Warning: Permanently added '10.128.10.59' (ECDSA) to the list of known hosts. executing program [ 25.129271][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.338684][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.349689][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.359578][ T83] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 25.372427][ T83] usb 1-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 25.381520][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.391714][ T83] usb 1-1: config 0 descriptor?? [ 25.871817][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.878873][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.885977][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.892909][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.899844][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.906687][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.913610][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.920560][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.927404][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.934352][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.941296][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.948199][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.955054][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.961975][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.968906][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.975877][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.982803][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.989757][ T83] betop 0003:20BC:5500.0001: unknown main item tag 0x0 [ 25.999075][ T83] betop 0003:20BC:5500.0001: hidraw0: USB HID v0.00 Device [HID 20bc:5500] on usb-dummy_hcd.0-1/input0 [ 26.010361][ T83] ================================================================== [ 26.018574][ T83] BUG: KASAN: slab-out-of-bounds in betop_probe+0x396/0x570 [ 26.025855][ T83] Write of size 8 at addr ffff8881ccfc80c0 by task kworker/1:2/83 [ 26.033642][ T83] [ 26.035952][ T83] CPU: 1 PID: 83 Comm: kworker/1:2 Not tainted 5.7.0-rc1-syzkaller #0 [ 26.044072][ T83] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 26.054115][ T83] Workqueue: usb_hub_wq hub_event [ 26.059110][ T83] Call Trace: [ 26.062377][ T83] dump_stack+0xef/0x16e [ 26.066596][ T83] print_address_description.constprop.0.cold+0xd3/0x314 [ 26.073592][ T83] ? betop_probe+0x396/0x570 [ 26.078181][ T83] __kasan_report.cold+0x37/0x92 [ 26.083091][ T83] ? betop_probe+0x396/0x570 [ 26.087653][ T83] ? betop_probe+0x396/0x570 [ 26.092216][ T83] kasan_report+0x33/0x50 [ 26.096529][ T83] check_memory_region+0x173/0x1d0 [ 26.101647][ T83] betop_probe+0x396/0x570 [ 26.106036][ T83] ? belkin_probe.cold+0x3c/0x3c [ 26.110957][ T83] hid_device_probe+0x2be/0x3f0 [ 26.115782][ T83] ? hid_match_device+0x1f0/0x1f0 [ 26.120779][ T83] really_probe+0x290/0xac0 [ 26.125255][ T83] driver_probe_device+0x223/0x350 [ 26.130345][ T83] __device_attach_driver+0x1d1/0x290 [ 26.135716][ T83] ? driver_allows_async_probing+0x160/0x160 [ 26.141678][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.146503][ T83] ? bus_rescan_devices+0x20/0x20 [ 26.151500][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.157279][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.162536][ T83] __device_attach+0x21a/0x390 [ 26.167273][ T83] ? device_bind_driver+0xd0/0xd0 [ 26.172398][ T83] bus_probe_device+0x1e4/0x290 [ 26.177273][ T83] device_add+0x1367/0x1c20 [ 26.181761][ T83] ? device_link_remove+0x110/0x110 [ 26.186958][ T83] ? __debugfs_create_file+0x31f/0x400 [ 26.192941][ T83] hid_add_device+0x33c/0x9a0 [ 26.197598][ T83] ? debug_object_fixup+0x30/0x30 [ 26.202606][ T83] ? __hid_bus_reprobe_drivers+0x130/0x130 [ 26.208402][ T83] ? lockdep_init_map_waits+0x26a/0x7c0 [ 26.213922][ T83] usbhid_probe+0xa8c/0xfa0 [ 26.218401][ T83] usb_probe_interface+0x310/0x800 [ 26.223484][ T83] ? usb_probe_device+0x230/0x230 [ 26.228499][ T83] really_probe+0x290/0xac0 [ 26.232986][ T83] driver_probe_device+0x223/0x350 [ 26.238082][ T83] __device_attach_driver+0x1d1/0x290 [ 26.243437][ T83] ? driver_allows_async_probing+0x160/0x160 [ 26.249390][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.254228][ T83] ? bus_rescan_devices+0x20/0x20 [ 26.259226][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.265004][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.270259][ T83] __device_attach+0x21a/0x390 [ 26.274993][ T83] ? device_bind_driver+0xd0/0xd0 [ 26.279991][ T83] bus_probe_device+0x1e4/0x290 [ 26.284813][ T83] device_add+0x1367/0x1c20 [ 26.289302][ T83] ? wait_for_completion+0x280/0x280 [ 26.294559][ T83] ? device_link_remove+0x110/0x110 [ 26.299730][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.305507][ T83] usb_set_configuration+0xed4/0x1850 [ 26.310852][ T83] usb_generic_driver_probe+0x9d/0xe0 [ 26.316196][ T83] usb_probe_device+0xd9/0x230 [ 26.320933][ T83] ? usb_suspend+0x600/0x600 [ 26.325497][ T83] really_probe+0x290/0xac0 [ 26.329982][ T83] driver_probe_device+0x223/0x350 [ 26.335066][ T83] __device_attach_driver+0x1d1/0x290 [ 26.340429][ T83] ? driver_allows_async_probing+0x160/0x160 [ 26.346556][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.351391][ T83] ? bus_rescan_devices+0x20/0x20 [ 26.356398][ T83] ? _raw_spin_unlock_irqrestore+0x39/0x40 [ 26.362177][ T83] ? lockdep_hardirqs_on+0x3c7/0x5d0 [ 26.367435][ T83] __device_attach+0x21a/0x390 [ 26.372183][ T83] ? device_bind_driver+0xd0/0xd0 [ 26.377187][ T83] bus_probe_device+0x1e4/0x290 [ 26.382011][ T83] device_add+0x1367/0x1c20 [ 26.386499][ T83] ? device_link_remove+0x110/0x110 [ 26.391671][ T83] usb_new_device.cold+0x552/0xf6e [ 26.396755][ T83] ? hub_disconnect+0x4a0/0x4a0 [ 26.401590][ T83] ? mark_held_locks+0x9f/0xe0 [ 26.406345][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.411515][ T83] hub_event+0x226d/0x43c0 [ 26.415905][ T83] ? hub_port_debounce+0x350/0x350 [ 26.420991][ T83] ? umh_clean_and_save_pid+0x1/0xd0 [ 26.426260][ T83] ? rcu_read_lock_sched_held+0x9c/0xd0 [ 26.431778][ T83] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 26.437131][ T83] ? _raw_spin_unlock_irq+0x1f/0x30 [ 26.442308][ T83] process_one_work+0x965/0x1630 [ 26.447227][ T83] ? lock_release+0x720/0x720 [ 26.451877][ T83] ? pwq_dec_nr_in_flight+0x310/0x310 [ 26.457219][ T83] ? rwlock_bug.part.0+0x90/0x90 [ 26.462150][ T83] worker_thread+0x96/0xe20 [ 26.466627][ T83] ? process_one_work+0x1630/0x1630 [ 26.471804][ T83] kthread+0x326/0x430 [ 26.475849][ T83] ? kthread_create_on_node+0xf0/0xf0 [ 26.481192][ T83] ret_from_fork+0x24/0x30 [ 26.485576][ T83] [ 26.487892][ T83] Allocated by task 83: [ 26.492026][ T83] save_stack+0x1b/0x40 [ 26.496269][ T83] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 26.501890][ T83] hidraw_connect+0x4b/0x3f0 [ 26.506468][ T83] hid_connect+0x5cd/0xbc0 [ 26.510870][ T83] hid_hw_start+0xa2/0x130 [ 26.515259][ T83] betop_probe+0xbc/0x570 [ 26.519577][ T83] hid_device_probe+0x2be/0x3f0 [ 26.524403][ T83] really_probe+0x290/0xac0 [ 26.528890][ T83] driver_probe_device+0x223/0x350 [ 26.533974][ T83] __device_attach_driver+0x1d1/0x290 [ 26.539329][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.544161][ T83] __device_attach+0x21a/0x390 [ 26.548898][ T83] bus_probe_device+0x1e4/0x290 [ 26.553731][ T83] device_add+0x1367/0x1c20 [ 26.558208][ T83] hid_add_device+0x33c/0x9a0 [ 26.562866][ T83] usbhid_probe+0xa8c/0xfa0 [ 26.567352][ T83] usb_probe_interface+0x310/0x800 [ 26.572450][ T83] really_probe+0x290/0xac0 [ 26.576928][ T83] driver_probe_device+0x223/0x350 [ 26.582022][ T83] __device_attach_driver+0x1d1/0x290 [ 26.587366][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.592289][ T83] __device_attach+0x21a/0x390 [ 26.597026][ T83] bus_probe_device+0x1e4/0x290 [ 26.601861][ T83] device_add+0x1367/0x1c20 [ 26.606347][ T83] usb_set_configuration+0xed4/0x1850 [ 26.611696][ T83] usb_generic_driver_probe+0x9d/0xe0 [ 26.617047][ T83] usb_probe_device+0xd9/0x230 [ 26.621798][ T83] really_probe+0x290/0xac0 [ 26.626291][ T83] driver_probe_device+0x223/0x350 [ 26.631390][ T83] __device_attach_driver+0x1d1/0x290 [ 26.637004][ T83] bus_for_each_drv+0x162/0x1e0 [ 26.641839][ T83] __device_attach+0x21a/0x390 [ 26.646578][ T83] bus_probe_device+0x1e4/0x290 [ 26.651415][ T83] device_add+0x1367/0x1c20 [ 26.655892][ T83] usb_new_device.cold+0x552/0xf6e [ 26.660987][ T83] hub_event+0x226d/0x43c0 [ 26.665390][ T83] process_one_work+0x965/0x1630 [ 26.670312][ T83] worker_thread+0x96/0xe20 [ 26.674790][ T83] kthread+0x326/0x430 [ 26.678843][ T83] ret_from_fork+0x24/0x30 [ 26.683242][ T83] [ 26.685665][ T83] Freed by task 180: [ 26.689550][ T83] save_stack+0x1b/0x40 [ 26.693691][ T83] __kasan_slab_free+0x117/0x160 [ 26.698613][ T83] kfree+0xd5/0x300 [ 26.702407][ T83] do_sys_name_to_handle.isra.0+0x35a/0x4c0 [ 26.708362][ T83] __x64_sys_name_to_handle_at+0x1ef/0x240 [ 26.714167][ T83] do_syscall_64+0xb6/0x5a0 [ 26.718794][ T83] entry_SYSCALL_64_after_hwframe+0x49/0xb3 [ 26.724660][ T83] [ 26.726968][ T83] The buggy address belongs to the object at ffff8881ccfc8000 [ 26.726968][ T83] which belongs to the cache kmalloc-192 of size 192 [ 26.740995][ T83] The buggy address is located 0 bytes to the right of [ 26.740995][ T83] 192-byte region [ffff8881ccfc8000, ffff8881ccfc80c0) [ 26.754583][ T83] The buggy address belongs to the page: [ 26.760201][ T83] page:ffffea000733f200 refcount:1 mapcount:0 mapping:00000000675aa8a8 index:0x0 [ 26.769347][ T83] flags: 0x200000000000200(slab) [ 26.775295][ T83] raw: 0200000000000200 ffffea000733ef40 0000000a0000000a ffff8881da002a00 [ 26.783892][ T83] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 26.792464][ T83] page dumped because: kasan: bad access detected [ 26.798866][ T83] [ 26.801172][ T83] Memory state around the buggy address: [ 26.806787][ T83] ffff8881ccfc7f80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 26.814838][ T83] ffff8881ccfc8000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.822890][ T83] >ffff8881ccfc8080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 26.830927][ T83] ^ [ 26.837189][ T83] ffff8881ccfc8100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.845255][ T83] ffff8881ccfc8180: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 26.853399][ T83] ================================================================== [ 26.861522][ T83] Disabling lock debugging due to kernel taint [ 26.867789][ T83] Kernel panic - not syncing: panic_on_warn set ... [ 26.874385][ T83