[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 14.830475][ C1] random: crng init done [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.166' (ECDSA) to the list of known hosts. executing program executing program executing program executing program executing program executing program syzkaller login: [ 38.582531][ T102] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 38.582539][ T83] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 38.582834][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 38.605614][ T5] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 38.613160][ T1729] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 38.620678][ T1728] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 38.822493][ T102] usb 4-1: Using ep0 maxpacket: 16 [ 38.833146][ T83] usb 6-1: Using ep0 maxpacket: 16 [ 38.852472][ T1729] usb 2-1: Using ep0 maxpacket: 16 [ 38.862667][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 38.867898][ T5] usb 5-1: Using ep0 maxpacket: 16 [ 38.873465][ T1728] usb 3-1: Using ep0 maxpacket: 16 [ 38.952725][ T102] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 38.961040][ T102] usb 4-1: config 0 has no interface number 0 [ 38.967427][ T102] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 38.973356][ T83] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 38.976553][ T102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.984692][ T83] usb 6-1: config 0 has no interface number 0 [ 38.985217][ T83] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 38.992897][ T1729] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 38.998919][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.008099][ T1729] usb 2-1: config 0 has no interface number 0 [ 39.021940][ T83] usb 6-1: config 0 descriptor?? [ 39.024893][ T1729] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 39.044752][ T1729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.053151][ T102] usb 4-1: config 0 descriptor?? [ 39.058218][ T12] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 39.066435][ T12] usb 1-1: config 0 has no interface number 0 [ 39.072655][ T5] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 39.077902][ T83] rio500 6-1:0.133: USB Rio found at address 2 [ 39.080814][ T5] usb 5-1: config 0 has no interface number 0 [ 39.080853][ T5] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 39.080867][ T5] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.081390][ T1728] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 39.118619][ T1728] usb 3-1: config 0 has no interface number 0 [ 39.125971][ T102] rio500 4-1:0.133: Second USB Rio at address 2 refused [ 39.136022][ T5] usb 5-1: config 0 descriptor?? [ 39.141144][ T12] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 39.150238][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.158467][ T102] rio500: probe of 4-1:0.133 failed with error -16 [ 39.167314][ T1728] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 39.176474][ T1728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.184808][ T12] usb 1-1: config 0 descriptor?? [ 39.190168][ T1729] usb 2-1: config 0 descriptor?? [ 39.196523][ T5] rio500 5-1:0.133: Second USB Rio at address 2 refused [ 39.203773][ T5] rio500: probe of 5-1:0.133 failed with error -16 [ 39.212565][ T1728] usb 3-1: config 0 descriptor?? [ 39.224016][ T12] rio500 1-1:0.133: Second USB Rio at address 2 refused [ 39.231052][ T12] rio500: probe of 1-1:0.133 failed with error -16 [ 39.243842][ T1729] rio500 2-1:0.133: Second USB Rio at address 2 refused executing program [ 39.250861][ T1729] rio500: probe of 2-1:0.133 failed with error -16 [ 39.258806][ T1728] rio500 3-1:0.133: Second USB Rio at address 2 refused [ 39.267206][ T1728] rio500: probe of 3-1:0.133 failed with error -16 [ 39.272737][ T1723] usb 6-1: Rio opened. [ 39.278296][ T1723] usb 6-1: Rio closed. [ 39.286750][ T83] usb 6-1: USB disconnect, device number 2 [ 39.293411][ T1724] usb 6-1: Rio opened. [ 39.298433][ T1724] usb 6-1: Rio closed. executing program [ 39.302907][ T83] rio500 6-1:0.133: USB Rio disconnected. [ 39.303230][ T1728] usb 4-1: USB disconnect, device number 2 executing program [ 39.378054][ T17] usb 5-1: USB disconnect, device number 2 executing program executing program executing program [ 39.424231][ T1742] usb 1-1: USB disconnect, device number 2 [ 39.444358][ T1729] usb 2-1: USB disconnect, device number 