Skip to content

Instantly share code, notes, and snippets.

@zhuowei
Created April 13, 2025 00:22
Show Gist options
  • Save zhuowei/2d3b773c5739664e38521b1ec3043d03 to your computer and use it in GitHub Desktop.
Save zhuowei/2d3b773c5739664e38521b1ec3043d03 to your computer and use it in GitHub Desktop.
[ 144.298552] [ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 144.431881] [ T39] usb 4-1: config 1 has an invalid interface number: 2 but max is 1
[ 144.431962] [ T39] usb 4-1: config 1 has no interface number 1
[ 144.434723] [ T39] usb 4-1: config 65 has no interfaces?
[ 144.436861] [ T39] usb 4-1: config 3 has no interfaces?
[ 144.438779] [ T39] usb 4-1: config 4 has no interfaces?
[ 144.441536] [ T39] usb 4-1: config 5 has no interfaces?
[ 144.445465] [ T39] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.00
[ 144.445486] [ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 144.445494] [ T39] usb 4-1: Product: Generic USB Device
[ 144.445501] [ T39] usb 4-1: Manufacturer: FaceDancer
[ 144.445508] [ T39] usb 4-1: SerialNumber: S/N 3420E
[ 144.511092] [ T2389] usb 4-1: Fast Track Pro switching to config #2
[ 144.511234] [ T308] ==================================================================
[ 144.511392] [ T308] BUG: KASAN: slab-out-of-bounds in usb_set_configuration+0x1458/0x1740
[ 144.511587] [ T308] Read of size 1 at addr ffff00008f15ed4d by task kworker/0:2/308
[ 144.511682] [ T308]
[ 144.511715] [ T308] CPU: 0 UID: 0 PID: 308 Comm: kworker/0:2 Kdump: loaded Tainted: G OE 6.11.0-14-generic #15
[ 144.511860] [ T308] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[ 144.511934] [ T308] Hardware name: VMware, Inc. VMware20,1/VBSA, BIOS VMW201.00V.24006586.BA64.2406042154 06/04/2024
[ 144.512093] [ T308] Workqueue: events driver_set_config_work
[ 144.512176] [ T308] Call trace:
[ 144.512230] [ T308] dump_backtrace+0x1f8/0x220
[ 144.512302] [ T308] show_stack+0x38/0x68
[ 144.512350] [ T308] dump_stack_lvl+0xa4/0xe8
[ 144.512426] [ T308] print_address_description.constprop.0+0x94/0x348
[ 144.512509] [ T308] print_report+0x10c/0x228
[ 144.512561] [ T308] kasan_report+0xb8/0x130
[ 144.512640] [ T308] __asan_report_load1_noabort+0x24/0x50
[ 144.512706] [ T308] usb_set_configuration+0x1458/0x1740
[ 144.512770] [ T308] driver_set_config_work+0x12c/0x1c0
[ 144.512833] [ T308] process_one_work+0x598/0x10e0
[ 144.512898] [ T308] worker_thread+0x68c/0xe18
[ 144.512951] [ T308] kthread+0x294/0x320
[ 144.512999] [ T308] ret_from_fork+0x10/0x20
[ 144.513051] [ T308]
[ 144.513075] [ T308] Allocated by task 39:
[ 144.513123] [ T308] kasan_save_stack+0x40/0x80
[ 144.513128] [ T308] kasan_save_track+0x24/0x58
[ 144.513132] [ T308] kasan_save_alloc_info+0x44/0x88
[ 144.513136] [ T308] __kasan_kmalloc+0x108/0x110
[ 144.513141] [ T308] __kmalloc_noprof+0x1ac/0x4c0
[ 144.513145] [ T308] usb_get_configuration+0x88/0x540
[ 144.513149] [ T308] usb_new_device+0x6dc/0x1240
[ 144.513162] [ T308] hub_port_connect+0xa48/0x1e18
[ 144.513166] [ T308] hub_port_connect_change+0x18c/0x5b0
[ 144.513170] [ T308] port_event+0xad4/0xf30
[ 144.513174] [ T308] hub_event+0x3c4/0xb90
[ 144.513178] [ T308] process_one_work+0x598/0x10e0
[ 144.513183] [ T308] worker_thread+0x68c/0xe18
[ 144.513187] [ T308] kthread+0x294/0x320
[ 144.513191] [ T308] ret_from_fork+0x10/0x20
[ 144.513195] [ T308]
[ 144.513219] [ T308] The buggy address belongs to the object at ffff00008f15e000
which belongs to the cache kmalloc-4k of size 4096
[ 144.513382] [ T308] The buggy address is located 5 bytes to the right of
allocated 3400-byte region [ffff00008f15e000, ffff00008f15ed48)
[ 144.513549] [ T308]
[ 144.513573] [ T308] The buggy address belongs to the physical page:
[ 144.513652] [ T308] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f158
[ 144.513663] [ T308] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 144.513667] [ T308] anon flags: 0x17fffc000000040(head|node=0|zone=2|lastcpupid=0x1ffff)
[ 144.513671] [ T308] page_type: 0xfdffffff(slab)
[ 144.513675] [ T308] raw: 017fffc000000040 ffff000080003040 0000000000000000 dead000000000001
[ 144.513679] [ T308] raw: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000
[ 144.513682] [ T308] head: 017fffc000000040 ffff000080003040 0000000000000000 dead000000000001
[ 144.513686] [ T308] head: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000
[ 144.513689] [ T308] head: 017fffc000000003 fffffdffc23c5601 ffffffffffffffff 0000000000000000
[ 144.513692] [ T308] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[ 144.513695] [ T308] page dumped because: kasan: bad access detected
[ 144.513697] [ T308]
[ 144.513723] [ T308] Memory state around the buggy address:
[ 144.513787] [ T308] ffff00008f15ec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 144.513881] [ T308] ffff00008f15ec80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 144.513976] [ T308] >ffff00008f15ed00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[ 144.514071] [ T308] ^
[ 144.514145] [ T308] ffff00008f15ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 144.514239] [ T308] ffff00008f15ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 144.514333] [ T308] ==================================================================
[ 144.514459] [ T308] Disabling lock debugging due to kernel taint
[ 144.516205] [ T2389] usbcore: registered new interface driver snd-usb-audio
[ 321.231110] [ T39] usb 4-1: USB disconnect, device number 2
[ 321.234205] [ T39] Unable to handle kernel paging request at virtual address 00119a03b0000008
[ 321.234526] [ T39] Mem abort info:
[ 321.234613] [ T39] ESR = 0x0000000096000004
[ 321.234727] [ T39] EC = 0x25: DABT (current EL), IL = 32 bits
[ 321.234971] [ T39] SET = 0, FnV = 0
[ 321.235101] [ T39] EA = 0, S1PTW = 0
[ 321.235236] [ T39] FSC = 0x04: level 0 translation fault
[ 321.235427] [ T39] Data abort info:
[ 321.235545] [ T39] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000
[ 321.235750] [ T39] CM = 0, WnR = 0, TnD = 0, TagAccess = 0
[ 321.236011] [ T39] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[ 321.236232] [ T39] [00119a03b0000008] address between user and kernel address ranges
[ 321.236558] [ T39] Internal error: Oops: 0000000096000004 [#1] SMP
[ 321.237246] [ T39] Modules linked in: snd_usb_audio snd_usbmidi_lib snd_ump dummy_hcd raw_gadget(OE) udc_core snd_seq_dummy snd_hrtimer qrtr binfmt_misc snd_hda_codec_generic aes_ce_blk snd_hda_intel aes_ce_cipher snd_intel_dspcfg crct10dif_ce snd_hda_codec polyval_ce polyval_generic snd_hwdep ghash_ce snd_hda_core uvcvideo snd_pcm uvc sm4 videobuf2_vmalloc videobuf2_memops sha3_ce videobuf2_v4l2 sha2_ce snd_seq_midi sha256_arm64 nls_iso8859_1 sha1_ce snd_seq_midi_event videodev snd_rawmidi snd_seq videobuf2_common vmwgfx mc snd_seq_device drm_ttm_helper snd_timer snd ttm soundcore joydev input_leds sch_fq_codel efi_pstore nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vmw_vmci vsock dmi_sysfs ip_tables x_tables autofs4 hid_generic usbhid hid nvme nvme_core e1000e nvme_auth xhci_pci xhci_pci_renesas ahci
[ 321.241353] [ T39] CPU: 3 UID: 0 PID: 39 Comm: kworker/3:0 Kdump: loaded Tainted: G B OE 6.11.0-14-generic #15
[ 321.241600] [ T39] Tainted: [B]=BAD_PAGE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE
[ 321.241752] [ T39] Hardware name: VMware, Inc. VMware20,1/VBSA, BIOS VMW201.00V.24006586.BA64.2406042154 06/04/2024
[ 321.242121] [ T39] Workqueue: usb_hub_wq hub_event
[ 321.242551] [ T39] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--)
[ 321.242725] [ T39] pc : kfree+0x6c/0x330
[ 321.242976] [ T39] lr : usb_destroy_configuration+0x1dc/0x588
[ 321.243151] [ T39] sp : ffff800088637450
[ 321.243275] [ T39] x29: ffff800088637460 x28: 1fffe00011c8a7f0 x27: ffff00008e453f80
[ 321.243509] [ T39] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000003
[ 321.243680] [ T39] x23: ffff00008f15eff0 x22: aff08000825dab44 x21: 046600fc00000027
[ 321.243897] [ T39] x20: dfff800000000000 x19: 00119a03b0000000 x18: ffff80008837d078
[ 321.244068] [ T39] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000825b33f4
[ 321.244237] [ T39] x14: ffff8000825b160c x13: ffff800080213c5c x12: 0000000000000000
[ 321.244401] [ T39] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000825dab44
[ 321.244567] [ T39] x8 : ffff800088637490 x7 : 0000000000000000 x6 : 0000000000000000
[ 321.244818] [ T39] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff000080744dc8
[ 321.244991] [ T39] x2 : 0000000082000000 x1 : 0000000080000000 x0 : fffffdffc0000000
[ 321.245159] [ T39] Call trace:
[ 321.245254] [ T39] kfree+0x6c/0x330
[ 321.245373] [ T39] usb_destroy_configuration+0x1dc/0x588
[ 321.245507] [ T39] usb_release_dev+0x50/0x148
[ 321.245599] [ T39] device_release+0x98/0x220
[ 321.245722] [ T39] kobject_cleanup+0xfc/0x3a0
[ 321.245899] [ T39] kobject_put+0x194/0x1e0
[ 321.245990] [ T39] put_device+0x34/0x60
[ 321.246075] [ T39] usb_disconnect+0x54c/0x7a8
[ 321.246173] [ T39] hub_port_connect+0x1bc/0x1e18
[ 321.246276] [ T39] hub_port_connect_change+0x18c/0x5b0
[ 321.246391] [ T39] port_event+0xad4/0xf30
[ 321.246521] [ T39] hub_event+0x3c4/0xb90
[ 321.246614] [ T39] process_one_work+0x598/0x10e0
[ 321.246817] [ T39] worker_thread+0x68c/0xe18
[ 321.246948] [ T39] kthread+0x294/0x320
[ 321.247067] [ T39] ret_from_fork+0x10/0x20
[ 321.247190] [ T39] Code: d34cfe73 f2dfbfe0 52b00001 8b131813 (f9400660)
[ 321.247447] [ T39] SMP: stopping secondary CPUs
[ 321.250306] [ T39] Starting crashdump kernel...
[ 321.250433] [ T39] Bye!
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment