Warning: Permanently added '10.128.1.52' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.122272][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.362237][ T83] usb 1-1: Using ep0 maxpacket: 8 [ 26.482319][ T83] usb 1-1: too many endpoints for config 3 interface 0 altsetting 0: 111, using maximum allowed: 30 [ 26.493269][ T83] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.504238][ T83] usb 1-1: config 3 interface 0 altsetting 0 endpoint 0x81 has wMaxPacketSize 0, skipping [ 26.514187][ T83] usb 1-1: config 3 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 111 [ 26.527159][ T83] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 26.536198][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.562479][ T1714] raw: raw_ioctl_ep_enable: fail, usb_ep_enable returned -22 [ 27.023960][ T83] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 27.033843][ T83] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 27.041759][ T83] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 27.053631][ T83] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 27.292485][ T1714] ================================================================== [ 27.300661][ T1714] BUG: KASAN: slab-out-of-bounds in hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.309307][ T1714] Read of size 4 at addr ffff8881c5e48078 by task syz-executor525/1714 [ 27.317513][ T1714] [ 27.319832][ T1714] CPU: 1 PID: 1714 Comm: syz-executor525 Not tainted 5.4.0-rc6+ #0 [ 27.327692][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.337827][ T1714] Call Trace: [ 27.341101][ T1714] dump_stack+0xca/0x13e [ 27.345323][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.351277][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.357270][ T1714] print_address_description.constprop.0+0x36/0x50 [ 27.363747][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.369701][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.375654][ T1714] __kasan_report.cold+0x1a/0x33 [ 27.380598][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.386550][ T1714] kasan_report+0xe/0x20 [ 27.390765][ T1714] hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.396553][ T1714] ? hiddev_hid_event+0x2c0/0x2c0 [ 27.401549][ T1714] ? usbhid_init_reports+0x124/0x320 [ 27.406820][ T1714] hiddev_ioctl+0x7a1/0x1550 [ 27.411396][ T1714] ? hiddev_ioctl_string.isra.0+0x1d0/0x1d0 [ 27.417314][ T1714] ? mark_lock+0xbc/0x1160 [ 27.421712][ T1714] ? find_held_lock+0x2d/0x110 [ 27.428048][ T1714] ? debug_check_no_obj_freed+0x20f/0x443 [ 27.433885][ T1714] ? lock_downgrade+0x6e0/0x6e0 [ 27.438741][ T1714] ? lock_acquire+0x127/0x320 [ 27.443425][ T1714] ? debug_check_no_obj_freed+0xc4/0x443 [ 27.449033][ T1714] ? hiddev_ioctl_string.isra.0+0x1d0/0x1d0 [ 27.454936][ T1714] do_vfs_ioctl+0xd2d/0x1330 [ 27.459499][ T1714] ? putname+0xe1/0x120 [ 27.463628][ T1714] ? putname+0xe1/0x120 [ 27.467759][ T1714] ? ioctl_preallocate+0x200/0x200 [ 27.472862][ T1714] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 27.478170][ T1714] ? __kasan_slab_free+0x145/0x180 [ 27.483262][ T1714] ? kmem_cache_free+0x2cd/0x380 [ 27.488468][ T1714] ? putname+0xe1/0x120 [ 27.492600][ T1714] ? do_sys_open+0x2e7/0x580 [ 27.497172][ T1714] ksys_ioctl+0x9b/0xc0 [ 27.501390][ T1714] __x64_sys_ioctl+0x6f/0xb0 [ 27.505978][ T1714] ? lockdep_hardirqs_on+0x382/0x580 [ 27.511243][ T1714] do_syscall_64+0xb7/0x580 [ 27.515724][ T1714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 27.521591][ T1714] RIP: 0033:0x444a89 [ 27.525463][ T1714] Code: e8 bc af 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 27.545039][ T1714] RSP: 002b:00007ffd160254b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.553423][ T1714] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444a89 [ 27.561366][ T1714] RDX: 0000000020000000 RSI: 00000000c018480b RDI: 0000000000000004 [ 27.569486][ T1714] RBP: 00000000006cf018 R08: 8fce4d9635172f21 R09: 00000000004002e0 [ 27.577429][ T1714] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000402730 [ 27.585383][ T1714] R13: 00000000004027c0 R14: 0000000000000000 R15: 0000000000000000 [ 27.593337][ T1714] [ 27.595640][ T1714] The buggy address belongs to the page: [ 27.601244][ T1714] page:ffffea0007178000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 compound_mapcount: 0 [ 27.612161][ T1714] flags: 0x200000000010000(head) [ 27.617074][ T1714] raw: 0200000000010000 dead000000000100 dead000000000122 0000000000000000 [ 27.625631][ T1714] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 27.634193][ T1714] page dumped because: kasan: bad access detected [ 27.640574][ T1714] [ 27.642882][ T1714] Memory state around the buggy address: [ 27.649291][ T1714] ffff8881c5e47f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.657325][ T1714] ffff8881c5e47f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 27.665449][ T1714] >ffff8881c5e48000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe [ 27.673482][ T1714] ^ [ 27.681438][ T1714] ffff8881c5e48080: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 27.689474][ T1714] ffff8881c5e48100: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 27.697563][ T1714] ================================================================== [ 27.705615][ T1714] Disabling lock debugging due to kernel taint [ 27.711998][ T1714] Kernel panic - not syncing: panic_on_warn set ... [ 27.718686][ T1714] CPU: 1 PID: 1714 Comm: syz-executor525 Tainted: G B 5.4.0-rc6+ #0 [ 27.727938][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 27.737970][ T1714] Call Trace: [ 27.741286][ T1714] dump_stack+0xca/0x13e [ 27.745505][ T1714] panic+0x2aa/0x6e1 [ 27.749375][ T1714] ? add_taint.cold+0x16/0x16 [ 27.754027][ T1714] ? retint_kernel+0x10/0x10 [ 27.758593][ T1714] ? trace_hardirqs_on+0x55/0x1e0 [ 27.763590][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.769540][ T1714] end_report+0x43/0x49 [ 27.773668][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.779616][ T1714] __kasan_report.cold+0xd/0x33 [ 27.784450][ T1714] ? hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.790398][ T1714] kasan_report+0xe/0x20 [ 27.794700][ T1714] hiddev_ioctl_usage.isra.0+0x12d0/0x13b0 [ 27.800478][ T1714] ? hiddev_hid_event+0x2c0/0x2c0 [ 27.805473][ T1714] ? usbhid_init_reports+0x124/0x320 [ 27.810737][ T1714] hiddev_ioctl+0x7a1/0x1550 [ 27.815299][ T1714] ? hiddev_ioctl_string.isra.0+0x1d0/0x1d0 [ 27.821162][ T1714] ? mark_lock+0xbc/0x1160 [ 27.825550][ T1714] ? find_held_lock+0x2d/0x110 [ 27.830283][ T1714] ? debug_check_no_obj_freed+0x20f/0x443 [ 27.835972][ T1714] ? lock_downgrade+0x6e0/0x6e0 [ 27.840793][ T1714] ? lock_acquire+0x127/0x320 [ 27.845443][ T1714] ? debug_check_no_obj_freed+0xc4/0x443 [ 27.851045][ T1714] ? hiddev_ioctl_string.isra.0+0x1d0/0x1d0 [ 27.856908][ T1714] do_vfs_ioctl+0xd2d/0x1330 [ 27.861480][ T1714] ? putname+0xe1/0x120 [ 27.865606][ T1714] ? putname+0xe1/0x120 [ 27.869736][ T1714] ? ioctl_preallocate+0x200/0x200 [ 27.874817][ T1714] ? rcu_read_lock_bh_held+0xb0/0xb0 [ 27.880075][ T1714] ? __kasan_slab_free+0x145/0x180 [ 27.885159][ T1714] ? kmem_cache_free+0x2cd/0x380 [ 27.890067][ T1714] ? putname+0xe1/0x120 [ 27.894196][ T1714] ? do_sys_open+0x2e7/0x580 [ 27.898758][ T1714] ksys_ioctl+0x9b/0xc0 [ 27.902886][ T1714] __x64_sys_ioctl+0x6f/0xb0 [ 27.907449][ T1714] ? lockdep_hardirqs_on+0x382/0x580 [ 27.912715][ T1714] do_syscall_64+0xb7/0x580 [ 27.917192][ T1714] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 27.923054][ T1714] RIP: 0033:0x444a89 [ 27.926921][ T1714] Code: e8 bc af 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 1b d8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 27.946669][ T1714] RSP: 002b:00007ffd160254b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 27.955052][ T1714] RAX: ffffffffffffffda RBX: 00000000004002e0 RCX: 0000000000444a89 [ 27.963004][ T1714] RDX: 0000000020000000 RSI: 00000000c018480b RDI: 0000000000000004 [ 27.970948][ T1714] RBP: 00000000006cf018 R08: 8fce4d9635172f21 R09: 00000000004002e0 [ 27.978891][ T1714] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000402730 [ 27.986842][ T1714] R13: 00000000004027c0 R14: 0000000000000000 R15: 0000000000000000 [ 27.995499][ T1714] Kernel Offset: disabled [ 27.999804][ T1714] Rebooting in 86400 seconds..