Warning: Permanently added '10.128.0.249' (ECDSA) to the list of known hosts. executing program [ 39.240110][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 39.480087][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 39.600138][ T21] usb 1-1: config 4 has an invalid interface number: 170 but max is 0 [ 39.608444][ T21] usb 1-1: config 4 has no interface number 0 [ 39.614626][ T21] usb 1-1: config 4 interface 170 altsetting 0 endpoint 0x5 has an invalid bInterval 154, changing to 11 [ 39.625995][ T21] usb 1-1: config 4 interface 170 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 39.636667][ T21] usb 1-1: config 4 interface 170 altsetting 0 bulk endpoint 0xC has invalid maxpacket 4 [ 39.646707][ T21] usb 1-1: config 4 interface 170 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 39.657457][ T21] usb 1-1: config 4 interface 170 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 731 [ 39.900125][ T21] usb 1-1: string descriptor 0 read error: -22 [ 39.906365][ T21] usb 1-1: New USB device found, idVendor=1286, idProduct=2001, bcdDevice=a0.8e [ 39.915472][ T21] usb 1-1: New USB device strings: Mfr=127, Product=1, SerialNumber=1 [ 39.974445][ T21] usb 1-1: Direct firmware load for libertas/usb8388_olpc.bin failed with error -2 [ 39.983990][ T21] usb 1-1: Direct firmware load for libertas/usb8388_v9.bin failed with error -2 [ 39.993433][ T21] usb 1-1: Direct firmware load for libertas/usb8388_v5.bin failed with error -2 [ 40.002703][ T21] usb 1-1: Direct firmware load for libertas/usb8388.bin failed with error -2 [ 40.011910][ T21] usb 1-1: Direct firmware load for usb8388.bin failed with error -2 [ 40.020175][ T21] ================================================================== [ 40.028301][ T21] BUG: KASAN: global-out-of-bounds in load_next_firmware_from_table+0x267/0x2d0 [ 40.037307][ T21] Read of size 8 at addr ffffffff860942b8 by task kworker/1:1/21 [ 40.045001][ T21] [ 40.047325][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Not tainted 5.2.0-rc6+ #13 [ 40.054761][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.064820][ T21] Workqueue: events request_firmware_work_func [ 40.070959][ T21] Call Trace: [ 40.074388][ T21] dump_stack+0xca/0x13e [ 40.078621][ T21] ? load_next_firmware_from_table+0x267/0x2d0 [ 40.084755][ T21] ? load_next_firmware_from_table+0x267/0x2d0 [ 40.090888][ T21] print_address_description+0x67/0x231 [ 40.096427][ T21] ? load_next_firmware_from_table+0x267/0x2d0 [ 40.102573][ T21] ? load_next_firmware_from_table+0x267/0x2d0 [ 40.108722][ T21] __kasan_report.cold+0x1a/0x32 [ 40.113658][ T21] ? load_next_firmware_from_table+0x267/0x2d0 [ 40.119878][ T21] kasan_report+0xe/0x20 [ 40.124109][ T21] load_next_firmware_from_table+0x267/0x2d0 [ 40.130180][ T21] ? main_firmware_cb+0x100/0x100 [ 40.135204][ T21] helper_firmware_cb+0xdc/0x100 [ 40.140130][ T21] request_firmware_work_func+0x126/0x242 [ 40.145848][ T21] ? request_firmware_into_buf+0x90/0x90 [ 40.151477][ T21] process_one_work+0x905/0x1570 [ 40.156397][ T21] ? pwq_dec_nr_in_flight+0x310/0x310 [ 40.161747][ T21] ? do_raw_spin_lock+0x11a/0x280 [ 40.166868][ T21] worker_thread+0x96/0xe20 [ 40.171441][ T21] ? process_one_work+0x1570/0x1570 [ 40.176646][ T21] kthread+0x30b/0x410 [ 40.180705][ T21] ? kthread_park+0x1a0/0x1a0 [ 40.185470][ T21] ret_from_fork+0x24/0x30 [ 40.189943][ T21] [ 40.192264][ T21] The buggy address belongs to the variable: [ 40.198232][ T21] fw_table+0x98/0x5c0 [ 40.202277][ T21] [ 40.204580][ T21] Memory state around the buggy address: [ 40.210183][ T21] ffffffff86094180: fa fa fa fa 00 04 fa fa fa fa fa fa 00 00 05 fa [ 40.218464][ T21] ffffffff86094200: fa fa fa fa 00 00 00 00 00 00 00 00 00 00 00 00 [ 40.226513][ T21] >ffffffff86094280: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 00 [ 40.234603][ T21] ^ [ 40.240491][ T21] ffffffff86094300: 00 00 00 01 fa fa fa fa 00 00 00 00 02 fa fa fa [ 40.248544][ T21] ffffffff86094380: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00 [ 40.256633][ T21] ================================================================== [ 40.264785][ T21] Disabling lock debugging due to kernel taint [ 40.270976][ T21] Kernel panic - not syncing: panic_on_warn set ... [ 40.272966][ T1753] usb-fuzzer-gadget dummy_udc.0: unregistering UDC driver [USB fuzzer] [ 40.277666][ T21] CPU: 1 PID: 21 Comm: kworker/1:1 Tainted: G B 5.2.0-rc6+ #13 [ 40.286075][ T1753] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 40.294703][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.302757][ T12] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 40.312003][ T21] Workqueue: events request_firmware_work_func [ 40.