[BUG] KASAN: slab-use-after-free Write in media_devnode_remove
From: Farhad Alemi
Date: Thu Sep 10 2026 - 20:38:42 EST
Hello,
We are reporting the following crash (reproducer attached and a
proposed patch forthcoming):
Linux version 7.3.0-rc2 50d05c7c76c96b90462f24debacca971d2e86713
Build Config: UpstreamAppArmorKASAN (KASAN + UBSAN, panic_on_warn=1)
[ 50.855615][ T2232] usb 3-1: new high-speed USB device number 2
using dummy_hcd
[ 51.026953][ T2232] usb 3-1: New USB device found, idVendor=1d19,
idProduct=6108, bcdDevice= 1.00
[ 51.029344][ T2232] usb 3-1: New USB device strings: Mfr=0,
Product=0, SerialNumber=0
[ 51.051658][ T2232] cx231xx 3-1:1.1: New device @ 480 Mbps
(1d19:6108) with 2 interfaces
[ 51.055021][ T2232] cx231xx 3-1:1.1: Identified as Pixelview
Xcapture USB (card=11)
[ 51.081696][ T2232] i2c i2c-3: Added multiplexed i2c bus 5
[ 51.089372][ T2232] i2c i2c-3: Added multiplexed i2c bus 6
[ 51.264419][ T2232] cx231xx 3-1:1.1: can't change interface 3 alt
no. to 0 (err=-22)
[ 51.264437][ T2232] cx231xx 3-1:1.1: can't change interface 5 alt
no. to 0 (err=-22)
[ 51.287448][ T2232] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 51.287927][ T2232] cx25840 2-0044: cx23887 A/V decoder found @
0x88 (cx231xx #0-0)
[ 51.329008][ T9335] cx25840 2-0044: Direct firmware load for
v4l-cx23885-avcore-01.fw failed with error -2
[ 51.329023][ T9335] cx25840 2-0044: Falling back to sysfs fallback
for: v4l-cx23885-avcore-01.fw
[ 51.333195][ T9335] cx25840 2-0044: unable to open firmware
v4l-cx23885-avcore-01.fw
[ 51.375824][ T2232] cx231xx 3-1:1.1: v4l2 driver version 0.0.3
[ 51.476296][ T2232] cx231xx 3-1:1.1: Registered video device video103 [v4l2]
[ 51.476315][ T2232] videodev: could not get a free minor
[ 51.476319][ T2232] cx231xx 3-1:1.1: unable to register vbi device
[ 51.476350][ T2232] cx231xx 3-1:1.1: V4L2 device video103 deregistered
[ 51.479869][ T2232]
==================================================================
[ 51.479875][ T2232] BUG: KASAN: slab-use-after-free in
__mutex_lock+0x156/0x1580
[ 51.479899][ T2232] Read of size 8 at addr ffff888027dbb1b0 by task
kworker/0:3/2232
[ 51.479905][ T2232]
[ 51.479915][ T2232] CPU: 0 UID: 0 PID: 2232 Comm: kworker/0:3 Not
tainted 7.3.0-rc2-00099-g50d05c7c76c9 #1 PREEMPT(full)
[ 51.479924][ T2232] Hardware name: QEMU Standard PC (Q35 + ICH9,
2009), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014
[ 51.479929][ T2232] Workqueue: usb_hub_wq hub_event
[ 51.479949][ T2232] Call Trace:
[ 51.479954][ T2232] <TASK>
[ 51.479959][ T2232] dump_stack_lvl+0xe8/0x150
[ 51.479969][ T2232] print_address_description+0x55/0x1e0
[ 51.479978][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.479984][ T2232] print_report+0x58/0x70
[ 51.479990][ T2232] kasan_report+0x117/0x150
[ 51.480002][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.480009][ T2232] __mutex_lock+0x156/0x1580
[ 51.480017][ T2232] ? media_devnode_remove+0x55/0x1e0
[ 51.480028][ T2232] ? v4l2_device_release+0x1f2/0x470
[ 51.480039][ T2232] ? __pfx___mutex_lock+0x10/0x10
[ 51.480045][ T2232] ? __mutex_unlock_slowpath+0x731/0x900
[ 51.480056][ T2232] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 51.480066][ T2232] ? cdev_dynamic_release+0x1a5/0x1c0
