Warning: Permanently added '10.128.0.161' (ECDSA) to the list of known hosts. executing program [ 56.899103][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 57.138715][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 57.258803][ T21] usb 1-1: config 0 has an invalid interface number: 100 but max is 0 [ 57.267050][ T21] usb 1-1: config 0 has an invalid descriptor of length 3, skipping remainder of the config [ 57.277241][ T21] usb 1-1: config 0 has no interface number 0 [ 57.283388][ T21] usb 1-1: config 0 interface 100 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 57.293421][ T21] usb 1-1: New USB device found, idVendor=1618, idProduct=9116, bcdDevice=ab.07 [ 57.302501][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.312476][ T21] usb 1-1: config 0 descriptor?? [ 57.351367][ T21] rsi_91x: rsi_probe: Failed to init usb interface [ 57.359513][ T21] ================================================================== [ 57.367885][ T21] BUG: KASAN: double-free or invalid-free in rsi_91x_deinit+0x270/0x2f0 [ 57.376192][ T21] [ 57.378528][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc1+ #10 [ 57.386138][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 57.396283][ T21] Workqueue: usb_hub_wq hub_event [ 57.401359][ T21] Call Trace: [ 57.404828][ T21] dump_stack+0xca/0x13e [ 57.409166][ T21] print_address_description+0x67/0x231 [ 57.414696][ T21] ? rsi_91x_deinit+0x270/0x2f0 [ 57.419554][ T21] kasan_report_invalid_free+0x61/0xa0 [ 57.425052][ T21] ? rsi_91x_deinit+0x270/0x2f0 [ 57.437308][ T21] __kasan_slab_free+0x162/0x180 [ 57.442335][ T21] ? rsi_91x_deinit+0x270/0x2f0 [ 57.448438][ T21] kfree+0xd7/0x280 [ 57.452250][ T21] rsi_91x_deinit+0x270/0x2f0 [ 57.456920][ T21] rsi_probe+0xcec/0x15a0 [ 57.461939][ T21] ? rsi_disconnect+0x630/0x630 [ 57.466815][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 57.472230][ T21] ? __pm_runtime_resume+0x111/0x180 [ 57.482642][ T21] usb_probe_interface+0x305/0x7a0 [ 57.489722][ T21] ? usb_probe_device+0x100/0x100 [ 57.494730][ T21] really_probe+0x281/0x660 [ 57.499365][ T21] driver_probe_device+0x104/0x210 [ 57.504457][ T21] __device_attach_driver+0x1c2/0x220 [ 57.509814][ T21] ? driver_allows_async_probing+0x160/0x160 [ 57.515780][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.520643][ T21] ? bus_rescan_devices+0x20/0x20 [ 57.525686][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 57.531507][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 57.536833][ T21] __device_attach+0x217/0x360 [ 57.541639][ T21] ? device_bind_driver+0xd0/0xd0 [ 57.546760][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 57.558720][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 57.564042][ T21] bus_probe_device+0x1e4/0x290 [ 57.568975][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 57.574872][ T21] device_add+0xae6/0x16f0 [ 57.579316][ T21] ? uevent_store+0x50/0x50 [ 57.583816][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 57.589607][ T21] usb_set_configuration+0xdf6/0x1670 [ 57.594963][ T21] generic_probe+0x9d/0xd5 [ 57.599359][ T21] usb_probe_device+0x99/0x100 [ 57.604108][ T21] ? usb_suspend+0x620/0x620 [ 57.608798][ T21] really_probe+0x281/0x660 [ 57.613287][ T21] driver_probe_device+0x104/0x210 [ 57.618384][ T21] __device_attach_driver+0x1c2/0x220 [ 57.623772][ T21] ? driver_allows_async_probing+0x160/0x160 [ 57.629776][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.634621][ T21] ? bus_rescan_devices+0x20/0x20 [ 57.639645][ T21] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 57.645431][ T21] ? lockdep_hardirqs_on+0x379/0x580 [ 57.650696][ T21] __device_attach+0x217/0x360 [ 57.655447][ T21] ? device_bind_driver+0xd0/0xd0 [ 57.660455][ T21] ? kobject_uevent_env+0x29e/0x1150 [ 57.665718][ T21] ? kobject_uevent_env+0x2a8/0x1150 [ 57.670991][ T21] bus_probe_device+0x1e4/0x290 [ 57.675830][ T21] ? blocking_notifier_call_chain+0x54/0xa0 [ 57.681724][ T21] device_add+0xae6/0x16f0 [ 57.686141][ T21] ? uevent_store+0x50/0x50 [ 57.690654][ T21] usb_new_device.cold+0x8c1/0x1016 [ 57.695837][ T21] ? usb_port_suspend+0xa40/0xa40 [ 57.700851][ T21] ? mark_held_locks+0x9f/0xe0 [ 57.705598][ T21] ? _raw_spin_unlock_irq+0x24/0x30 [ 57.710807][ T21] hub_event+0x1ada/0x3590 [ 57.715224][ T21] ? hub_port_debounce+0x260/0x260 [ 57.720370][ T21] process_one_work+0x905/0x1570 [ 57.725306][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 57.730674][ T21] ? do_raw_spin_lock+0x11a/0x280 [ 57.735680][ T21] worker_thread+0x96/0xe20 [ 57.740165][ T21] ? process_one_work+0x1570/0x1570 [ 57.745344][ T21] kthread+0x30b/0x410 [ 57.749399][ T21] ? kthread_park+0x1a0/0x1a0 [ 57.754055][ T21] ret_from_fork+0x24/0x30 [ 57.758448][ T21] [ 57.760759][ T21] Allocated by task 21: [ 57.764914][ T21] save_stack+0x1b/0x80 [ 57.769054][ T21] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 57.774662][ T21] rsi_probe+0x11a/0x15a0 [ 57.779060][ T21] usb_probe_interface+0x305/0x7a0 [ 57.784155][ T21] really_probe+0x281/0x660 [ 57.788663][ T21] driver_probe_device+0x104/0x210 [ 57.793758][ T21] __device_attach_driver+0x1c2/0x220 [ 57.799111][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.803966][ T21] __device_attach+0x217/0x360 [ 57.808708][ T21] bus_probe_device+0x1e4/0x290 [ 57.813564][ T21] device_add+0xae6/0x16f0 [ 57.817995][ T21] usb_set_configuration+0xdf6/0x1670 [ 57.823370][ T21] generic_probe+0x9d/0xd5 [ 57.827768][ T21] usb_probe_device+0x99/0x100 [ 57.832510][ T21] really_probe+0x281/0x660 [ 57.836991][ T21] driver_probe_device+0x104/0x210 [ 57.842187][ T21] __device_attach_driver+0x1c2/0x220 [ 57.847546][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.852396][ T21] __device_attach+0x217/0x360 [ 57.857138][ T21] bus_probe_device+0x1e4/0x290 [ 57.861991][ T21] device_add+0xae6/0x16f0 [ 57.866391][ T21] usb_new_device.cold+0x8c1/0x1016 [ 57.871567][ T21] hub_event+0x1ada/0x3590 [ 57.875989][ T21] process_one_work+0x905/0x1570 [ 57.880903][ T21] worker_thread+0x96/0xe20 [ 57.885388][ T21] kthread+0x30b/0x410 [ 57.889456][ T21] ret_from_fork+0x24/0x30 [ 57.893849][ T21] [ 57.896162][ T21] Freed by task 21: [ 57.899981][ T21] save_stack+0x1b/0x80 [ 57.904206][ T21] __kasan_slab_free+0x130/0x180 [ 57.909207][ T21] kfree+0xd7/0x280 [ 57.913080][ T21] rsi_probe+0xdfd/0x15a0 [ 57.917399][ T21] usb_probe_interface+0x305/0x7a0 [ 57.922488][ T21] really_probe+0x281/0x660 [ 57.926974][ T21] driver_probe_device+0x104/0x210 [ 57.932078][ T21] __device_attach_driver+0x1c2/0x220 [ 57.937443][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.942274][ T21] __device_attach+0x217/0x360 [ 57.947378][ T21] bus_probe_device+0x1e4/0x290 [ 57.952229][ T21] device_add+0xae6/0x16f0 [ 57.956623][ T21] usb_set_configuration+0xdf6/0x1670 [ 57.961974][ T21] generic_probe+0x9d/0xd5 [ 57.966366][ T21] usb_probe_device+0x99/0x100 [ 57.971115][ T21] really_probe+0x281/0x660 [ 57.975603][ T21] driver_probe_device+0x104/0x210 [ 57.980869][ T21] __device_attach_driver+0x1c2/0x220 [ 57.986341][ T21] bus_for_each_drv+0x15c/0x1e0 [ 57.991183][ T21] __device_attach+0x217/0x360 [ 57.995922][ T21] bus_probe_device+0x1e4/0x290 [ 58.000749][ T21] device_add+0xae6/0x16f0 [ 58.005144][ T21] usb_new_device.cold+0x8c1/0x1016 [ 58.010319][ T21] hub_event+0x1ada/0x3590 [ 58.014714][ T21] process_one_work+0x905/0x1570 [ 58.019637][ T21] worker_thread+0x96/0xe20 [ 58.024120][ T21] kthread+0x30b/0x410 [ 58.028170][ T21] ret_from_fork+0x24/0x30 [ 58.032561][ T21] [ 58.034873][ T21] The buggy address belongs to the object at ffff8881cfd46000 [ 58.034873][ T21] which belongs to the cache kmalloc-512 of size 512 [ 58.048996][ T21] The buggy address is located 0 bytes inside of [ 58.048996][ T21] 512-byte region [ffff8881cfd46000, ffff8881cfd46200) [ 58.062379][ T21] The buggy address belongs to the page: [ 58.068013][ T21] page:ffffea00073f5180 refcount:1 mapcount:0 mapping:ffff8881dac02c00 index:0x0 compound_mapcount: 0 [ 58.079030][ T21] flags: 0x200000000010200(slab|head) [ 58.084476][ T21] raw: 0200000000010200 ffffea00073f6200 0000000900000009 ffff8881dac02c00 [ 58.093125][ T21] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 58.101708][ T21] page dumped because: kasan: bad access detected [ 58.108105][ T21] [ 58.110413][ T21] Memory state around the buggy address: [ 58.116029][ T21] ffff8881cfd45f00: fc fc fc fc fb fb fb fb fb fb fb fc fc fc fc fb [ 58.124080][ T21] ffff8881cfd45f80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 58.132128][ T21] >ffff8881cfd46000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.140169][ T21] ^ [ 58.144229][ T21] ffff8881cfd46080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 58.152293][ T21] ffff8881cfd46100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [