Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts. executing program [ 46.023342][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 46.263080][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 46.423149][ T83] usb 1-1: unable to get BOS descriptor or descriptor too short [ 46.513184][ T83] usb 1-1: config 128 has an invalid interface number: 143 but max is 0 [ 46.522170][ T83] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping [ 46.532306][ T83] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping [ 46.542906][ T83] usb 1-1: config 128 has no interface number 0 [ 46.549248][ T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0x3 has invalid maxpacket 961, setting to 64 [ 46.560405][ T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0xC has invalid maxpacket 453, setting to 64 [ 46.571777][ T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0x7 has invalid maxpacket 563, setting to 64 [ 46.583587][ T83] usb 1-1: config 128 interface 143 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 119 [ 46.594356][ T83] usb 1-1: config 128 interface 143 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 46.623071][ T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0xF has invalid maxpacket 112, setting to 64 [ 46.634502][ T83] usb 1-1: config 128 interface 143 has no altsetting 0 [ 46.873155][ T83] usb 1-1: string descriptor 0 read error: -22 [ 46.880025][ T83] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice= f.d3 [ 46.889251][ T83] usb 1-1: New USB device strings: Mfr=87, Product=10, SerialNumber=4 [ 46.935235][ T83] dw2102: su3000_identify_state [ 46.940235][ T83] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 46.946933][ T83] dw2102: su3000_power_ctrl: 1, initialized 0 [ 46.953242][ T83] dvb-usb: bulk message failed: -22 (2/-652482496) [ 46.961511][ T83] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 46.983470][ T83] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 46.991167][ T83] usb 1-1: media controller created [ 46.996895][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.003763][ T83] dw2102: i2c transfer failed. [ 47.008610][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.015520][ T83] dw2102: i2c transfer failed. [ 47.021633][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.029694][ T83] dw2102: i2c transfer failed. [ 47.036475][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.043280][ T83] dw2102: i2c transfer failed. [ 47.049486][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.057571][ T83] dw2102: i2c transfer failed. [ 47.074573][ T83] dvb-usb: bulk message failed: -22 (6/-2035973200) [ 47.094941][ T83] dw2102: i2c transfer failed. [ 47.099960][ T83] dvb-usb: MAC address: 02:02:02:02:02:02 executing program [ 47.111769][ T83] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 47.160477][ T83] dvb-usb: bulk message failed: -22 (1/0) [ 47.166463][ T83] dw2102: command 0x51 transfer failed. [ 47.174102][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.180851][ T83] dw2102: i2c transfer failed. [ 47.186025][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.193560][ T83] dw2102: i2c transfer failed. [ 47.198655][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.206218][ T83] dw2102: i2c transfer failed. [ 47.211320][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.218018][ T83] dw2102: i2c transfer failed. [ 47.222913][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.229759][ T83] dw2102: i2c transfer failed. [ 47.234696][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.241284][ T83] dw2102: i2c transfer failed. [ 47.296299][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.303244][ T83] dw2102: i2c transfer failed. [ 47.308148][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.314968][ T83] dw2102: i2c transfer failed. [ 47.319946][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.327108][ T83] dw2102: i2c transfer failed. [ 47.332134][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.338804][ T83] dw2102: i2c transfer failed. [ 47.343860][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.350621][ T83] dw2102: i2c transfer failed. [ 47.355620][ T83] dvb-usb: bulk message failed: -22 (5/-2035973200) [ 47.362627][ T83] dw2102: i2c transfer failed. [ 47.367596][ T83] ts2020 0-0060: Montage Technology TS2020 successfully identified [ 47.376264][ T83] dw2102: Attached RS2000/TS2020! [ 47.381504][ T83] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)... [ 47.390084][ T83] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered. [ 47.453386][ T83] Registered IR keymap rc-su3000 [ 47.459433][ T83] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 47.468969][ T83] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5 [ 47.479893][ T83] dvb-usb: schedule remote query interval to 150 msecs. [ 47.486945][ T83] dw2102: su3000_power_ctrl: 0, initialized 1 [ 47.493055][ T83] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 47.504657][ T83] usb 1-1: USB disconnect, device number 2 [ 47.512366][ T83] ================================================================== [ 47.520775][ T83] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0 [ 47.528621][ T83] Read of size 8 at addr ffff8881d28bd8e0 by task kworker/1:2/83 [ 47.536425][ T83] [ 47.538751][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.3.0-rc5+ #28 [ 47.546400][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 47.556692][ T83] Workqueue: usb_hub_wq hub_event [ 47.561712][ T83] Call Trace: [ 47.565005][ T83] dump_stack+0xca/0x13e [ 47.569377][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 47.574667][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 47.580160][ T83] print_address_description+0x6a/0x32c [ 47.585723][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 47.591005][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 47.596497][ T83] __kasan_report.cold+0x1a/0x33 [ 47.601557][ T83] ? _raw_spin_trylock+0x50/0x50 [ 47.606810][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 47.612194][ T83] kasan_report+0xe/0x12 [ 47.616534][ T83] dvb_usb_device_exit+0x19a/0x1a0 [ 47.621935][ T83] ? dvb_usb_exit+0x290/0x290 [ 47.626635][ T83] ? usb_disable_endpoint+0x1ba/0x1f0 [ 47.632173][ T83] ? usb_disable_interface+0x140/0x1a0 [ 47.637898][ T83] usb_unbind_interface+0x1bd/0x8a0 [ 47.643621][ T83] ? usb_autoresume_device+0x60/0x60 [ 47.649152][ T83] device_release_driver_internal+0x42f/0x500 [ 47.655661][ T83] bus_remove_device+0x2dc/0x4a0 [ 47.660856][ T83] device_del+0x420/0xb10 [ 47.665194][ T83] ? __device_links_no_driver+0x240/0x240 [ 47.671444][ T83] ? usb_remove_ep_devs+0x3e/0x80 [ 47.676807][ T83] ? remove_intf_ep_devs+0x13f/0x1d0 [ 47.682253][ T83] usb_disable_device+0x211/0x690 [ 47.687380][ T83] usb_disconnect+0x284/0x8d0 [ 47.692240][ T83] hub_event+0x1454/0x3640 [ 47.696800][ T83] ? find_held_lock+0x2d/0x110 [ 47.701575][ T83] ? mark_held_locks+0xe0/0xe0 [ 47.706562][ T83] ? hub_port_debounce+0x260/0x260 [ 47.711773][ T83] process_one_work+0x92b/0x1530 [ 47.716954][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 47.722979][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 47.728532][ T83] worker_thread+0x7ab/0xe20 [ 47.733651][ T83] ? process_one_work+0x1530/0x1530 [ 47.739850][ T83] kthread+0x318/0x420 [ 47.744027][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 47.749422][ T83] ret_from_fork+0x24/0x30 [ 47.753961][ T83] [ 47.756279][ T83] Allocated by task 83: [ 47.760562][ T83] save_stack+0x1b/0x80 [ 47.764776][ T83] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 47.770635][ T83] __kmalloc_track_caller+0xfd/0x330 [ 47.776002][ T83] kmemdup+0x23/0x50 [ 47.779981][ T83] dw2102_probe+0x627/0xc40 [ 47.784497][ T83] usb_probe_interface+0x305/0x7a0 [ 47.789922][ T83] really_probe+0x281/0x6d0 [ 47.794498][ T83] driver_probe_device+0x101/0x1b0 [ 47.799617][ T83] __device_attach_driver+0x1c2/0x220 [ 47.804993][ T83] bus_for_each_drv+0x162/0x1e0 [ 47.810337][ T83] __device_attach+0x217/0x360 [ 47.815109][ T83] bus_probe_device+0x1e4/0x290 [ 47.820000][ T83] device_add+0xae6/0x16f0 [ 47.824645][ T83] usb_set_configuration+0xdf6/0x1670 [ 47.830172][ T83] generic_probe+0x9d/0xd5 [ 47.834772][ T83] usb_probe_device+0x99/0x100 [ 47.840700][ T83] really_probe+0x281/0x6d0 [ 47.845392][ T83] driver_probe_device+0x101/0x1b0 [ 47.850594][ T83] __device_attach_driver+0x1c2/0x220 [ 47.856163][ T83] bus_for_each_drv+0x162/0x1e0 [ 47.861005][ T83] __device_attach+0x217/0x360 [ 47.865855][ T83] bus_probe_device+0x1e4/0x290 [ 47.870804][ T83] device_add+0xae6/0x16f0 [ 47.875221][ T83] usb_new_device.cold+0x6a4/0xe79 [ 47.880547][ T83] hub_event+0x1b5c/0x3640 [ 47.884981][ T83] process_one_work+0x92b/0x1530 [ 47.890177][ T83] worker_thread+0x96/0xe20 [ 47.894677][ T83] kthread+0x318/0x420 [ 47.898745][ T83] ret_from_fork+0x24/0x30 [ 47.903151][ T83] [ 47.905676][ T83] Freed by task 83: [ 47.909767][ T83] save_stack+0x1b/0x80 [ 47.914290][ T83] __kasan_slab_free+0x130/0x180 [ 47.919306][ T83] kfree+0xe4/0x2f0 [ 47.923181][ T83] dw2102_probe+0x871/0xc40 [ 47.927705][ T83] usb_probe_interface+0x305/0x7a0 [ 47.932819][ T83] really_probe+0x281/0x6d0 [ 47.937591][ T83] driver_probe_device+0x101/0x1b0 [ 47.943037][ T83] __device_attach_driver+0x1c2/0x220 [ 47.948526][ T83] bus_for_each_drv+0x162/0x1e0 [ 47.953383][ T83] __device_attach+0x217/0x360 [ 47.958249][ T83] bus_probe_device+0x1e4/0x290 [ 47.963106][ T83] device_add+0xae6/0x16f0 [ 47.967714][ T83] usb_set_configuration+0xdf6/0x1670 [ 47.973080][ T83] generic_probe+0x9d/0xd5 [ 47.977759][ T83] usb_probe_device+0x99/0x100 [ 47.982656][ T83] really_probe+0x281/0x6d0 [ 47.987210][ T83] driver_probe_device+0x101/0x1b0 [ 47.992321][ T83] __device_attach_driver+0x1c2/0x220 [ 47.997683][ T83] bus_for_each_drv+0x162/0x1e0 [ 48.002659][ T83] __device_attach+0x217/0x360 [ 48.007482][ T83] bus_probe_device+0x1e4/0x290 [ 48.012464][ T83] device_add+0xae6/0x16f0 [ 48.016933][ T83] usb_new_device.cold+0x6a4/0xe79 [ 48.022228][ T83] hub_event+0x1b5c/0x3640 [ 48.026789][ T83] process_one_work+0x92b/0x1530 [ 48.031871][ T83] worker_thread+0x96/0xe20 [ 48.036443][ T83] kthread+0x318/0x420 [ 48.040514][ T83] ret_from_fork+0x24/0x30 [ 48.044940][ T83] [ 48.047475][ T83] The buggy address belongs to the object at ffff8881d28bd500 [ 48.047475][ T83] which belongs to the cache kmalloc-4k of size 4096 [ 48.061894][ T83] The buggy address is located 992 bytes inside of [ 48.061894][ T83] 4096-byte region [ffff8881d28bd500, ffff8881d28be500) [ 48.075369][ T83] The buggy address belongs to the page: [ 48.081011][ T83] page:ffffea00074a2e00 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 48.091948][ T83] flags: 0x200000000010200(slab|head) [ 48.097380][ T83] raw: 0200000000010200 ffffea00074a2800 0000000200000002 ffff8881da00c280 [ 48.106135][ T83] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 48.115223][ T83] page dumped because: kasan: bad access detected [ 48.122897][ T83] [ 48.125231][ T83] Memory state around the buggy address: [ 48.130862][ T83] ffff8881d28bd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.139099][ T83] ffff8881d28bd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.147478][ T83] >ffff8881d28bd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.155593][ T83] ^ [ 48.162981][ T83] ffff8881d28bd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.171194][ T83] ffff8881d28bd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 48.179338][ T83] ================================================================== [ 48.187481][ T83] Disabling lock debugging due to kernel taint [ 48.193796][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 48.200483][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Tainted: G B 5.3.0-rc5+ #28 [ 48.209307][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 48.219837][ T83] Workqueue: usb_hub_wq hub_event [ 48.224912][ T83] Call Trace: [ 48.228275][ T83] dump_stack+0xca/0x13e [ 48.232524][ T83] panic+0x2a3/0x6da [ 48.236426][ T83] ? add_taint.cold+0x16/0x16 [ 48.241211][ T83] ? retint_kernel+0x10/0x10 [ 48.245810][ T83] ? trace_hardirqs_on+0x55/0x1e0 [ 48.250905][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 48.256207][ T83] end_report+0x43/0x49 [ 48.260462][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 48.266069][ T83] __kasan_report.cold+0xd/0x33 [ 48.271305][ T83] ? _raw_spin_trylock+0x50/0x50 [ 48.276377][ T83] ? dvb_usb_device_exit+0x19a/0x1a0 [ 48.281768][ T83] kasan_report+0xe/0x12 [ 48.286019][ T83] dvb_usb_device_exit+0x19a/0x1a0 [ 48.291114][ T83] ? dvb_usb_exit+0x290/0x290 [ 48.295964][ T83] ? usb_disable_endpoint+0x1ba/0x1f0 [ 48.301347][ T83] ? usb_disable_interface+0x140/0x1a0 [ 48.307107][ T83] usb_unbind_interface+0x1bd/0x8a0 [ 48.312376][ T83] ? usb_autoresume_device+0x60/0x60 [ 48.318415][ T83] device_release_driver_internal+0x42f/0x500 [ 48.324702][ T83] bus_remove_device+0x2dc/0x4a0 [ 48.329728][ T83] device_del+0x420/0xb10 [ 48.334086][ T83] ? __device_links_no_driver+0x240/0x240 [ 48.340017][ T83] ? usb_remove_ep_devs+0x3e/0x80 [ 48.345089][ T83] ? remove_intf_ep_devs+0x13f/0x1d0 [ 48.350474][ T83] usb_disable_device+0x211/0x690 [ 48.355613][ T83] usb_disconnect+0x284/0x8d0 [ 48.360294][ T83] hub_event+0x1454/0x3640 [ 48.365105][ T83] ? find_held_lock+0x2d/0x110 [ 48.369870][ T83] ? mark_held_locks+0xe0/0xe0 [ 48.374629][ T83] ? hub_port_debounce+0x260/0x260 [ 48.379991][ T83] process_one_work+0x92b/0x1530 [ 48.384935][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 48.390676][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 48.395835][ T83] worker_thread+0x7ab/0xe20 [ 48.400454][ T83] ? process_one_work+0x1530/0x1530 [ 48.406052][ T83] kthread+0x318/0x420 [ 48.410438][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 48.416046][ T83] ret_from_fork+0x24/0x30 [ 48.421442][ T83] Kernel Offset: disabled [ 48.425818][ T83] Rebooting in 86400 seconds..