Warning: Permanently added '10.128.0.115' (ECDSA) to the list of known hosts. executing program [ 49.059327][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.299229][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 49.419315][ T12] usb 1-1: config 1 has an invalid interface number: 255 but max is 0 [ 49.427770][ T12] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 49.437885][ T12] usb 1-1: config 1 has no interface number 0 [ 49.444056][ T12] usb 1-1: config 1 interface 255 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 3 [ 49.454240][ T12] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=56.ec [ 49.463402][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 executing program [ 49.769286][ T12] usb 1-1: string descriptor 0 read error: -71 [ 49.781364][ T12] mcba_usb 1-1:1.255 can0: failed tx_urb -2 [ 49.787385][ T12] mcba_usb 1-1:1.255 can0: Failed to send cmd (169) [ 49.794538][ T12] mcba_usb 1-1:1.255 can0: failed tx_urb -2 [ 49.800847][ T12] mcba_usb 1-1:1.255 can0: Failed to send cmd (169) [ 49.807419][ T12] mcba_usb 1-1:1.255: Microchip CAN BUS Analyzer connected [ 49.816102][ T12] usb 1-1: USB disconnect, device number 2 [ 49.823566][ T12] mcba_usb 1-1:1.255 can0: device disconnected [ 49.914753][ T12] ================================================================== [ 49.922879][ T12] BUG: KASAN: use-after-free in __lock_acquire+0x302a/0x3b50 [ 49.930418][ T12] Read of size 8 at addr ffff8881c75f5148 by task kworker/0:1/12 [ 49.938107][ T12] [ 49.940429][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.3.0-rc7+ #0 [ 49.947771][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 49.957841][ T12] Workqueue: usb_hub_wq hub_event [ 49.962843][ T12] Call Trace: [ 49.966120][ T12] dump_stack+0xca/0x13e [ 49.970344][ T12] ? __lock_acquire+0x302a/0x3b50 [ 49.975445][ T12] ? __lock_acquire+0x302a/0x3b50 [ 49.980458][ T12] print_address_description+0x6a/0x32c [ 49.986000][ T12] ? __lock_acquire+0x302a/0x3b50 [ 49.991180][ T12] ? __lock_acquire+0x302a/0x3b50 [ 49.996180][ T12] __kasan_report.cold+0x1a/0x33 [ 50.001206][ T12] ? __lock_acquire+0x302a/0x3b50 [ 50.006217][ T12] kasan_report+0xe/0x12 [ 50.010442][ T12] __lock_acquire+0x302a/0x3b50 [ 50.015269][ T12] ? mark_held_locks+0x9f/0xe0 [ 50.020754][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 50.026105][ T12] ? quarantine_put+0xb2/0x150 [ 50.030853][ T12] ? mark_held_locks+0xe0/0xe0 [ 50.035612][ T12] lock_acquire+0x127/0x320 [ 50.040119][ T12] ? usb_kill_anchored_urbs+0x1e/0x110 [ 50.045566][ T12] ? kobject_put+0x18c/0x280 [ 50.050133][ T12] _raw_spin_lock_irq+0x2d/0x40 [ 50.055053][ T12] ? usb_kill_anchored_urbs+0x1e/0x110 [ 50.060663][ T12] usb_kill_anchored_urbs+0x1e/0x110 [ 50.066021][ T12] mcba_usb_disconnect+0xd6/0xe4 [ 50.070938][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 50.076113][ T12] ? usb_autoresume_device+0x60/0x60 [ 50.081394][ T12] device_release_driver_internal+0x42f/0x500 [ 50.087435][ T12] bus_remove_device+0x2dc/0x4a0 [ 50.092347][ T12] device_del+0x420/0xb10 [ 50.096678][ T12] ? __device_links_no_driver+0x240/0x240 [ 50.102385][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 50.107388][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 50.112660][ T12] usb_disable_device+0x211/0x690 [ 50.117664][ T12] usb_disconnect+0x284/0x8d0 [ 50.122316][ T12] hub_event+0x1454/0x3640 [ 50.126820][ T12] ? find_held_lock+0x2d/0x110 [ 50.131756][ T12] ? mark_held_locks+0xe0/0xe0 [ 50.136510][ T12] ? hub_port_debounce+0x260/0x260 [ 50.141683][ T12] process_one_work+0x92b/0x1530 [ 50.147303][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 50.152650][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 50.157648][ T12] worker_thread+0x7ab/0xe20 [ 50.162214][ T12] ? process_one_work+0x1530/0x1530 [ 50.167402][ T12] kthread+0x318/0x420 [ 50.171459][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 50.176806][ T12] ret_from_fork+0x24/0x30 [ 50.181190][ T12] [ 50.183493][ T12] Allocated by task 12: [ 50.187640][ T12] save_stack+0x1b/0x80 [ 50.191869][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 50.197485][ T12] kvmalloc_node+0xb4/0xf0 [ 50.201893][ T12] alloc_netdev_mqs+0x97/0xce0 [ 50.206633][ T12] alloc_candev_mqs+0x58/0x320 [ 50.211403][ T12] mcba_usb_probe+0xaf/0xbca [ 50.215988][ T12] usb_probe_interface+0x305/0x7a0 [ 50.221116][ T12] really_probe+0x281/0x6d0 [ 50.225688][ T12] driver_probe_device+0x101/0x1b0 [ 50.230784][ T12] __device_attach_driver+0x1c2/0x220 [ 50.236135][ T12] bus_for_each_drv+0x162/0x1e0 [ 50.240962][ T12] __device_attach+0x217/0x360 [ 50.245719][ T12] bus_probe_device+0x1e4/0x290 [ 50.250563][ T12] device_add+0xae6/0x16f0 [ 50.254956][ T12] usb_set_configuration+0xdf6/0x1670 [ 50.260301][ T12] generic_probe+0x9d/0xd5 [ 50.264689][ T12] usb_probe_device+0x99/0x100 [ 50.269773][ T12] really_probe+0x281/0x6d0 [ 50.274251][ T12] driver_probe_device+0x101/0x1b0 [ 50.279346][ T12] __device_attach_driver+0x1c2/0x220 [ 50.284690][ T12] bus_for_each_drv+0x162/0x1e0 [ 50.289519][ T12] __device_attach+0x217/0x360 [ 50.294270][ T12] bus_probe_device+0x1e4/0x290 [ 50.299099][ T12] device_add+0xae6/0x16f0 [ 50.303671][ T12] usb_new_device.cold+0x6a4/0xe79 [ 50.308868][ T12] hub_event+0x1b5c/0x3640 [ 50.313283][ T12] process_one_work+0x92b/0x1530 [ 50.318219][ T12] worker_thread+0x96/0xe20 [ 50.322706][ T12] kthread+0x318/0x420 [ 50.326768][ T12] ret_from_fork+0x24/0x30 [ 50.331166][ T12] [ 50.333468][ T12] Freed by task 12: [ 50.337248][ T12] save_stack+0x1b/0x80 [ 50.341385][ T12] __kasan_slab_free+0x130/0x180 [ 50.346308][ T12] kfree+0xe4/0x2f0 [ 50.350174][ T12] kvfree+0x59/0x60 [ 50.353958][ T12] device_release+0x71/0x200 [ 50.358531][ T12] kobject_put+0x171/0x280 [ 50.362920][ T12] put_device+0x1b/0x30 [ 50.367054][ T12] free_netdev+0x317/0x420 [ 50.371446][ T12] mcba_usb_disconnect+0xca/0xe4 [ 50.376361][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 50.381630][ T12] device_release_driver_internal+0x42f/0x500 [ 50.387674][ T12] bus_remove_device+0x2dc/0x4a0 [ 50.392586][ T12] device_del+0x420/0xb10 [ 50.396889][ T12] usb_disable_device+0x211/0x690 [ 50.401885][ T12] usb_disconnect+0x284/0x8d0 [ 50.406555][ T12] hub_event+0x1454/0x3640 [ 50.410947][ T12] process_one_work+0x92b/0x1530 [ 50.415869][ T12] worker_thread+0x7ab/0xe20 [ 50.420431][ T12] kthread+0x318/0x420 [ 50.424476][ T12] ret_from_fork+0x24/0x30 [ 50.428862][ T12] [ 50.431166][ T12] The buggy address belongs to the object at ffff8881c75f4200 [ 50.431166][ T12] which belongs to the cache kmalloc-8k of size 8192 [ 50.445195][ T12] The buggy address is located 3912 bytes inside of [ 50.445195][ T12] 8192-byte region [ffff8881c75f4200, ffff8881c75f6200) [ 50.458616][ T12] The buggy address belongs to the page: [ 50.464244][ T12] page:ffffea00071d7c00 refcount:1 mapcount:0 mapping:ffff8881da00c500 index:0x0 compound_mapcount: 0 [ 50.475327][ T12] flags: 0x200000000010200(slab|head) [ 50.480697][ T12] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c500 [ 50.489432][ T12] raw: 0000000000000000 0000000080030003 00000001ffffffff 0000000000000000 [ 50.498072][ T12] page dumped because: kasan: bad access detected [ 50.504918][ T12] [ 50.507230][ T12] Memory state around the buggy address: [ 50.514773][ T12] ffff8881c75f5000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.523252][ T12] ffff8881c75f5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.531290][ T12] >ffff8881c75f5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.541413][ T12] ^ [ 50.548112][ T12] ffff8881c75f5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.556364][ T12] ffff8881c75f5200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 50.564496][ T12] ================================================================== [ 50.572529][ T12] Disabling lock debugging due to kernel taint [ 50.578682][ T12] Kernel panic - not syncing: panic_on_warn set ... [ 50.585257][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Tainted: G B 5.3.0-rc7+ #0 [ 50.594103][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 50.604146][ T12] Workqueue: usb_hub_wq hub_event [ 50.609160][ T12] Call Trace: [ 50.612550][ T12] dump_stack+0xca/0x13e [ 50.616775][ T12] panic+0x2a3/0x6da [ 50.620799][ T12] ? add_taint.cold+0x16/0x16 [ 50.625471][ T12] ? print_shadow_for_address+0xb8/0x114 [ 50.631101][ T12] ? trace_hardirqs_off+0x50/0x1d0 [ 50.636376][ T12] ? __lock_acquire+0x302a/0x3b50 [ 50.641991][ T12] end_report+0x43/0x49 [ 50.646922][ T12] ? __lock_acquire+0x302a/0x3b50 [ 50.651922][ T12] __kasan_report.cold+0xd/0x33 [ 50.656777][ T12] ? __lock_acquire+0x302a/0x3b50 [ 50.662057][ T12] kasan_report+0xe/0x12 [ 50.666275][ T12] __lock_acquire+0x302a/0x3b50 [ 50.671100][ T12] ? mark_held_locks+0x9f/0xe0 [ 50.675845][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 50.682149][ T12] ? quarantine_put+0xb2/0x150 [ 50.686887][ T12] ? mark_held_locks+0xe0/0xe0 [ 50.691730][ T12] lock_acquire+0x127/0x320 [ 50.696751][ T12] ? usb_kill_anchored_urbs+0x1e/0x110 [ 50.702361][ T12] ? kobject_put+0x18c/0x280 [ 50.707406][ T12] _raw_spin_lock_irq+0x2d/0x40 [ 50.712244][ T12] ? usb_kill_anchored_urbs+0x1e/0x110 [ 50.717685][ T12] usb_kill_anchored_urbs+0x1e/0x110 [ 50.722955][ T12] mcba_usb_disconnect+0xd6/0xe4 [ 50.727873][ T12] usb_unbind_interface+0x1bd/0x8a0 [ 50.733224][ T12] ? usb_autoresume_device+0x60/0x60 [ 50.738534][ T12] device_release_driver_internal+0x42f/0x500 [ 50.746194][ T12] bus_remove_device+0x2dc/0x4a0 [ 50.751459][ T12] device_del+0x420/0xb10 [ 50.755883][ T12] ? __device_links_no_driver+0x240/0x240 [ 50.762468][ T12] ? usb_remove_ep_devs+0x3e/0x80 [ 50.767649][ T12] ? remove_intf_ep_devs+0x13f/0x1d0 [ 50.773004][ T12] usb_disable_device+0x211/0x690 [ 50.778031][ T12] usb_disconnect+0x284/0x8d0 [ 50.782684][ T12] hub_event+0x1454/0x3640 [ 50.787186][ T12] ? find_held_lock+0x2d/0x110 [ 50.792662][ T12] ? mark_held_locks+0xe0/0xe0 [ 50.797435][ T12] ? hub_port_debounce+0x260/0x260 [ 50.802782][ T12] process_one_work+0x92b/0x1530 [ 50.807899][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 50.813289][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 50.818327][ T12] worker_thread+0x7ab/0xe20 [ 50.822907][ T12] ? process_one_work+0x1530/0x1530 [ 50.828092][ T12] kthread+0x318/0x420 [ 50.832140][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 50.837520][ T12] ret_from_fork+0x24/0x30 [ 50.843275][ T12] Kernel Offset: disabled [ 50.847617][ T12] Rebooting in 86400 seconds..