Created
April 13, 2025 00:22
-
-
Save zhuowei/2d3b773c5739664e38521b1ec3043d03 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
[ 144.298552] [ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd | |
[ 144.431881] [ T39] usb 4-1: config 1 has an invalid interface number: 2 but max is 1 | |
[ 144.431962] [ T39] usb 4-1: config 1 has no interface number 1 | |
[ 144.434723] [ T39] usb 4-1: config 65 has no interfaces? | |
[ 144.436861] [ T39] usb 4-1: config 3 has no interfaces? | |
[ 144.438779] [ T39] usb 4-1: config 4 has no interfaces? | |
[ 144.441536] [ T39] usb 4-1: config 5 has no interfaces? | |
[ 144.445465] [ T39] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.00 | |
[ 144.445486] [ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 | |
[ 144.445494] [ T39] usb 4-1: Product: Generic USB Device | |
[ 144.445501] [ T39] usb 4-1: Manufacturer: FaceDancer | |
[ 144.445508] [ T39] usb 4-1: SerialNumber: S/N 3420E | |
[ 144.511092] [ T2389] usb 4-1: Fast Track Pro switching to config #2 | |
[ 144.511234] [ T308] ================================================================== | |
[ 144.511392] [ T308] BUG: KASAN: slab-out-of-bounds in usb_set_configuration+0x1458/0x1740 | |
[ 144.511587] [ T308] Read of size 1 at addr ffff00008f15ed4d by task kworker/0:2/308 | |
[ 144.511682] [ T308] | |
[ 144.511715] [ T308] CPU: 0 UID: 0 PID: 308 Comm: kworker/0:2 Kdump: loaded Tainted: G OE 6.11.0-14-generic #15 | |
[ 144.511860] [ T308] Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE | |
[ 144.511934] [ T308] Hardware name: VMware, Inc. VMware20,1/VBSA, BIOS VMW201.00V.24006586.BA64.2406042154 06/04/2024 | |
[ 144.512093] [ T308] Workqueue: events driver_set_config_work | |
[ 144.512176] [ T308] Call trace: | |
[ 144.512230] [ T308] dump_backtrace+0x1f8/0x220 | |
[ 144.512302] [ T308] show_stack+0x38/0x68 | |
[ 144.512350] [ T308] dump_stack_lvl+0xa4/0xe8 | |
[ 144.512426] [ T308] print_address_description.constprop.0+0x94/0x348 | |
[ 144.512509] [ T308] print_report+0x10c/0x228 | |
[ 144.512561] [ T308] kasan_report+0xb8/0x130 | |
[ 144.512640] [ T308] __asan_report_load1_noabort+0x24/0x50 | |
[ 144.512706] [ T308] usb_set_configuration+0x1458/0x1740 | |
[ 144.512770] [ T308] driver_set_config_work+0x12c/0x1c0 | |
[ 144.512833] [ T308] process_one_work+0x598/0x10e0 | |
[ 144.512898] [ T308] worker_thread+0x68c/0xe18 | |
[ 144.512951] [ T308] kthread+0x294/0x320 | |
[ 144.512999] [ T308] ret_from_fork+0x10/0x20 | |
[ 144.513051] [ T308] | |
[ 144.513075] [ T308] Allocated by task 39: | |
[ 144.513123] [ T308] kasan_save_stack+0x40/0x80 | |
[ 144.513128] [ T308] kasan_save_track+0x24/0x58 | |
[ 144.513132] [ T308] kasan_save_alloc_info+0x44/0x88 | |
[ 144.513136] [ T308] __kasan_kmalloc+0x108/0x110 | |
[ 144.513141] [ T308] __kmalloc_noprof+0x1ac/0x4c0 | |
[ 144.513145] [ T308] usb_get_configuration+0x88/0x540 | |
[ 144.513149] [ T308] usb_new_device+0x6dc/0x1240 | |
[ 144.513162] [ T308] hub_port_connect+0xa48/0x1e18 | |
[ 144.513166] [ T308] hub_port_connect_change+0x18c/0x5b0 | |
[ 144.513170] [ T308] port_event+0xad4/0xf30 | |
[ 144.513174] [ T308] hub_event+0x3c4/0xb90 | |
[ 144.513178] [ T308] process_one_work+0x598/0x10e0 | |
[ 144.513183] [ T308] worker_thread+0x68c/0xe18 | |
[ 144.513187] [ T308] kthread+0x294/0x320 | |
[ 144.513191] [ T308] ret_from_fork+0x10/0x20 | |
