Warning: Permanently added '10.128.0.49' (ECDSA) to the list of known hosts.
executing program
[   46.023342][   T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   46.263080][   T83] usb 1-1: Using ep0 maxpacket: 32
[   46.423149][   T83] usb 1-1: unable to get BOS descriptor or descriptor too short
[   46.513184][   T83] usb 1-1: config 128 has an invalid interface number: 143 but max is 0
[   46.522170][   T83] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping
[   46.532306][   T83] usb 1-1: config 128 has an invalid interface association descriptor of length 2, skipping
[   46.542906][   T83] usb 1-1: config 128 has no interface number 0
[   46.549248][   T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0x3 has invalid maxpacket 961, setting to 64
[   46.560405][   T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0xC has invalid maxpacket 453, setting to 64
[   46.571777][   T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0x7 has invalid maxpacket 563, setting to 64
[   46.583587][   T83] usb 1-1: config 128 interface 143 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 119
[   46.594356][   T83] usb 1-1: config 128 interface 143 altsetting 4 has a duplicate endpoint with address 0xC, skipping
[   46.623071][   T83] usb 1-1: config 128 interface 143 altsetting 4 endpoint 0xF has invalid maxpacket 112, setting to 64
[   46.634502][   T83] usb 1-1: config 128 interface 143 has no altsetting 0
[   46.873155][   T83] usb 1-1: string descriptor 0 read error: -22
[   46.880025][   T83] usb 1-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice= f.d3
[   46.889251][   T83] usb 1-1: New USB device strings: Mfr=87, Product=10, SerialNumber=4
[   46.935235][   T83] dw2102: su3000_identify_state
[   46.940235][   T83] dvb-usb: found a 'TeVii S632 USB' in warm state.
[   46.946933][   T83] dw2102: su3000_power_ctrl: 1, initialized 0
[   46.953242][   T83] dvb-usb: bulk message failed: -22 (2/-652482496)
[   46.961511][   T83] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   46.983470][   T83] dvbdev: DVB: registering new adapter (TeVii S632 USB)
[   46.991167][   T83] usb 1-1: media controller created
[   46.996895][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.003763][   T83] dw2102: i2c transfer failed.
[   47.008610][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.015520][   T83] dw2102: i2c transfer failed.
[   47.021633][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.029694][   T83] dw2102: i2c transfer failed.
[   47.036475][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.043280][   T83] dw2102: i2c transfer failed.
[   47.049486][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.057571][   T83] dw2102: i2c transfer failed.
[   47.074573][   T83] dvb-usb: bulk message failed: -22 (6/-2035973200)
[   47.094941][   T83] dw2102: i2c transfer failed.
[   47.099960][   T83] dvb-usb: MAC address: 02:02:02:02:02:02
executing program
[   47.111769][   T83] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   47.160477][   T83] dvb-usb: bulk message failed: -22 (1/0)
[   47.166463][   T83] dw2102: command 0x51 transfer failed.
[   47.174102][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.180851][   T83] dw2102: i2c transfer failed.
[   47.186025][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.193560][   T83] dw2102: i2c transfer failed.
[   47.198655][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.206218][   T83] dw2102: i2c transfer failed.
[   47.211320][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.218018][   T83] dw2102: i2c transfer failed.
[   47.222913][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.229759][   T83] dw2102: i2c transfer failed.
[   47.234696][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.241284][   T83] dw2102: i2c transfer failed.
[   47.296299][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.303244][   T83] dw2102: i2c transfer failed.
[   47.308148][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.314968][   T83] dw2102: i2c transfer failed.
[   47.319946][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.327108][   T83] dw2102: i2c transfer failed.
[   47.332134][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.338804][   T83] dw2102: i2c transfer failed.
[   47.343860][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.350621][   T83] dw2102: i2c transfer failed.
[   47.355620][   T83] dvb-usb: bulk message failed: -22 (5/-2035973200)
[   47.362627][   T83] dw2102: i2c transfer failed.
[   47.367596][   T83] ts2020 0-0060: Montage Technology TS2020 successfully identified
[   47.376264][   T83] dw2102: Attached RS2000/TS2020!
[   47.381504][   T83] usb 1-1: DVB: registering adapter 0 frontend 0 (M88RS2000 DVB-S)...
[   47.390084][   T83] dvbdev: dvb_create_media_entity: media entity 'M88RS2000 DVB-S' registered.
[   47.453386][   T83] Registered IR keymap rc-su3000
[   47.459433][   T83] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0
[   47.468969][   T83] input: TeVii S632 USB as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input5
[   47.479893][   T83] dvb-usb: schedule remote query interval to 150 msecs.
[   47.486945][   T83] dw2102: su3000_power_ctrl: 0, initialized 1
[   47.493055][   T83] dvb-usb: TeVii S632 USB successfully initialized and connected.
[   47.504657][   T83] usb 1-1: USB disconnect, device number 2
[   47.512366][   T83] ==================================================================
[   47.520775][   T83] BUG: KASAN: use-after-free in dvb_usb_device_exit+0x19a/0x1a0
[   47.528621][   T83] Read of size 8 at addr ffff8881d28bd8e0 by task kworker/1:2/83
[   47.536425][   T83] 
[   47.538751][   T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.3.0-rc5+ #28
[   47.546400][   T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   47.556692][   T83] Workqueue: usb_hub_wq hub_event
[   47.561712][   T83] Call Trace:
[   47.565005][   T83]  dump_stack+0xca/0x13e
[   47.569377][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   47.574667][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   47.580160][   T83]  print_address_description+0x6a/0x32c
[   47.585723][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   47.591005][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   47.596497][   T83]  __kasan_report.cold+0x1a/0x33
[   47.601557][   T83]  ? _raw_spin_trylock+0x50/0x50
[   47.606810][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   47.612194][   T83]  kasan_report+0xe/0x12
[   47.616534][   T83]  dvb_usb_device_exit+0x19a/0x1a0
[   47.621935][   T83]  ? dvb_usb_exit+0x290/0x290
[   47.626635][   T83]  ? usb_disable_endpoint+0x1ba/0x1f0
[   47.632173][   T83]  ? usb_disable_interface+0x140/0x1a0
[   47.637898][   T83]  usb_unbind_interface+0x1bd/0x8a0
[   47.643621][   T83]  ? usb_autoresume_device+0x60/0x60
[   47.649152][   T83]  device_release_driver_internal+0x42f/0x500
[   47.655661][   T83]  bus_remove_device+0x2dc/0x4a0
[   47.660856][   T83]  device_del+0x420/0xb10
[   47.665194][   T83]  ? __device_links_no_driver+0x240/0x240
[   47.671444][   T83]  ? usb_remove_ep_devs+0x3e/0x80
[   47.676807][   T83]  ? remove_intf_ep_devs+0x13f/0x1d0
[   47.682253][   T83]  usb_disable_device+0x211/0x690
[   47.687380][   T83]  usb_disconnect+0x284/0x8d0
[   47.692240][   T83]  hub_event+0x1454/0x3640
[   47.696800][   T83]  ? find_held_lock+0x2d/0x110
[   47.701575][   T83]  ? mark_held_locks+0xe0/0xe0
[   47.706562][   T83]  ? hub_port_debounce+0x260/0x260
[   47.711773][   T83]  process_one_work+0x92b/0x1530
[   47.716954][   T83]  ? pwq_dec_nr_in_flight+0x310/0x310
[   47.722979][   T83]  ? do_raw_spin_lock+0x11a/0x280
[   47.728532][   T83]  worker_thread+0x7ab/0xe20
[   47.733651][   T83]  ? process_one_work+0x1530/0x1530
[   47.739850][   T83]  kthread+0x318/0x420
[   47.744027][   T83]  ? kthread_create_on_node+0xf0/0xf0
[   47.749422][   T83]  ret_from_fork+0x24/0x30
[   47.753961][   T83] 
[   47.756279][   T83] Allocated by task 83:
[   47.760562][   T83]  save_stack+0x1b/0x80
[   47.764776][   T83]  __kasan_kmalloc.constprop.0+0xbf/0xd0
[   47.770635][   T83]  __kmalloc_track_caller+0xfd/0x330
[   47.776002][   T83]  kmemdup+0x23/0x50
[   47.779981][   T83]  dw2102_probe+0x627/0xc40
[   47.784497][   T83]  usb_probe_interface+0x305/0x7a0
[   47.789922][   T83]  really_probe+0x281/0x6d0
[   47.794498][   T83]  driver_probe_device+0x101/0x1b0
[   47.799617][   T83]  __device_attach_driver+0x1c2/0x220
[   47.804993][   T83]  bus_for_each_drv+0x162/0x1e0
[   47.810337][   T83]  __device_attach+0x217/0x360
[   47.815109][   T83]  bus_probe_device+0x1e4/0x290
[   47.820000][   T83]  device_add+0xae6/0x16f0
[   47.824645][   T83]  usb_set_configuration+0xdf6/0x1670
[   47.830172][   T83]  generic_probe+0x9d/0xd5
[   47.834772][   T83]  usb_probe_device+0x99/0x100
[   47.840700][   T83]  really_probe+0x281/0x6d0
[   47.845392][   T83]  driver_probe_device+0x101/0x1b0
[   47.850594][   T83]  __device_attach_driver+0x1c2/0x220
[   47.856163][   T83]  bus_for_each_drv+0x162/0x1e0
[   47.861005][   T83]  __device_attach+0x217/0x360
[   47.865855][   T83]  bus_probe_device+0x1e4/0x290
[   47.870804][   T83]  device_add+0xae6/0x16f0
[   47.875221][   T83]  usb_new_device.cold+0x6a4/0xe79
[   47.880547][   T83]  hub_event+0x1b5c/0x3640
[   47.884981][   T83]  process_one_work+0x92b/0x1530
[   47.890177][   T83]  worker_thread+0x96/0xe20
[   47.894677][   T83]  kthread+0x318/0x420
[   47.898745][   T83]  ret_from_fork+0x24/0x30
[   47.903151][   T83] 
[   47.905676][   T83] Freed by task 83:
[   47.909767][   T83]  save_stack+0x1b/0x80
[   47.914290][   T83]  __kasan_slab_free+0x130/0x180
[   47.919306][   T83]  kfree+0xe4/0x2f0
[   47.923181][   T83]  dw2102_probe+0x871/0xc40
[   47.927705][   T83]  usb_probe_interface+0x305/0x7a0
[   47.932819][   T83]  really_probe+0x281/0x6d0
[   47.937591][   T83]  driver_probe_device+0x101/0x1b0
[   47.943037][   T83]  __device_attach_driver+0x1c2/0x220
[   47.948526][   T83]  bus_for_each_drv+0x162/0x1e0
[   47.953383][   T83]  __device_attach+0x217/0x360
[   47.958249][   T83]  bus_probe_device+0x1e4/0x290
[   47.963106][   T83]  device_add+0xae6/0x16f0
[   47.967714][   T83]  usb_set_configuration+0xdf6/0x1670
[   47.973080][   T83]  generic_probe+0x9d/0xd5
[   47.977759][   T83]  usb_probe_device+0x99/0x100
[   47.982656][   T83]  really_probe+0x281/0x6d0
[   47.987210][   T83]  driver_probe_device+0x101/0x1b0
[   47.992321][   T83]  __device_attach_driver+0x1c2/0x220
[   47.997683][   T83]  bus_for_each_drv+0x162/0x1e0
[   48.002659][   T83]  __device_attach+0x217/0x360
[   48.007482][   T83]  bus_probe_device+0x1e4/0x290
[   48.012464][   T83]  device_add+0xae6/0x16f0
[   48.016933][   T83]  usb_new_device.cold+0x6a4/0xe79
[   48.022228][   T83]  hub_event+0x1b5c/0x3640
[   48.026789][   T83]  process_one_work+0x92b/0x1530
[   48.031871][   T83]  worker_thread+0x96/0xe20
[   48.036443][   T83]  kthread+0x318/0x420
[   48.040514][   T83]  ret_from_fork+0x24/0x30
[   48.044940][   T83] 
[   48.047475][   T83] The buggy address belongs to the object at ffff8881d28bd500
[   48.047475][   T83]  which belongs to the cache kmalloc-4k of size 4096
[   48.061894][   T83] The buggy address is located 992 bytes inside of
[   48.061894][   T83]  4096-byte region [ffff8881d28bd500, ffff8881d28be500)
[   48.075369][   T83] The buggy address belongs to the page:
[   48.081011][   T83] page:ffffea00074a2e00 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0
[   48.091948][   T83] flags: 0x200000000010200(slab|head)
[   48.097380][   T83] raw: 0200000000010200 ffffea00074a2800 0000000200000002 ffff8881da00c280
[   48.106135][   T83] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[   48.115223][   T83] page dumped because: kasan: bad access detected
[   48.122897][   T83] 
[   48.125231][   T83] Memory state around the buggy address:
[   48.130862][   T83]  ffff8881d28bd780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.139099][   T83]  ffff8881d28bd800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.147478][   T83] >ffff8881d28bd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.155593][   T83]                                                        ^
[   48.162981][   T83]  ffff8881d28bd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.171194][   T83]  ffff8881d28bd980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   48.179338][   T83] ==================================================================
[   48.187481][   T83] Disabling lock debugging due to kernel taint
[   48.193796][   T83] Kernel panic - not syncing: panic_on_warn set ...
[   48.200483][   T83] CPU: 1 PID: 83 Comm: kworker/1:2 Tainted: G    B             5.3.0-rc5+ #28
[   48.209307][   T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[   48.219837][   T83] Workqueue: usb_hub_wq hub_event
[   48.224912][   T83] Call Trace:
[   48.228275][   T83]  dump_stack+0xca/0x13e
[   48.232524][   T83]  panic+0x2a3/0x6da
[   48.236426][   T83]  ? add_taint.cold+0x16/0x16
[   48.241211][   T83]  ? retint_kernel+0x10/0x10
[   48.245810][   T83]  ? trace_hardirqs_on+0x55/0x1e0
[   48.250905][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   48.256207][   T83]  end_report+0x43/0x49
[   48.260462][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   48.266069][   T83]  __kasan_report.cold+0xd/0x33
[   48.271305][   T83]  ? _raw_spin_trylock+0x50/0x50
[   48.276377][   T83]  ? dvb_usb_device_exit+0x19a/0x1a0
[   48.281768][   T83]  kasan_report+0xe/0x12
[   48.286019][   T83]  dvb_usb_device_exit+0x19a/0x1a0
[   48.291114][   T83]  ? dvb_usb_exit+0x290/0x290
[   48.295964][   T83]  ? usb_disable_endpoint+0x1ba/0x1f0
[   48.301347][   T83]  ? usb_disable_interface+0x140/0x1a0
[   48.307107][   T83]  usb_unbind_interface+0x1bd/0x8a0
[   48.312376][   T83]  ? usb_autoresume_device+0x60/0x60
[   48.318415][   T83]  device_release_driver_internal+0x42f/0x500
[   48.324702][   T83]  bus_remove_device+0x2dc/0x4a0
[   48.329728][   T83]  device_del+0x420/0xb10
[   48.334086][   T83]  ? __device_links_no_driver+0x240/0x240
[   48.340017][   T83]  ? usb_remove_ep_devs+0x3e/0x80
[   48.345089][   T83]  ? remove_intf_ep_devs+0x13f/0x1d0
[   48.350474][   T83]  usb_disable_device+0x211/0x690
[   48.355613][   T83]  usb_disconnect+0x284/0x8d0
[   48.360294][   T83]  hub_event+0x1454/0x3640
[   48.365105][   T83]  ? find_held_lock+0x2d/0x110
[   48.369870][   T83]  ? mark_held_locks+0xe0/0xe0
[   48.374629][   T83]  ? hub_port_debounce+0x260/0x260
[   48.379991][   T83]  process_one_work+0x92b/0x1530
[   48.384935][   T83]  ? pwq_dec_nr_in_flight+0x310/0x310
[   48.390676][   T83]  ? do_raw_spin_lock+0x11a/0x280
[   48.395835][   T83]  worker_thread+0x7ab/0xe20
[   48.400454][   T83]  ? process_one_work+0x1530/0x1530
[   48.406052][   T83]  kthread+0x318/0x420
[   48.410438][   T83]  ? kthread_create_on_node+0xf0/0xf0
[   48.416046][   T83]  ret_from_fork+0x24/0x30
[   48.421442][   T83] Kernel Offset: disabled
[   48.425818][   T83] Rebooting in 86400 seconds..