2 [ 39.459319][ T12] usb 3-1: USB disconnect, device number 2 [ 39.662713][ T83] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 39.712482][ T1728] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 39.732526][ T17] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 39.772592][ T1742] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.792491][ T1729] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 39.812528][ T12] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.902919][ T83] usb 6-1: Using ep0 maxpacket: 16 [ 39.962482][ T1728] usb 4-1: Using ep0 maxpacket: 16 [ 39.972489][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 40.012614][ T1742] usb 1-1: Using ep0 maxpacket: 16 [ 40.022614][ T83] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.030923][ T83] usb 6-1: config 0 has no interface number 0 [ 40.037181][ T83] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.042475][ T1729] usb 2-1: Using ep0 maxpacket: 16 [ 40.046244][ T83] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.053687][ T83] usb 6-1: config 0 descriptor?? [ 40.059753][ T12] usb 3-1: Using ep0 maxpacket: 16 [ 40.092666][ T17] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.101108][ T17] usb 5-1: config 0 has no interface number 0 [ 40.108529][ T83] rio500 6-1:0.133: USB Rio found at address 3 [ 40.112624][ T1728] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.117985][ T17] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.123077][ T1728] usb 4-1: config 0 has no interface number 0 [ 40.132165][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.139105][ T1728] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.152645][ T1742] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.155434][ T1728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.163548][ T1742] usb 1-1: config 0 has no interface number 0 [ 40.178978][ T17] usb 5-1: config 0 descriptor?? [ 40.184305][ T1742] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.191718][ T1728] usb 4-1: config 0 descriptor?? [ 40.193518][ T1742] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.207622][ T1742] usb 1-1: config 0 descriptor?? [ 40.222719][ T12] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.223745][ T17] rio500 5-1:0.133: Second USB Rio at address 3 refused [ 40.230920][ T12] usb 3-1: config 0 has no interface number 0 [ 40.238532][ T17] rio500: probe of 5-1:0.133 failed with error -16 [ 40.244064][ T1729] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 40.253850][ T1742] rio500 1-1:0.133: Second USB Rio at address 3 refused [ 40.258849][ T1729] usb 2-1: config 0 has no interface number 0 [ 40.273754][ T1728] rio500 4-1:0.133: Second USB Rio at address 3 refused [ 40.278821][ T1742] rio500: probe of 1-1:0.133 failed with error -16 [ 40.298973][ T1728] rio500: probe of 4-1:0.133 failed with error -16 [ 40.306948][ T12] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.307788][ T1739] usb 6-1: Rio opened. executing program [ 40.316107][ T12] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.316153][ T1729] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 40.316167][ T1729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.316987][ T1729] usb 2-1: config 0 descriptor?? [ 40.328629][ T1739] usb 6-1: Rio closed. [ 40.338476][ T12] usb 3-1: config 0 descriptor?? [ 40.352327][ T1742] usb 6-1: USB disconnect, device number 3 [ 40.367822][ T1742] rio500 6-1:0.133: USB Rio disconnected. executing program [ 40.404158][ T1729] rio500 2-1:0.133: USB Rio found at address 3 [ 40.415656][ T12] rio500 3-1:0.133: Second USB Rio at address 3 refused [ 40.423960][ T12] rio500: probe of 3-1:0.133 failed with error -16 [ 40.425356][ T17] usb 5-1: USB disconnect, device number 3 executing program executing program [ 40.452784][ T1744] usb 2-1: Rio opened. [ 40.457389][ T1744] usb 2-1: Rio closed. [ 40.462006][ T12] usb 1-1: USB disconnect, device number 3 [ 40.471809][ T1740] usb 2-1: Rio opened. [ 40.476427][ T1740] usb 2-1: Rio closed. [ 40.481241][ T1729] usb 4-1: USB disconnect, device number 3 executing program executing program [ 40.611900][ T1747] usb 2-1: Rio opened. [ 40.616740][ T1747] usb 2-1: Rio closed. [ 40.617386][ T1728] usb 2-1: USB disconnect, device number 3 [ 40.621237][ T83] usb 3-1: USB disconnect, device number 3 [ 40.629160][ T1728] rio500 2-1:0.133: USB Rio disconnected. [ 40.722659][ T1742] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.792494][ T17] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 40.882488][ T12] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 40.892614][ T1729] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 40.972518][ T1742] usb 6-1: Using ep0 maxpacket: 16 [ 40.992480][ T1728] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 41.032575][ T83] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 41.042578][ T17] usb 5-1: Using ep0 maxpacket: 16 [ 41.092568][ T1742] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.100956][ T1742] usb 6-1: config 0 has no interface number 0 [ 41.107222][ T1742] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 41.116406][ T1742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.125929][ T1742] usb 6-1: config 0 descriptor?? [ 41.132681][ T12] usb 1-1: Using ep0 maxpacket: 16 [ 41.138168][ T1729] usb 4-1: Using ep0 maxpacket: 16 [ 41.162684][ T17] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.171056][ T17] usb 5-1: config 0 has no interface number 0 [ 41.178591][ T1742] rio500 6-1:0.133: USB Rio found at address 4 [ 41.185516][ T17] usb 5-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 41.194724][ T17] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.204559][ T17] usb 5-1: config 0 descriptor?? [ 41.242759][ T1728] usb 2-1: Using ep0 maxpacket: 16 [ 41.244162][ T17] rio500 5-1:0.133: Second USB Rio at address 4 refused [ 41.255471][ T17] rio500: probe of 5-1:0.133 failed with error -16 [ 41.272541][ T83] usb 3-1: Using ep0 maxpacket: 16 [ 41.282607][ T12] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.290852][ T12] usb 1-1: config 0 has no interface number 0 [ 41.297155][ T1729] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.305464][ T1729] usb 4-1: config 0 has no interface number 0 [ 41.311931][ T1729] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 41.321024][ T1729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.329168][ T12] usb 1-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 executing program [ 41.338383][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.347599][ T1729] usb 4-1: config 0 descriptor?? [ 41.353026][ T12] usb 1-1: config 0 descriptor?? [ 41.363006][ T1752] usb 6-1: Rio opened. [ 41.367588][ T1752] usb 6-1: Rio closed. [ 41.372167][ T5] usb 6-1: USB disconnect, device number 4 [ 41.379697][ T5] rio500 6-1:0.133: USB Rio disconnected. [ 41.385656][ T1728] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.393947][ T1728] usb 2-1: config 0 has no interface number 0 [ 41.401261][ T1729] rio500 4-1:0.133: USB Rio found at address 4 [ 41.408863][ T12] rio500 1-1:0.133: USB Rio found at address 4 [ 41.412618][ T83] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 41.416352][ T1728] usb 2-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 41.423261][ T83] usb 3-1: config 0 has no interface number 0 executing program [ 41.436923][ T83] usb 3-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 41.438530][ T1728] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.447576][ T83] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.460275][ T12] usb 5-1: USB disconnect, device number 4 [ 41.473038][ T1728] usb 2-1: config 0 descriptor?? [ 41.481927][ T83] usb 3-1: config 0 descriptor?? [ 41.513782][ T1728] rio500 2-1:0.133: Second USB Rio at address 4 refused [ 41.520943][ T1728] rio500: probe of 2-1:0.133 failed with error -16 [ 41.533752][ T83] rio500 3-1:0.133: Second USB Rio at address 4 refused [ 41.540779][ T83] rio500: probe of 3-1:0.133 failed with error -16 executing program executing program [ 41.600284][ T1758] usb 4-1: Rio opened. [ 41.605050][ T1758] usb 4-1: Rio closed. [ 41.609223][ T1757] usb 4-1: Rio opened. [ 41.609662][ T1728] usb 4-1: USB disconnect, device number 4 [ 41.614879][ T1757] usb 4-1: Rio closed. [ 41.623358][ T1728] rio500 4-1:0.133: USB Rio disconnected. [ 41.629385][ T83] usb 1-1: USB disconnect, device number 4 [ 41.637213][ T83] ================================================================== [ 41.645400][ T83] BUG: KASAN: double-free or invalid-free in disconnect_rio+0x12b/0x1b0 [ 41.653820][ T83] [ 41.656135][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.4.0-rc1+ #0 [ 41.663486][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.673863][ T83] Workqueue: usb_hub_wq hub_event [ 41.678870][ T83] Call Trace: [ 41.682144][ T83] dump_stack+0xca/0x13e [ 41.686370][ T83] print_address_description.constprop.0+0x36/0x50 [ 41.692865][ T83] ? disconnect_rio+0x12b/0x1b0 [ 41.697700][ T83] kasan_report_invalid_free+0x61/0xa0 [ 41.703136][ T83] ? disconnect_rio+0x12b/0x1b0 [ 41.707964][ T83] __kasan_slab_free+0x162/0x180 [ 41.712891][ T83] ? disconnect_rio+0x12b/0x1b0 [ 41.714156][ T1729] usb 2-1: USB disconnect, device number 4 [ 41.717766][ T83] kfree+0xe4/0x2f0 [ 41.727358][ T83] disconnect_rio+0x12b/0x1b0 [ 41.732042][ T83] usb_unbind_interface+0x1bd/0x8a0 [ 41.737257][ T83] ? usb_autoresume_device+0x60/0x60 [ 41.738882][ T102] usb 3-1: USB disconnect, device number 4 executing program executing program [ 41.742546][ T83] device_release_driver_internal+0x42f/0x500 [ 41.742560][ T83] bus_remove_device+0x2dc/0x4a0 [ 41.742571][ T83] device_del+0x420/0xb20 [ 41.742581][ T83] ? __device_link_del+0x2f0/0x2f0 [ 41.742595][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 41.742609][ T83] ? remove_intf_ep_devs+0x13f/0x1d0 [ 41.742623][ T83] usb_disable_device+0x211/0x690 [ 41.784291][ T83] usb_disconnect+0x284/0x8d0 [ 41.788960][ T83] hub_event+0x1454/0x3640 [ 41.793373][ T83] ? find_held_lock+0x2d/0x110 [ 41.798168][ T83] ? mark_held_locks+0xe0/0xe0 [ 41.802490][ T5] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 41.802913][ T83] ? hub_port_debounce+0x260/0x260 [ 41.802927][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 41.802937][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 41.802950][ T83] process_one_work+0x92b/0x1530 [ 41.802963][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 41.802973][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 41.802986][ T83] worker_thread+0x96/0xe20 [ 41.846038][ T83] ? process_one_work+0x1530/0x1530 [ 41.851220][ T83] kthread+0x318/0x420 [ 41.855449][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 41.860829][ T83] ret_from_fork+0x24/0x30 [ 41.865229][ T83] [ 41.867557][ T83] Allocated by task 1729: [ 41.871884][ T83] save_stack+0x1b/0x80 [ 41.872490][ T12] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 41.876030][ T83] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 41.876044][ T83] probe_rio+0x135/0x248 [ 41.876057][ T83] usb_probe_interface+0x305/0x7a0 [ 41.876070][ T83] really_probe+0x281/0x6d0 [ 41.876081][ T83] driver_probe_device+0x104/0x210 [ 41.876090][ T83] __device_attach_driver+0x1c2/0x220 [ 41.876104][ T83] bus_for_each_drv+0x162/0x1e0 [ 41.918288][ T83] __device_attach+0x217/0x360 [ 41.923056][ T83] bus_probe_device+0x1e4/0x290 [ 41.928052][ T83] device_add+0xae6/0x16f0 [ 41.932467][ T83] usb_set_configuration+0xdf6/0x1670 [ 41.937849][ T83] generic_probe+0x9d/0xd5 [ 41.942531][ T83] usb_probe_device+0x99/0x100 [ 41.947284][ T83] really_probe+0x281/0x6d0 [ 41.951789][ T83] driver_probe_device+0x104/0x210 [ 41.956898][ T83] __device_attach_driver+0x1c2/0x220 [ 41.962363][ T83] bus_for_each_drv+0x162/0x1e0 [ 41.970759][ T83] __device_attach+0x217/0x360 [ 41.972483][ T1728] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 41.975522][ T83] bus_probe_device+0x1e4/0x290 [ 41.975533][ T83] device_add+0xae6/0x16f0 [ 41.975545][ T83] usb_new_device.cold+0x6a4/0xe79 [ 41.975554][ T83] hub_event+0x1b5c/0x3640 [ 41.975566][ T83] process_one_work+0x92b/0x1530 [ 41.975575][ T83] worker_thread+0x96/0xe20 [ 41.975589][ T83] kthread+0x318/0x420 [ 42.015847][ T83] ret_from_fork+0x24/0x30 [ 42.020256][ T83] [ 42.022571][ T83] Freed by task 1728: [ 42.026567][ T83] save_stack+0x1b/0x80 [ 42.030715][ T83] __kasan_slab_free+0x130/0x180 [ 42.035653][ T83] kfree+0xe4/0x2f0 [ 42.039450][ T83] disconnect_rio+0x12b/0x1b0 [ 42.042495][ T5] usb 6-1: Using ep0 maxpacket: 16 [ 42.044120][ T83] usb_unbind_interface+0x1bd/0x8a0 [ 42.044134][ T83] device_release_driver_internal+0x42f/0x500 [ 42.044145][ T83] bus_remove_device+0x2dc/0x4a0 [ 42.044154][ T83] device_del+0x420/0xb20 [ 42.044165][ T83] usb_disable_device+0x211/0x690 [ 42.044173][ T83] usb_disconnect+0x284/0x8d0 [ 42.044187][ T83] hub_event+0x1454/0x3640 [ 42.083827][ T83] process_one_work+0x92b/0x1530 [ 42.088849][ T83] worker_thread+0x96/0xe20 [ 42.093419][ T83] kthread+0x318/0x420 [ 42.097489][ T83] ret_from_fork+0x24/0x30 [ 42.101877][ T83] [ 42.104200][ T83] The buggy address belongs to the object at ffff8881d0e08000 [ 42.104200][ T83] which belongs to the cache kmalloc-4k of size 4096 [ 42.118241][ T83] The buggy address is located 0 bytes inside of [ 42.118241][ T83] 4096-byte region [ffff8881d0e08000, ffff8881d0e09000) [ 42.122582][ T12] usb 5-1: Using ep0 maxpacket: 16 [ 42.131422][ T83] The buggy address belongs to the page: [ 42.131435][ T83] page:ffffea0007438200 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0 [ 42.131449][ T83] flags: 0x200000000010200(slab|head) [ 42.131465][ T83] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280 [ 42.131479][ T83] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 42.131483][ T83] page dumped because: kasan: bad access detected [ 42.131491][ T83] [ 42.136698][ T1729] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 42.142195][ T83] Memory state around the buggy address: [ 42.142206][ T83] ffff8881d0e07f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.142214][ T83] ffff8881d0e07f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 42.142226][ T83] >ffff8881d0e08000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.153579][ T102] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 42.158500][ T83] ^ [ 42.158512][ T83] ffff8881d0e08080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.158520][ T83] ffff8881d0e08100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 42.158528][ T83] ================================================================== [ 42.202661][ T5] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 42.205861][ T83] Disabling lock debugging due to kernel taint [ 42.205944][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 42.213981][ T5] usb 6-1: config 0 has no interface number 0 [ 42.221998][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Tainted: G B 5.4.0-rc1+ #0 [ 42.229503][ T1728] usb 4-1: Using ep0 maxpacket: 16 [ 42.233485][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.233501][ T83] Workqueue: usb_hub_wq hub_event [ 42.241930][ T5] usb 6-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 42.249586][ T83] Call Trace: [ 42.249606][ T83] dump_stack+0xca/0x13e [ 42.249620][ T83] panic+0x2a3/0x6da [ 42.249634][ T83] ? add_taint.cold+0x16/0x16 [ 42.257751][ T5] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.265801][ T83] ? disconnect_rio+0x12b/0x1b0 [ 42.265818][ T83] ? trace_hardirqs_on+0x55/0x1e0 [ 42.275426][ T5] usb 6-1: config 0 descriptor?? [ 42.278515][ T83] ? disconnect_rio+0x12b/0x1b0 [ 42.278524][ T83] end_report+0x43/0x49 [ 42.278538][ T83] kasan_report_invalid_free+0x7d/0xa0 [ 42.326065][ T5] rio500 6-1:0.133: USB Rio found at address 5 [ 42.330201][ T83] ? disconnect_rio+0x12b/0x1b0 [ 42.330215][ T83] __kasan_slab_free+0x162/0x180 [ 42.330230][ T83] ? disconnect_rio+0x12b/0x1b0 [ 42.352527][ T1728] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 42.356530][ T83] kfree+0xe4/0x2f0 [ 42.356545][ T83] disconnect_rio+0x12b/0x1b0 [ 42.356562][ T83] usb_unbind_interface+0x1bd/0x8a0 [ 42.361487][ T1728] usb 4-1: config 0 has no interface number 0 [ 42.366310][ T83] ? usb_autoresume_device+0x60/0x60 [ 42.366322][ T83] device_release_driver_internal+0x42f/0x500 [ 42.366332][ T83] bus_remove_device+0x2dc/0x4a0 [ 42.366341][ T83] device_del+0x420/0xb20 [ 42.366350][ T83] ? __device_link_del+0x2f0/0x2f0 [ 42.366362][ T83] ? lockdep_hardirqs_on+0x382/0x580 [ 42.366371][ T83] ? remove_intf_ep_devs+0x13f/0x1d0 [ 42.366380][ T83] usb_disable_device+0x211/0x690 [ 42.366388][ T83] usb_disconnect+0x284/0x8d0 [ 42.366400][ T83] hub_event+0x1454/0x3640 [ 42.370582][ T12] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 42.375993][ T83] ? find_held_lock+0x2d/0x110 [ 42.376004][ T83] ? mark_held_locks+0xe0/0xe0 [ 42.376014][ T83] ? hub_port_debounce+0x260/0x260 [ 42.376024][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 42.376038][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 42.382368][ T12] usb 5-1: config 0 has no interface number 0 [ 42.387198][ T83] process_one_work+0x92b/0x1530 [ 42.387209][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 42.387218][ T83] ? do_raw_spin_lock+0x11a/0x280 [ 42.387226][ T83] worker_thread+0x96/0xe20 [ 42.387236][ T83] ? process_one_work+0x1530/0x1530 [ 42.387244][ T83] kthread+0x318/0x420 [ 42.387257][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 42.393184][ T1728] usb 4-1: New USB device found, idVendor=0841, idProduct=0001, bcdDevice=c5.d0 [ 42.397022][ T83] ret_from_fork+0x24/0x30 [ 42.397781][ T83] Kernel Offset: disabled [ 42.567593][ T83] Rebooting in 86400 seconds..