[ 144.513195] [ T308] | |
[ 144.513219] [ T308] The buggy address belongs to the object at ffff00008f15e000 | |
which belongs to the cache kmalloc-4k of size 4096 | |
[ 144.513382] [ T308] The buggy address is located 5 bytes to the right of | |
allocated 3400-byte region [ffff00008f15e000, ffff00008f15ed48) | |
[ 144.513549] [ T308] | |
[ 144.513573] [ T308] The buggy address belongs to the physical page: | |
[ 144.513652] [ T308] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f158 | |
[ 144.513663] [ T308] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 | |
[ 144.513667] [ T308] anon flags: 0x17fffc000000040(head|node=0|zone=2|lastcpupid=0x1ffff) | |
[ 144.513671] [ T308] page_type: 0xfdffffff(slab) | |
[ 144.513675] [ T308] raw: 017fffc000000040 ffff000080003040 0000000000000000 dead000000000001 | |
[ 144.513679] [ T308] raw: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 | |
[ 144.513682] [ T308] head: 017fffc000000040 ffff000080003040 0000000000000000 dead000000000001 | |
[ 144.513686] [ T308] head: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 | |
[ 144.513689] [ T308] head: 017fffc000000003 fffffdffc23c5601 ffffffffffffffff 0000000000000000 | |
[ 144.513692] [ T308] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 | |
[ 144.513695] [ T308] page dumped because: kasan: bad access detected | |
[ 144.513697] [ T308] | |
[ 144.513723] [ T308] Memory state around the buggy address: | |
[ 144.513787] [ T308] ffff00008f15ec00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
[ 144.513881] [ T308] ffff00008f15ec80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 | |
[ 144.513976] [ T308] >ffff00008f15ed00: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc | |
[ 144.514071] [ T308] ^ | |
[ 144.514145] [ T308] ffff00008f15ed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc | |
[ 144.514239] [ T308] ffff00008f15ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc | |
[ 144.514333] [ T308] ================================================================== | |
[ 144.514459] [ T308] Disabling lock debugging due to kernel taint | |
[ 144.516205] [ T2389] usbcore: registered new interface driver snd-usb-audio | |
[ 321.231110] [ T39] usb 4-1: USB disconnect, device number 2 | |
[ 321.234205] [ T39] Unable to handle kernel paging request at virtual address 00119a03b0000008 | |
[ 321.234526] [ T39] Mem abort info: | |
[ 321.234613] [ T39] ESR = 0x0000000096000004 | |
[ 321.234727] [ T39] EC = 0x25: DABT (current EL), IL = 32 bits | |
[ 321.234971] [ T39] SET = 0, FnV = 0 | |
[ 321.235101] [ T39] EA = 0, S1PTW = 0 | |
[ 321.235236] [ T39] FSC = 0x04: level 0 translation fault | |
[ 321.235427] [ T39] Data abort info: | |
[ 321.235545] [ T39] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000 | |
[ 321.235750] [ T39] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 | |
[ 321.236011] [ T39] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 | |
[ 321.236232] [ T39] [00119a03b0000008] address between user and kernel address ranges | |
[ 321.236558] [ T39] Internal error: Oops: 0000000096000004 [#1] SMP | |
[ 321.237246] [ T39] Modules linked in: snd_usb_audio snd_usbmidi_lib snd_ump dummy_hcd raw_gadget(OE) udc_core snd_seq_dummy snd_hrtimer qrtr binfmt_misc snd_hda_codec_generic aes_ce_blk snd_hda_intel aes_ce_cipher snd_intel_dspcfg crct10dif_ce snd_hda_codec polyval_ce polyval_generic snd_hwdep ghash_ce snd_hda_core uvcvideo snd_pcm uvc sm4 videobuf2_vmalloc videobuf2_memops sha3_ce videobuf2_v4l2 sha2_ce snd_seq_midi sha256_arm64 nls_iso8859_1 sha1_ce snd_seq_midi_event videodev snd_rawmidi snd_seq videobuf2_common vmwgfx mc snd_seq_device drm_ttm_helper snd_timer snd ttm soundcore joydev input_leds sch_fq_codel efi_pstore nfnetlink vsock_loopback vmw_vsock_virtio_transport_common vmw_vsock_vmci_transport vmw_vmci vsock dmi_sysfs ip_tables x_tables autofs4 hid_generic usbhid hid nvme nvme_core e1000e nvme_auth xhci_pci xhci_pci_renesas ahci | |
[ 321.241353] [ T39] CPU: 3 UID: 0 PID: 39 Comm: kworker/3:0 Kdump: loaded Tainted: G B OE 6.11.0-14-generic #15 | |
[ 321.241600] [ T39] Tainted: [B]=BAD_PAGE, [O]=OOT_MODULE, [E]=UNSIGNED_MODULE | |
[ 321.241752] [ T39] Hardware name: VMware, Inc. VMware20,1/VBSA, BIOS VMW201.00V.24006586.BA64.2406042154 06/04/2024 | |
[ 321.242121] [ T39] Workqueue: usb_hub_wq hub_event | |
[ 321.242551] [ T39] pstate: 21400005 (nzCv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=--) | |
[ 321.242725] [ T39] pc : kfree+0x6c/0x330 | |
[ 321.242976] [ T39] lr : usb_destroy_configuration+0x1dc/0x588 | |
[ 321.243151] [ T39] sp : ffff800088637450 | |
[ 321.243275] [ T39] x29: ffff800088637460 x28: 1fffe00011c8a7f0 x27: ffff00008e453f80 | |
[ 321.243509] [ T39] x26: 0000000000000000 x25: 0000000000000000 x24: 0000000000000003 | |
[ 321.243680] [ T39] x23: ffff00008f15eff0 x22: aff08000825dab44 x21: 046600fc00000027 | |
[ 321.243897] [ T39] x20: dfff800000000000 x19: 00119a03b0000000 x18: ffff80008837d078 | |
[ 321.244068] [ T39] x17: 0000000000000000 x16: 0000000000000000 x15: ffff8000825b33f4 | |
[ 321.244237] [ T39] x14: ffff8000825b160c x13: ffff800080213c5c x12: 0000000000000000 | |
[ 321.244401] [ T39] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff8000825dab44 | |
[ 321.244567] [ T39] x8 : ffff800088637490 x7 : 0000000000000000 x6 : 0000000000000000 | |
[ 321.244818] [ T39] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff000080744dc8 | |
[ 321.244991] [ T39] x2 : 0000000082000000 x1 : 0000000080000000 x0 : fffffdffc0000000 | |
[ 321.245159] [ T39] Call trace: | |
[ 321.245254] [ T39] kfree+0x6c/0x330 | |
[ 321.245373] [ T39] usb_destroy_configuration+0x1dc/0x588 | |
[ 321.245507] [ T39] usb_release_dev+0x50/0x148 | |
[ 321.245599] [ T39] device_release+0x98/0x220 | |
[ 321.245722] [ T39] kobject_cleanup+0xfc/0x3a0 | |
[ 321.245899] [ T39] kobject_put+0x194/0x1e0 | |
[ 321.245990] [ T39] put_device+0x34/0x60 | |
[ 321.246075] [ T39] usb_disconnect+0x54c/0x7a8 | |
[ 321.246173] [ T39] hub_port_connect+0x1bc/0x1e18 | |
[ 321.246276] [ T39] hub_port_connect_change+0x18c/0x5b0 | |
[ 321.246391] [ T39] port_event+0xad4/0xf30 | |
[ 321.246521] [ T39] hub_event+0x3c4/0xb90 | |
[ 321.246614] [ T39] process_one_work+0x598/0x10e0 | |
[ 321.246817] [ T39] worker_thread+0x68c/0xe18 | |
[ 321.246948] [ T39] kthread+0x294/0x320 | |
[ 321.247067] [ T39] ret_from_fork+0x10/0x20 | |
[ 321.247190] [ T39] Code: d34cfe73 f2dfbfe0 52b00001 8b131813 (f9400660) | |
[ 321.247447] [ T39] SMP: stopping secondary CPUs | |
[ 321.250306] [ T39] Starting crashdump kernel... | |
[ 321.250433] [ T39] Bye! |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment