463][ T12] dump_stack+0xef/0x16e [ 30.179700][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.184982][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.190250][ T12] print_address_description.constprop.0+0x16/0x200 [ 30.196822][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.202088][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.207429][ T12] __kasan_report.cold+0x37/0x7f [ 30.212377][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.217651][ T12] kasan_report+0xe/0x20 [ 30.221888][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 30.226981][ T12] ? dvb_usb_exit+0x290/0x290 [ 30.231639][ T12] ? mark_held_locks+0x9f/0xe0 [ 30.236388][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.242179][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 30.247446][ T12] ? usb_disable_interface+0x7b/0x1a0 [ 30.252800][ T12] ? __pm_runtime_resume+0x111/0x180 [ 30.258076][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 30.263431][ T12] ? usb_autoresume_device+0x60/0x60 [ 30.268856][ T12] device_release_driver_internal+0x42f/0x500 [ 30.274922][ T12] bus_remove_device+0x2dc/0x4a0 [ 30.279852][ T12] device_del+0x481/0xd30 [ 30.284179][ T12] ? device_create_with_groups+0x120/0x120 [ 30.289968][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 30.295252][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 30.300531][ T12] usb_disable_device+0x211/0x690 [ 30.305551][ T12] usb_disconnect+0x284/0x8d0 [ 30.310234][ T12] hub_event+0x1753/0x3860 [ 30.314645][ T12] ? hub_port_debounce+0x260/0x260 [ 30.319757][ T12] ? find_held_lock+0x2d/0x110 [ 30.324518][ T12] ? mark_held_locks+0xe0/0xe0 [ 30.329268][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 30.334985][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 30.340269][ T12] process_one_work+0x92b/0x1530 [ 30.345195][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 30.350554][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 30.355562][ T12] worker_thread+0x7ab/0xe20 [ 30.360139][ T12] ? process_one_work+0x1530/0x1530 [ 30.365319][ T12] kthread+0x318/0x420 [ 30.369388][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 30.374761][ T12] ret_from_fork+0x24/0x30 [ 30.379166][ T12] [ 30.381483][ T12] Allocated by task 12: [ 30.385628][ T12] save_stack+0x1b/0x80 [ 30.389784][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 30.395417][ T12] __kmalloc_track_caller+0xf0/0x310 [ 30.400692][ T12] kmemdup+0x23/0x50 [ 30.404682][ T12] dw2102_probe+0x627/0xc40 [ 30.409168][ T12] usb_probe_interface+0x305/0x7a0 [ 30.414263][ T12] really_probe+0x281/0x6d0 [ 30.418759][ T12] driver_probe_device+0x104/0x210 [ 30.423851][ T12] __device_attach_driver+0x1c2/0x220 [ 30.429203][ T12] bus_for_each_drv+0x162/0x1e0 [ 30.434032][ T12] __device_attach+0x217/0x360 [ 30.438827][ T12] bus_probe_device+0x1e4/0x290 [ 30.443657][ T12] device_add+0x1480/0x1c20 [ 30.448142][ T12] usb_set_configuration+0xe67/0x1740 [ 30.453493][ T12] generic_probe+0x9d/0xd5 [ 30.457892][ T12] usb_probe_device+0x99/0x100 [ 30.462635][ T12] really_probe+0x281/0x6d0 [ 30.467235][ T12] driver_probe_device+0x104/0x210 [ 30.472434][ T12] __device_attach_driver+0x1c2/0x220 [ 30.477786][ T12] bus_for_each_drv+0x162/0x1e0 [ 30.482616][ T12] __device_attach+0x217/0x360 [ 30.487362][ T12] bus_probe_device+0x1e4/0x290 [ 30.492193][ T12] device_add+0x1480/0x1c20 [ 30.496685][ T12] usb_new_device.cold+0x6a4/0xe79 [ 30.501774][ T12] hub_event+0x1e59/0x3860 [ 30.506188][ T12] process_one_work+0x92b/0x1530 [ 30.511119][ T12] worker_thread+0x96/0xe20 [ 30.515600][ T12] kthread+0x318/0x420 [ 30.519648][ T12] ret_from_fork+0x24/0x30 [ 30.524038][ T12] [ 30.526355][ T12] Freed by task 12: [ 30.530149][ T12] save_stack+0x1b/0x80 [ 30.534284][ T12] __kasan_slab_free+0x129/0x170 [ 30.539198][ T12] kfree+0xda/0x310 [ 30.542989][ T12] dw2102_probe+0x871/0xc40 [ 30.547474][ T12] usb_probe_interface+0x305/0x7a0 [ 30.552588][ T12] really_probe+0x281/0x6d0 [ 30.557090][ T12] driver_probe_device+0x104/0x210 [ 30.562182][ T12] __device_attach_driver+0x1c2/0x220 [ 30.567531][ T12] bus_for_each_drv+0x162/0x1e0 [ 30.572375][ T12] __device_attach+0x217/0x360 [ 30.577119][ T12] bus_probe_device+0x1e4/0x290 [ 30.581964][ T12] device_add+0x1480/0x1c20 [ 30.586464][ T12] usb_set_configuration+0xe67/0x1740 [ 30.591817][ T12] generic_probe+0x9d/0xd5 [ 30.596212][ T12] usb_probe_device+0x99/0x100 [ 30.600965][ T12] really_probe+0x281/0x6d0 [ 30.605450][ T12] driver_probe_device+0x104/0x210 [ 30.610547][ T12] __device_attach_driver+0x1c2/0x220 [ 30.615898][ T12] bus_for_each_drv+0x162/0x1e0 [ 30.620726][ T12] __device_attach+0x217/0x360 [ 30.625469][ T12] bus_probe_device+0x1e4/0x290 [ 30.630299][ T12] device_add+0x1480/0x1c20 [ 30.634782][ T12] usb_new_device.cold+0x6a4/0xe79 [ 30.639867][ T12] hub_event+0x1e59/0x3860 [ 30.644273][ T12] process_one_work+0x92b/0x1530 [ 30.649208][ T12] worker_thread+0x96/0xe20 [ 30.653691][ T12] kthread+0x318/0x420 [ 30.657753][ T12] ret_from_fork+0x24/0x30 [ 30.662160][ T12] [ 30.664470][ T12] The buggy address belongs to the object at ffff8881cf01c000 [ 30.664470][ T12] which belongs to the cache kmalloc-4k of size 4096 [ 30.678502][ T12] The buggy address is located 992 bytes inside of [ 30.678502][ T12] 4096-byte region [ffff8881cf01c000, ffff8881cf01d000) [ 30.691835][ T12] The buggy address belongs to the page: [ 30.697452][ T12] page:ffffea00073c0600 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 30.708366][ T12] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 30.716935][ T12] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 30.725495][ T12] page dumped because: kasan: bad access detected [ 30.731882][ T12] [ 30.734189][ T12] Memory state around the buggy address: [ 30.739799][ T12] ffff8881cf01c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.747841][ T12] ffff8881cf01c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.755883][ T12] >ffff8881cf01c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.763919][ T12] ^ [ 30.771094][ T12] ffff8881cf01c400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.779135][ T12] ffff8881cf01c480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 30.787171][ T12] ================================================================== [ 30.795207][ T12] Disabling lock debugging due to kernel taint [ 30.801403][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 30.807998][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.5.0-rc1-syzkaller #0 [ 30.817513][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 30.827567][ T12] Workqueue: usb_hub_wq hub_event [ 30.832564][ T12] Call Trace: [ 30.835835][ T12] dump_stack+0xef/0x16e [ 30.840053][ T12] panic+0x2aa/0x6e1 [ 30.843926][ T12] ? add_taint.cold+0x16/0x16 [ 30.848578][ T12] ? retint_kernel+0x10/0x10 [ 30.853150][ T12] ? trace_hardirqs_on+0x55/0x1e0 [ 30.858152][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.863417][ T12] end_report+0x43/0x49 [ 30.867565][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.872826][ T12] __kasan_report.cold+0x55/0x7f [ 30.877743][ T12] ? dvb_usb_device_exit+0x19a/0x1a0 [ 30.883004][ T12] kasan_report+0xe/0x20 [ 30.887225][ T12] dvb_usb_device_exit+0x19a/0x1a0 [ 30.892335][ T12] ? dvb_usb_exit+0x290/0x290 [ 30.896992][ T12] ? mark_held_locks+0x9f/0xe0 [ 30.901733][ T12] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 30.907519][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 30.912802][ T12] ? usb_disable_interface+0x7b/0x1a0 [ 30.918153][ T12] ? __pm_runtime_resume+0x111/0x180 [ 30.923419][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 30.928597][ T12] ? usb_autoresume_device+0x60/0x60 [ 30.933864][ T12] device_release_driver_internal+0x42f/0x500 [ 30.939915][ T12] bus_remove_device+0x2dc/0x4a0 [ 30.944838][ T12] device_del+0x481/0xd30 [ 30.949171][ T12] ? device_create_with_groups+0x120/0x120 [ 30.954986][ T12] ? lockdep_hardirqs_on+0x382/0x580 [ 30.960250][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 30.965527][ T12] usb_disable_device+0x211/0x690 [ 30.970541][ T12] usb_disconnect+0x284/0x8d0 [ 30.975195][ T12] hub_event+0x1753/0x3860 [ 30.979589][ T12] ? hub_port_debounce+0x260/0x260 [ 30.984703][ T12] ? find_held_lock+0x2d/0x110 [ 30.989444][ T12] ? mark_held_locks+0xe0/0xe0 [ 30.994186][ T12] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 30.999714][ T12] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 31.004995][ T12] process_one_work+0x92b/0x1530 [ 31.009925][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 31.015393][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 31.020405][ T12] worker_thread+0x7ab/0xe20 [ 31.024980][ T12] ? process_one_work+0x1530/0x1530 [ 31.030157][ T12] kthread+0x318/0x420 [ 31.034230][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 31.039595][ T12] ret_from_fork+0x24/0x30 [ 31.044557][ T12] Kernel Offset: disabled [ 31.048935][ T12] Rebooting in 86400 seconds..