BUG: sleeping function called from invalid context at kernel/locking/mutex.c:908 in_atomic(): 1, irqs_disabled(): 0, pid: 805, name: udevd 3 locks held by udevd/805: #0: 00000000c88b6bf6 (&mm->mmap_sem){++++}, at: __do_munmap+0xc55/0xf00 mm/mmap.c:2821 #1: 000000001746c177 (&(&mm->page_table_lock)->rlock){+.+.}, at: spin_lock include/linux/spinlock.h:329 [inline] #1: 000000001746c177 (&(&mm->page_table_lock)->rlock){+.+.}, at: browse_rb mm/mmap.c:349 [inline] #1: 000000001746c177 (&(&mm->page_table_lock)->rlock){+.+.}, at: validate_mm+0x330/0x610 mm/mmap.c:416 #2: 00000000bb2d9ff7 ((&toneport->timer)){+.-.}, at: lockdep_copy_map include/linux/lockdep.h:170 [inline] #2: 00000000bb2d9ff7 ((&toneport->timer)){+.-.}, at: call_timer_fn+0xce/0x5f0 kernel/time/timer.c:1315 CPU: 0 PID: 805 Comm: udevd Not tainted 5.1.0-rc3-319004-g43151d6 #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xe8/0x16e lib/dump_stack.c:113 ___might_sleep.cold+0x11c/0x136 kernel/sched/core.c:6190 __mutex_lock_common kernel/locking/mutex.c:908 [inline] __mutex_lock+0xcd/0x12b0 kernel/locking/mutex.c:1072 line6_pcm_acquire+0x35/0x210 sound/usb/line6/pcm.c:311 call_timer_fn+0x161/0x5f0 kernel/time/timer.c:1325 expire_timers kernel/time/timer.c:1362 [inline] __run_timers kernel/time/timer.c:1681 [inline] __run_timers kernel/time/timer.c:1649 [inline] run_timer_softirq+0x58b/0x1400 kernel/time/timer.c:1694 __do_softirq+0x22a/0x8cd kernel/softirq.c:293 invoke_softirq kernel/softirq.c:374 [inline] irq_exit+0x187/0x1b0 kernel/softirq.c:414 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xfe/0x4a0 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 kernel/kcov.c:173 Code: bc f4 ff ff ff e8 ca 46 e9 ff 48 c7 05 61 7a 4e 15 00 00 00 00 e9 eb eb ff ff 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 34 24 <65> 48 8b 04 25 00 ee 01 00 65 8b 15 0c 23 90 7e 81 e2 00 01 1f 00 RSP: 0018:ffff88809a527d58 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff819dfda0 RDX: 1ffff110134b2bd3 RSI: ffffffff819dfd37 RDI: ffff88809a595e98 RBP: ffff88809a672a70 R08: ffff88809a51b100 R09: ffffed10134a4fa4 R10: ffffed10134a4fa3 R11: 0000000000000003 R12: 00007f89b05a8000 R13: ffff88809a595e78 R14: ffff88809a595e70 R15: 00007f89b0c32000 vma_compute_subtree_gap+0x157/0x230 mm/mmap.c:320 browse_rb mm/mmap.c:350 [inline] validate_mm+0x351/0x610 mm/mmap.c:416 remove_vma_list mm/mmap.c:2586 [inline] __do_munmap+0x888/0xf00 mm/mmap.c:2826 __vm_munmap+0xeb/0x180 mm/mmap.c:2846 __do_sys_munmap mm/mmap.c:2871 [inline] __se_sys_munmap mm/mmap.c:2868 [inline] __x64_sys_munmap+0x67/0x80 mm/mmap.c:2868 do_syscall_64+0xcf/0x4f0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f89b1958d37 Code: f0 ff ff 73 01 c3 48 8b 0d fe c0 2a 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d d1 c0 2a 00 31 d2 48 29 c2 64 RSP: 002b:00007ffc64d59c78 EFLAGS: 00000206 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: 000000000062c220 RCX: 00007f89b1958d37 RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007f89b224f000 RBP: 0000000000000000 R08: 00007f89b22487a0 R09: 0000000000000000 R10: 0000000000000040 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000004ad5 R14: 0000000000000000 R15: 000000000063ee80 ================================================================== BUG: KASAN: null-ptr-deref in memset include/linux/string.h:337 [inline] BUG: KASAN: null-ptr-deref in submit_audio_out_urb+0x91e/0x1780 sound/usb/line6/playback.c:246 Write of size 20 at addr 0000000000000010 by task udevd/805 CPU: 0 PID: 805 Comm: udevd Tainted: G W 5.1.0-rc3-319004-g43151d6 #6 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 Call Trace: __dump_stack lib/dump_stack.c:77 [inline] dump_stack+0xe8/0x16e lib/dump_stack.c:113 kasan_report.cold+0x5/0x3c mm/kasan/report.c:321 memset+0x20/0x40 mm/kasan/common.c:115 memset include/linux/string.h:337 [inline] submit_audio_out_urb+0x91e/0x1780 sound/usb/line6/playback.c:246 line6_submit_audio_out_all_urbs+0xce/0x120 sound/usb/line6/playback.c:295 line6_stream_start+0x15b/0x1f0 sound/usb/line6/pcm.c:199 line6_pcm_acquire+0x139/0x210 sound/usb/line6/pcm.c:322 call_timer_fn+0x161/0x5f0 kernel/time/timer.c:1325 expire_timers kernel/time/timer.c:1362 [inline] __run_timers kernel/time/timer.c:1681 [inline] __run_timers kernel/time/timer.c:1649 [inline] run_timer_softirq+0x58b/0x1400 kernel/time/timer.c:1694 __do_softirq+0x22a/0x8cd kernel/softirq.c:293 invoke_softirq kernel/softirq.c:374 [inline] irq_exit+0x187/0x1b0 kernel/softirq.c:414 exiting_irq arch/x86/include/asm/apic.h:536 [inline] smp_apic_timer_interrupt+0xfe/0x4a0 arch/x86/kernel/apic/apic.c:1062 apic_timer_interrupt+0xf/0x20 arch/x86/entry/entry_64.S:807 RIP: 0010:get_current arch/x86/include/asm/current.h:15 [inline] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x50 kernel/kcov.c:173 Code: bc f4 ff ff ff e8 ca 46 e9 ff 48 c7 05 61 7a 4e 15 00 00 00 00 e9 eb eb ff ff 90 90 90 90 90 90 90 90 90 90 90 90 48 8b 34 24 <65> 48 8b 04 25 00 ee 01 00 65 8b 15 0c 23 90 7e 81 e2 00 01 1f 00 RSP: 0018:ffff88809a527d58 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff819dfda0 RDX: 1ffff110134b2bd3 RSI: ffffffff819dfd37 RDI: ffff88809a595e98 RBP: ffff88809a672a70 R08: ffff88809a51b100 R09: ffffed10134a4fa4 R10: ffffed10134a4fa3 R11: 0000000000000003 R12: 00007f89b05a8000 R13: ffff88809a595e78 R14: ffff88809a595e70 R15: 00007f89b0c32000 vma_compute_subtree_gap+0x157/0x230 mm/mmap.c:320 browse_rb mm/mmap.c:350 [inline] validate_mm+0x351/0x610 mm/mmap.c:416 remove_vma_list mm/mmap.c:2586 [inline] __do_munmap+0x888/0xf00 mm/mmap.c:2826 __vm_munmap+0xeb/0x180 mm/mmap.c:2846 __do_sys_munmap mm/mmap.c:2871 [inline] __se_sys_munmap mm/mmap.c:2868 [inline] __x64_sys_munmap+0x67/0x80 mm/mmap.c:2868 do_syscall_64+0xcf/0x4f0 arch/x86/entry/common.c:290 entry_SYSCALL_64_after_hwframe+0x49/0xbe RIP: 0033:0x7f89b1958d37 Code: f0 ff ff 73 01 c3 48 8b 0d fe c0 2a 00 31 d2 48 29 c2 64 89 11 48 83 c8 ff eb ea 90 90 90 90 90 90 90 90 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d d1 c0 2a 00 31 d2 48 29 c2 64 RSP: 002b:00007ffc64d59c78 EFLAGS: 00000206 ORIG_RAX: 000000000000000b RAX: ffffffffffffffda RBX: 000000000062c220 RCX: 00007f89b1958d37 RDX: 0000000000000000 RSI: 0000000000001000 RDI: 00007f89b224f000 RBP: 0000000000000000 R08: 00007f89b22487a0 R09: 0000000000000000 R10: 0000000000000040 R11: 0000000000000206 R12: 0000000000000000 R13: 0000000000004ad5 R14: 0000000000000000 R15: 000000000063ee80 ==================================================================