[ 51.480077][ T2232] media_devnode_remove+0x55/0x1e0
[ 51.480088][ T2232] v4l2_device_release+0x271/0x470
[ 51.480098][ T2232] ? __pfx_v4l2_device_release+0x10/0x10
[ 51.480108][ T2232] device_release+0xc4/0x1f0
[ 51.480126][ T2232] kobject_put+0x228/0x560
[ 51.480135][ T2232] cx231xx_release_analog_resources+0x290/0x2b0
[ 51.480145][ T2232] cx231xx_usb_probe+0x113b/0x2100
[ 51.480157][ T2232] usb_probe_interface+0x71f/0xe00
[ 51.480179][ T2232] ? __pfx_usb_probe_interface+0x10/0x10
[ 51.480190][ T2232] ? driver_sysfs_add+0x1fe/0x210
[ 51.480198][ T2232] ? __pfx_usb_probe_interface+0x10/0x10
[ 51.480206][ T2232] really_probe+0x267/0xaf0
[ 51.480215][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.480223][ T2232] driver_probe_device+0x4f/0x240
[ 51.480231][ T2232] __device_attach_driver+0x270/0x410
[ 51.480239][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.480248][ T2232] ? __pfx___device_attach_driver+0x10/0x10
[ 51.480256][ T2232] ? __pfx_bus_for_each_drv+0x10/0x10
[ 51.480265][ T2232] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 51.480275][ T2232] __device_attach+0x2c5/0x450
[ 51.480283][ T2232] ? __pfx___device_attach+0x10/0x10
[ 51.480291][ T2232] ? _raw_spin_unlock+0x28/0x50
[ 51.480299][ T2232] device_initial_probe+0xa1/0xd0
[ 51.480307][ T2232] bus_probe_device+0x12a/0x220
[ 51.480316][ T2232] device_add+0x7ec/0xb90
[ 51.480323][ T2232] usb_set_configuration+0x1a87/0x2110
[ 51.480336][ T2232] usb_generic_driver_probe+0x8d/0x150
[ 51.480345][ T2232] usb_probe_device+0x1c4/0x3b0
[ 51.480354][ T2232] ? __pfx_usb_probe_device+0x10/0x10
[ 51.480363][ T2232] really_probe+0x267/0xaf0
[ 51.480371][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.480379][ T2232] driver_probe_device+0x4f/0x240
[ 51.480386][ T2232] __device_attach_driver+0x270/0x410
[ 51.480395][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.480404][ T2232] ? __pfx___device_attach_driver+0x10/0x10
[ 51.480411][ T2232] ? __pfx_bus_for_each_drv+0x10/0x10
[ 51.480421][ T2232] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 51.480430][ T2232] __device_attach+0x2c5/0x450
[ 51.480437][ T2232] ? __pfx___device_attach+0x10/0x10
[ 51.480445][ T2232] ? _raw_spin_unlock+0x28/0x50
[ 51.480453][ T2232] device_initial_probe+0xa1/0xd0
[ 51.480461][ T2232] bus_probe_device+0x12a/0x220
[ 51.480470][ T2232] device_add+0x7ec/0xb90
[ 51.480477][ T2232] usb_new_device+0xa14/0x1720
[ 51.480486][ T2232] ? __pfx_usb_new_device+0x10/0x10
[ 51.480493][ T2232] ? _raw_spin_unlock_irq+0x23/0x50
[ 51.480502][ T2232] hub_event+0x2a1c/0x4f30
[ 51.480510][ T2232] ? do_raw_spin_unlock+0xf5/0x200
[ 51.480524][ T2232] ? __pfx_hub_event+0x10/0x10
[ 51.480533][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.480544][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.480554][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.480564][ T2232] process_scheduled_works+0xc99/0x1900
[ 51.480578][ T2232] ? __pfx_process_scheduled_works+0x10/0x10
[ 51.480588][ T2232] ? assign_work+0x3d5/0x5e0
[ 51.480599][ T2232] worker_thread+0xa53/0xfc0
[ 51.480609][ T2232] kthread+0x38b/0x480
[ 51.480617][ T2232] ? __pfx_worker_thread+0x10/0x10
[ 51.480623][ T2232] ? __pfx_kthread+0x10/0x10
[ 51.480631][ T2232] ret_from_fork+0x514/0xb70
[ 51.480639][ T2232] ? __pfx_ret_from_fork+0x10/0x10
[ 51.480647][ T2232] ? __switch_to+0xc79/0x1410
[ 51.480654][ T2232] ? __pfx_kthread+0x10/0x10
[ 51.480661][ T2232] ret_from_fork_asm+0x1a/0x30
[ 51.480671][ T2232] </TASK>
[ 51.480674][ T2232]
[ 51.480678][ T2232] Allocated by task 2232:
[ 51.480681][ T2232] kasan_save_track+0x3e/0x80
[ 51.480689][ T2232] __kasan_kmalloc+0x93/0xb0
[ 51.480697][ T2232] __kmalloc_cache_noprof+0x325/0x610
[ 51.480705][ T2232] cx231xx_usb_probe+0x7de/0x2100
[ 51.480713][ T2232] usb_probe_interface+0x71f/0xe00
[ 51.480721][ T2232] really_probe+0x267/0xaf0
[ 51.480727][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.480734][ T2232] driver_probe_device+0x4f/0x240
[ 51.480740][ T2232] __device_attach_driver+0x270/0x410
[ 51.480747][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.480755][ T2232] __device_attach+0x2c5/0x450
[ 51.480761][ T2232] device_initial_probe+0xa1/0xd0
[ 51.480769][ T2232] bus_probe_device+0x12a/0x220
[ 51.480777][ T2232] device_add+0x7ec/0xb90
[ 51.480782][ T2232] usb_set_configuration+0x1a87/0x2110
[ 51.480790][ T2232] usb_generic_driver_probe+0x8d/0x150
[ 51.480797][ T2232] usb_probe_device+0x1c4/0x3b0
[ 51.480805][ T2232] really_probe+0x267/0xaf0
[ 51.480812][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.480818][ T2232] driver_probe_device+0x4f/0x240
[ 51.480825][ T2232] __device_attach_driver+0x270/0x410
[ 51.480831][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.480839][ T2232] __device_attach+0x2c5/0x450
[ 51.480845][ T2232] device_initial_probe+0xa1/0xd0
[ 51.480851][ T2232] bus_probe_device+0x12a/0x220
[ 51.480859][ T2232] device_add+0x7ec/0xb90
[ 51.480865][ T2232] usb_new_device+0xa14/0x1720
[ 51.480870][ T2232] hub_event+0x2a1c/0x4f30
[ 51.480877][ T2232] process_scheduled_works+0xc99/0x1900
[ 51.480887][ T2232] worker_thread+0xa53/0xfc0
[ 51.480892][ T2232] kthread+0x38b/0x480
[ 51.480899][ T2232] ret_from_fork+0x514/0xb70
[ 51.480906][ T2232] ret_from_fork_asm+0x1a/0x30
[ 51.480912][ T2232]
[ 51.480914][ T2232] Freed by task 2232:
[ 51.480917][ T2232] kasan_save_track+0x3e/0x80
[ 51.480924][ T2232] kasan_save_free_info+0x46/0x50
[ 51.480931][ T2232] __kasan_slab_free+0x5c/0x80
[ 51.480938][ T2232] kfree+0x1c5/0x650
[ 51.480944][ T2232] cx231xx_usb_probe+0x10cb/0x2100
[ 51.480953][ T2232] usb_probe_interface+0x71f/0xe00
[ 51.480961][ T2232] really_probe+0x267/0xaf0
[ 51.480967][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.480974][ T2232] driver_probe_device+0x4f/0x240
[ 51.480980][ T2232] __device_attach_driver+0x270/0x410
[ 51.480987][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.480995][ T2232] __device_attach+0x2c5/0x450
[ 51.481001][ T2232] device_initial_probe+0xa1/0xd0
[ 51.481007][ T2232] bus_probe_device+0x12a/0x220
[ 51.481015][ T2232] device_add+0x7ec/0xb90
[ 51.481021][ T2232] usb_set_configuration+0x1a87/0x2110
[ 51.481028][ T2232] usb_generic_driver_probe+0x8d/0x150
[ 51.481035][ T2232] usb_probe_device+0x1c4/0x3b0
[ 51.481043][ T2232] really_probe+0x267/0xaf0
[ 51.481050][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.481056][ T2232] driver_probe_device+0x4f/0x240
[ 51.481063][ T2232] __device_attach_driver+0x270/0x410
[ 51.481070][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.481078][ T2232] __device_attach+0x2c5/0x450
[ 51.481083][ T2232] device_initial_probe+0xa1/0xd0
[ 51.481090][ T2232] bus_probe_device+0x12a/0x220
[ 51.481098][ T2232] device_add+0x7ec/0xb90
[ 51.481103][ T2232] usb_new_device+0xa14/0x1720
[ 51.481109][ T2232] hub_event+0x2a1c/0x4f30
[ 51.481120][ T2232] process_scheduled_works+0xc99/0x1900
[ 51.481129][ T2232] worker_thread+0xa53/0xfc0
[ 51.481135][ T2232] kthread+0x38b/0x480
[ 51.481141][ T2232] ret_from_fork+0x514/0xb70
[ 51.481148][ T2232] ret_from_fork_asm+0x1a/0x30
[ 51.481155][ T2232]
[ 51.481157][ T2232] The buggy address belongs to the object at
ffff888027dbb000
[ 51.481157][ T2232] which belongs to the cache kmalloc-1k of size 1024
[ 51.481165][ T2232] The buggy address is located 432 bytes inside of
[ 51.481165][ T2232] freed 1024-byte region [ffff888027dbb000,
ffff888027dbb400)
[ 51.481172][ T2232]
[ 51.481174][ T2232] The buggy address belongs to the physical page:
[ 51.481181][ T2232] page: refcount:0 mapcount:0
mapping:0000000000000000 index:0xffff888027db8800 pfn:0x27db8
[ 51.481189][ T2232] head: order:3 mapcount:0 entire_mapcount:0
nr_pages_mapped:0 pincount:0
[ 51.481194][ T2232] flags:
0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 51.481205][ T2232] page_type: f5(slab)
[ 51.481214][ T2232] raw: 00fff00000000240 ffff88801b041dc0
ffffea0000953210 ffffea00009fd610
[ 51.481220][ T2232] raw: ffff888027db8800 000000000010000f
00000000f5000000 0000000000000000
[ 51.481226][ T2232] head: 00fff00000000240 ffff88801b041dc0
ffffea0000953210 ffffea00009fd610
[ 51.481232][ T2232] head: ffff888027db8800 000000000010000f
00000000f5000000 0000000000000000
[ 51.481237][ T2232] head: 00fff00000000003 fffffffffffffe01
00000000ffffffff 00000000ffffffff
[ 51.481243][ T2232] head: ffffffffffffffff 0000000000000000
00000000ffffffff 0000000000000008
[ 51.481246][ T2232] page dumped because: kasan: bad access detected
[ 51.481252][ T2232] page_owner tracks the page as allocated
[ 51.481255][ T2232] page last allocated via order 3, migratetype
Unmovable, gfp_mask
0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC),
pid 9116, tgid 9116 ((spawn)), ts 30296335129
[ 51.481266][ T2232] post_alloc_hook+0x1f9/0x250
[ 51.481273][ T2232] get_page_from_freelist+0x235a/0x23e0
[ 51.481281][ T2232] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 51.481289][ T2232] allocate_slab+0x7d/0x610
[ 51.481295][ T2232] refill_objects+0x2d6/0x350
[ 51.481300][ T2232] __pcs_replace_empty_main+0x2c9/0x6c0
[ 51.481309][ T2232] __kmalloc_noprof+0x48b/0x720
[ 51.481316][ T2232] load_elf_binary+0x2c4/0x2870
[ 51.481326][ T2232] bprm_execve+0x953/0x15c0
[ 51.481333][ T2232] do_execveat_common+0x510/0x690
[ 51.481340][ T2232] __x64_sys_execve+0x97/0xc0
[ 51.481347][ T2232] do_syscall_64+0x155/0x510
[ 51.481357][ T2232] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 51.481363][ T2232] page last free pid 5218 tgid 5218 ts
26687208013 stack trace:
[ 51.481368][ T2232] __free_frozen_pages+0xc9f/0xd90
[ 51.481374][ T2232] __slab_free+0x274/0x2c0
[ 51.481381][ T2232] qlist_free_all+0x99/0x100
[ 51.481389][ T2232] kasan_quarantine_reduce+0x148/0x160
[ 51.481397][ T2232] __kasan_slab_alloc+0x22/0x80
[ 51.481404][ T2232] kmem_cache_alloc_noprof+0x2bd/0x610
[ 51.481411][ T2232] do_getname+0x2e/0x250
[ 51.481419][ T2232] do_sys_openat2+0xcc/0x200
[ 51.481429][ T2232] __x64_sys_openat+0x138/0x170
[ 51.481438][ T2232] do_syscall_64+0x155/0x510
[ 51.481446][ T2232] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 51.481453][ T2232]
[ 51.481454][ T2232] Memory state around the buggy address:
[ 51.481458][ T2232] ffff888027dbb080: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
[ 51.481462][ T2232] ffff888027dbb100: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
[ 51.481466][ T2232] >ffff888027dbb180: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
[ 51.481470][ T2232] ^
[ 51.481473][ T2232] ffff888027dbb200: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
[ 51.481477][ T2232] ffff888027dbb280: fb fb fb fb fb fb fb fb fb
fb fb fb fb fb fb fb
[ 51.481481][ T2232]
==================================================================
[ 51.483364][ T2232] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 51.599792][ T2232] CPU: 0 UID: 0 PID: 2232 Comm: kworker/0:3 Not
tainted 7.3.0-rc2-00099-g50d05c7c76c9 #1 PREEMPT(full)
[ 51.600868][ T2232] Hardware name: QEMU Standard PC (Q35 + ICH9,
2009), BIOS 1.17.0-debian-1.17.0-1ubuntu1 04/01/2014
[ 51.601909][ T2232] Workqueue: usb_hub_wq hub_event
[ 51.602476][ T2232] Call Trace:
[ 51.602810][ T2232] <TASK>
[ 51.603106][ T2232] vpanic+0x56d/0xa60
[ 51.603522][ T2232] ? __pfx_vpanic+0x10/0x10
[ 51.603982][ T2232] panic+0xc5/0xd0
[ 51.604365][ T2232] ? __pfx_panic+0x10/0x10
[ 51.604807][ T2232] ? preempt_schedule_thunk+0x16/0x40
[ 51.605350][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.605826][ T2232] ? preempt_schedule_thunk+0x16/0x40
[ 51.606361][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.606833][ T2232] check_panic_on_warn+0x89/0xb0
[ 51.607331][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.607803][ T2232] end_report+0x73/0x170
[ 51.608232][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.608705][ T2232] kasan_report+0x128/0x150
[ 51.609162][ T2232] ? __mutex_lock+0x156/0x1580
[ 51.609663][ T2232] __mutex_lock+0x156/0x1580
[ 51.610126][ T2232] ? media_devnode_remove+0x55/0x1e0
[ 51.610651][ T2232] ? v4l2_device_release+0x1f2/0x470
[ 51.611178][ T2232] ? __pfx___mutex_lock+0x10/0x10
[ 51.611699][ T2232] ? __mutex_unlock_slowpath+0x731/0x900
[ 51.612328][ T2232] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 51.612918][ T2232] ? cdev_dynamic_release+0x1a5/0x1c0
[ 51.613455][ T2232] media_devnode_remove+0x55/0x1e0
[ 51.613964][ T2232] v4l2_device_release+0x271/0x470
[ 51.614499][ T2232] ? __pfx_v4l2_device_release+0x10/0x10
[ 51.615057][ T2232] device_release+0xc4/0x1f0
[ 51.615525][ T2232] kobject_put+0x228/0x560
[ 51.615977][ T2232] cx231xx_release_analog_resources+0x290/0x2b0
[ 51.616580][ T2232] cx231xx_usb_probe+0x113b/0x2100
[ 51.617078][ T2232] usb_probe_interface+0x71f/0xe00
[ 51.617578][ T2232] ? __pfx_usb_probe_interface+0x10/0x10
[ 51.618122][ T2232] ? driver_sysfs_add+0x1fe/0x210
[ 51.618636][ T2232] ? __pfx_usb_probe_interface+0x10/0x10
[ 51.619198][ T2232] really_probe+0x267/0xaf0
[ 51.619650][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.620177][ T2232] driver_probe_device+0x4f/0x240
[ 51.620678][ T2232] __device_attach_driver+0x270/0x410
[ 51.621213][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.621697][ T2232] ? __pfx___device_attach_driver+0x10/0x10
[ 51.622379][ T2232] ? __pfx_bus_for_each_drv+0x10/0x10
[ 51.622915][ T2232] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 51.623499][ T2232] __device_attach+0x2c5/0x450
[ 51.623975][ T2232] ? __pfx___device_attach+0x10/0x10
[ 51.624543][ T2232] ? _raw_spin_unlock+0x28/0x50
[ 51.625053][ T2232] device_initial_probe+0xa1/0xd0
[ 51.625583][ T2232] bus_probe_device+0x12a/0x220
[ 51.626068][ T2232] device_add+0x7ec/0xb90
[ 51.626503][ T2232] usb_set_configuration+0x1a87/0x2110
[ 51.627047][ T2232] usb_generic_driver_probe+0x8d/0x150
[ 51.627589][ T2232] usb_probe_device+0x1c4/0x3b0
[ 51.628074][ T2232] ? __pfx_usb_probe_device+0x10/0x10
[ 51.628619][ T2232] really_probe+0x267/0xaf0
[ 51.629092][ T2232] __driver_probe_device+0x1e2/0x350
[ 51.629643][ T2232] driver_probe_device+0x4f/0x240
[ 51.630146][ T2232] __device_attach_driver+0x270/0x410
[ 51.630679][ T2232] bus_for_each_drv+0x258/0x2f0
[ 51.631193][ T2232] ? __pfx___device_attach_driver+0x10/0x10
[ 51.631773][ T2232] ? __pfx_bus_for_each_drv+0x10/0x10
[ 51.632366][ T2232] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 51.632939][ T2232] __device_attach+0x2c5/0x450
[ 51.633418][ T2232] ? __pfx___device_attach+0x10/0x10
[ 51.633937][ T2232] ? _raw_spin_unlock+0x28/0x50
[ 51.634424][ T2232] device_initial_probe+0xa1/0xd0
[ 51.634929][ T2232] bus_probe_device+0x12a/0x220
[ 51.635447][ T2232] device_add+0x7ec/0xb90
[ 51.635875][ T2232] usb_new_device+0xa14/0x1720
[ 51.636361][ T2232] ? __pfx_usb_new_device+0x10/0x10
[ 51.636877][ T2232] ? _raw_spin_unlock_irq+0x23/0x50
[ 51.637402][ T2232] hub_event+0x2a1c/0x4f30
[ 51.637845][ T2232] ? do_raw_spin_unlock+0xf5/0x200
[ 51.638365][ T2232] ? __pfx_hub_event+0x10/0x10
[ 51.638840][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.639405][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.639966][ T2232] ? process_scheduled_works+0x94e/0x1900
[ 51.640536][ T2232] process_scheduled_works+0xc99/0x1900
[ 51.641094][ T2232] ? __pfx_process_scheduled_works+0x10/0x10
[ 51.641691][ T2232] ? assign_work+0x3d5/0x5e0
[ 51.642233][ T2232] worker_thread+0xa53/0xfc0
[ 51.642696][ T2232] kthread+0x38b/0x480
[ 51.643106][ T2232] ? __pfx_worker_thread+0x10/0x10
[ 51.643614][ T2232] ? __pfx_kthread+0x10/0x10
[ 51.644077][ T2232] ret_from_fork+0x514/0xb70
[ 51.644559][ T2232] ? __pfx_ret_from_fork+0x10/0x10
[ 51.645066][ T2232] ? __switch_to+0xc79/0x1410
[ 51.645539][ T2232] ? __pfx_kthread+0x10/0x10
[ 51.645999][ T2232] ret_from_fork_asm+0x1a/0x30
[ 51.646499][ T2232] </TASK>
[ 51.647104][ T2232] Kernel Offset: disabled
[ 51.647657][ T2232] Rebooting in 86400 seconds..
Regards,
SEFCOM Lab @ ASU
Attachment:
reproducer.c
Description: Binary data