Warning: Permanently added '10.128.0.34' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.482276][ T12] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.721925][ T12] usb 1-1: Using ep0 maxpacket: 8 [ 26.881958][ T12] usb 1-1: unable to get BOS descriptor or descriptor too short [ 26.961974][ T12] usb 1-1: config 1 has an invalid descriptor of length 166, skipping remainder of the config [ 26.972361][ T12] usb 1-1: config 1 interface 0 altsetting 63 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 26.985423][ T12] usb 1-1: config 1 interface 0 has no altsetting 0 [ 26.992053][ T12] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.001049][ T12] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.053163][ T12] ================================================================== [ 27.061354][ T12] BUG: KASAN: slab-out-of-bounds in memcmp+0xa6/0xb0 [ 27.068019][ T12] Read of size 1 at addr ffff8881d558b2db by task kworker/0:1/12 [ 27.075705][ T12] [ 27.078015][ T12] CPU: 0 PID: 12 Comm: kworker/0:1 Not tainted 5.3.0-rc4+ #26 [ 27.085459][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.095513][ T12] Workqueue: usb_hub_wq hub_event [ 27.100511][ T12] Call Trace: [ 27.103776][ T12] dump_stack+0xca/0x13e [ 27.107992][ T12] ? memcmp+0xa6/0xb0 [ 27.111949][ T12] ? memcmp+0xa6/0xb0 [ 27.115907][ T12] print_address_description+0x6a/0x32c [ 27.121424][ T12] ? memcmp+0xa6/0xb0 [ 27.125379][ T12] ? memcmp+0xa6/0xb0 [ 27.129337][ T12] __kasan_report.cold+0x1a/0x33 [ 27.134249][ T12] ? memcmp+0xa6/0xb0 [ 27.138230][ T12] kasan_report+0xe/0x12 [ 27.142452][ T12] memcmp+0xa6/0xb0 [ 27.146241][ T12] usbnet_generic_cdc_bind+0x71b/0x17c0 [ 27.151763][ T12] ? usbnet_cdc_unbind+0x210/0x210 [ 27.156849][ T12] ? lockdep_init_map+0x1b0/0x5e0 [ 27.161860][ T12] usbnet_cdc_bind+0x20/0x1a0 [ 27.166519][ T12] ? usbnet_ether_cdc_bind+0x50/0x50 [ 27.171780][ T12] usbnet_probe+0xb43/0x23cf [ 27.176353][ T12] usb_probe_interface+0x305/0x7a0 [ 27.181438][ T12] ? usb_probe_device+0x100/0x100 [ 27.186440][ T12] really_probe+0x281/0x6d0 [ 27.190921][ T12] driver_probe_device+0x101/0x1b0 [ 27.196009][ T12] __device_attach_driver+0x1c2/0x220 [ 27.201354][ T12] ? driver_allows_async_probing+0x160/0x160 [ 27.207307][ T12] bus_for_each_drv+0x162/0x1e0 [ 27.212168][ T12] ? bus_rescan_devices+0x20/0x20 [ 27.217184][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.222982][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 27.228239][ T12] __device_attach+0x217/0x360 [ 27.232978][ T12] ? device_bind_driver+0xd0/0xd0 [ 27.237977][ T12] ? kobject_uevent_env+0x29e/0x1160 [ 27.243234][ T12] ? kobject_uevent_env+0x2a8/0x1160 [ 27.248494][ T12] bus_probe_device+0x1e4/0x290 [ 27.253335][ T12] ? blocking_notifier_call_chain+0x54/0xa0 [ 27.259220][ T12] device_add+0xae6/0x16f0 [ 27.263626][ T12] ? uevent_store+0x50/0x50 [ 27.268132][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.273937][ T12] usb_set_configuration+0xdf6/0x1670 [ 27.279303][ T12] generic_probe+0x9d/0xd5 [ 27.283730][ T12] usb_probe_device+0x99/0x100 [ 27.288483][ T12] ? usb_suspend+0x620/0x620 [ 27.293065][ T12] really_probe+0x281/0x6d0 [ 27.297559][ T12] driver_probe_device+0x101/0x1b0 [ 27.302668][ T12] __device_attach_driver+0x1c2/0x220 [ 27.308028][ T12] ? driver_allows_async_probing+0x160/0x160 [ 27.314018][ T12] bus_for_each_drv+0x162/0x1e0 [ 27.318863][ T12] ? bus_rescan_devices+0x20/0x20 [ 27.323879][ T12] ? _raw_spin_unlock_irqrestore+0x3e/0x50 [ 27.329677][ T12] ? lockdep_hardirqs_on+0x379/0x580 [ 27.334958][ T12] __device_attach+0x217/0x360 [ 27.339715][ T12] ? device_bind_driver+0xd0/0xd0 [ 27.344729][ T12] ? kobject_uevent_env+0x29e/0x1160 [ 27.350006][ T12] ? kobject_uevent_env+0x2a8/0x1160 [ 27.355283][ T12] bus_probe_device+0x1e4/0x290 [ 27.360129][ T12] ? blocking_notifier_call_chain+0x54/0xa0 [ 27.366009][ T12] device_add+0xae6/0x16f0 [ 27.370413][ T12] ? uevent_store+0x50/0x50 [ 27.374907][ T12] usb_new_device.cold+0x6a4/0xe79 [ 27.380024][ T12] hub_event+0x1b5c/0x3640 [ 27.384431][ T12] ? hub_port_debounce+0x260/0x260 [ 27.389535][ T12] process_one_work+0x92b/0x1530 [ 27.394462][ T12] ? pwq_dec_nr_in_flight+0x310/0x310 [ 27.399818][ T12] ? do_raw_spin_lock+0x11a/0x280 [ 27.404835][ T12] worker_thread+0x96/0xe20 [ 27.409331][ T12] ? process_one_work+0x1530/0x1530 [ 27.414541][ T12] kthread+0x318/0x420 [ 27.418602][ T12] ? kthread_create_on_node+0xf0/0xf0 [ 27.423969][ T12] ret_from_fork+0x24/0x30 [ 27.428372][ T12] [ 27.430688][ T12] Allocated by task 12: [ 27.434834][ T12] save_stack+0x1b/0x80 [ 27.438980][ T12] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 27.444599][ T12] usb_get_configuration+0x30a/0x3060 [ 27.449956][ T12] usb_new_device+0xd3/0x160 [ 27.454533][ T12] hub_event+0x1b5c/0x3640 [ 27.458935][ T12] process_one_work+0x92b/0x1530 [ 27.463859][ T12] worker_thread+0x96/0xe20 [ 27.468348][ T12] kthread+0x318/0x420 [ 27.472406][ T12] ret_from_fork+0x24/0x30 [ 27.476804][ T12] [ 27.479119][ T12] Freed by task 1: [ 27.482826][ T12] save_stack+0x1b/0x80 [ 27.486973][ T12] __kasan_slab_free+0x130/0x180 [ 27.491898][ T12] kfree+0xe4/0x2f0 [ 27.495713][ T12] kobject_uevent_env+0x294/0x1160 [ 27.500812][ T12] device_add+0xade/0x16f0 [ 27.505217][ T12] usb_new_device.cold+0x6a4/0xe79 [ 27.510319][ T12] usb_add_hcd.cold+0x108c/0x142f [ 27.515338][ T12] dummy_hcd_probe+0x19f/0x312 [ 27.520090][ T12] platform_drv_probe+0xce/0x1a0 [ 27.525022][ T12] really_probe+0x281/0x6d0 [ 27.529521][ T12] driver_probe_device+0x101/0x1b0 [ 27.534622][ T12] __device_attach_driver+0x1c2/0x220 [ 27.539980][ T12] bus_for_each_drv+0x162/0x1e0 [ 27.544819][ T12] __device_attach+0x217/0x360 [ 27.549573][ T12] bus_probe_device+0x1e4/0x290 [ 27.554411][ T12] device_add+0xae6/0x16f0 [ 27.558811][ T12] platform_device_add+0x34d/0x6c0 [ 27.563913][ T12] init+0x4b5/0x997 [ 27.567707][ T12] do_one_initcall+0xf0/0x614 [ 27.572378][ T12] kernel_init_freeable+0x4a9/0x596 [ 27.577561][ T12] kernel_init+0xd/0x1bf [ 27.581794][ T12] ret_from_fork+0x24/0x30 [ 27.586192][ T12] [ 27.588511][ T12] The buggy address belongs to the object at ffff8881d558b2a0 [ 27.588511][ T12] which belongs to the cache kmalloc-64 of size 64 [ 27.602376][ T12] The buggy address is located 59 bytes inside of [ 27.602376][ T12] 64-byte region [ffff8881d558b2a0, ffff8881d558b2e0) [ 27.615456][ T12] The buggy address belongs to the page: [ 27.621075][ T12] page:ffffea00075562c0 refcount:1 mapcount:0 mapping:ffff8881da003180 index:0x0 [ 27.630171][ T12] flags: 0x200000000000200(slab) [ 27.635102][ T12] raw: 0200000000000200 ffffea0007551f80 0000000600000006 ffff8881da003180 [ 27.643853][ T12] raw: 0000000000000000 00000000802a002a 00000001ffffffff 0000000000000000 [ 27.652419][ T12] page dumped because: kasan: bad access detected [ 27.658813][ T12] [ 27.661126][ T12] Memory state around the buggy address: [ 27.666745][ T12] ffff8881d558b180: 00 00 00 00 00 00 fc fc fc fc fc fc fb fb fb fb [ 27.674798][ T12] ffff8881d558b200: fb fb fb fb fc fc fc fc 00 00 00 00 00 00 fc fc [ 27.682855][ T12] >ffff8881d558b280: fc fc fc fc 00 00 00 00 00 00 00 03 fc fc fc fc [ 27.690901][ T12] ^ [ 27.697828][ T12] ffff8881d558b300: fb fb fb fb fb fb fb fb fc fc fc fc fb fb fb fb [