[info] Using makefile-style concurrent boot in runlevel 2. [....] Starting enhanced syslogd: rsyslogd[ 14.899375][ C1] random: crng init done [?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.10.9' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 26.976905][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 27.216823][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 27.336979][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.348068][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 27.357362][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.366921][ T83] usb 1-1: config 0 descriptor?? [ 27.838574][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.845833][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.853036][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.860191][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.867966][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.875087][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.882246][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.889449][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.896562][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.903769][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.910929][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.918173][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.925299][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.932566][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.939720][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.946882][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.954013][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.961168][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.968329][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.975463][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.982633][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.989805][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 27.996956][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.004072][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.011406][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.018542][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.025645][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 executing program [ 28.032799][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.039978][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.047258][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.054385][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.061576][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.068732][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.075833][ T83] logitech 0003:046D:CA04.0001: unknown main item tag 0x0 [ 28.084963][ T83] logitech 0003:046D:CA04.0001: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 28.096367][ T83] logitech 0003:046D:CA04.0001: not enough fields in HID_OUTPUT_REPORT 0 [ 28.106642][ T83] usb 1-1: USB disconnect, device number 2 [ 28.466862][ T83] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 28.706819][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 28.826933][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.837867][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 28.846936][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.856074][ T83] usb 1-1: config 0 descriptor?? [ 29.318215][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.325397][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.332604][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.339754][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.346918][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.354127][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.361298][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.368480][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.375585][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.382874][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.390054][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.397247][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.404359][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.411530][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.418718][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.425819][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.433002][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.440497][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.447676][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.454793][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.461946][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.469097][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.476210][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.483373][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.490512][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.497661][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.504790][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.511950][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 executing program [ 29.519120][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.526260][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.533431][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.540605][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.547775][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.555009][ T83] logitech 0003:046D:CA04.0002: unknown main item tag 0x0 [ 29.563587][ T83] logitech 0003:046D:CA04.0002: hidraw1: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 29.574931][ T83] logitech 0003:046D:CA04.0002: not enough fields in HID_OUTPUT_REPORT 0 [ 29.584830][ T83] usb 1-1: USB disconnect, device number 3 [ 29.936807][ T83] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.176855][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 30.296924][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.307836][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 30.316912][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.326141][ T83] usb 1-1: config 0 descriptor?? [ 30.807920][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.815192][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.822398][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.829651][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.836989][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.844125][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.851300][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.858469][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.865580][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.872729][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.879893][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.887031][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.894158][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.901322][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.908464][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.915576][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.922723][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.929858][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.937014][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.944124][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.951272][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.958511][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.965609][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.972747][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.979899][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.987068][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 30.994181][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.001335][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 executing program [ 31.008524][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.015659][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.022830][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.030011][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.037164][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.044268][ T83] logitech 0003:046D:CA04.0003: unknown main item tag 0x0 [ 31.052688][ T83] logitech 0003:046D:CA04.0003: hidraw2: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 31.064040][ T83] logitech 0003:046D:CA04.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 31.073840][ T83] usb 1-1: USB disconnect, device number 4 [ 31.426895][ T83] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 31.666830][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 31.786919][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.798084][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 31.807149][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.816265][ T83] usb 1-1: config 0 descriptor?? [ 32.297921][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.305106][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.312557][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.319756][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.326926][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.334048][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.341266][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.348485][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.355616][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.362781][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.369932][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.377092][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.384468][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.391743][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.398922][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.406127][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.413284][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.420454][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.427683][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.434796][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.441945][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.449187][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.456290][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.463443][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.470604][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.477774][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.484905][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.492071][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 executing program [ 32.499272][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.506414][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.513734][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.520929][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.528088][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.535214][ T83] logitech 0003:046D:CA04.0004: unknown main item tag 0x0 [ 32.543846][ T83] logitech 0003:046D:CA04.0004: hidraw3: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.0-1/input0 [ 32.555387][ T83] logitech 0003:046D:CA04.0004: not enough fields in HID_OUTPUT_REPORT 0 [ 32.565385][ T83] usb 1-1: USB disconnect, device number 5 [ 32.916845][ T83] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 33.156838][ T83] usb 1-1: Using ep0 maxpacket: 32 [ 33.276931][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.288024][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 33.297177][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.306216][ T83] usb 1-1: config 0 descriptor?? [ 33.787850][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.795034][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.802303][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.812491][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.819643][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.826876][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.833978][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.841147][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.848309][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.856115][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.863286][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.870438][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.877606][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.884716][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.891869][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.899019][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.906116][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.913279][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.920442][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.927603][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.934731][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.941882][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.949019][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.956111][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.963268][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.970404][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.977548][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.984749][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.990969][ T1743] ================================================================== [ 33.991905][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 33.999947][ T1743] BUG: KASAN: use-after-free in usbhid_power+0xca/0xe0 [ 33.999958][ T1743] Read of size 8 at addr ffff8881d1da8008 by task syz-executor429/1743 [ 33.999967][ T1743] [ 34.007349][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 34.014137][ T1743] CPU: 0 PID: 1743 Comm: syz-executor429 Not tainted 5.3.0-rc7+ #0 [ 34.022385][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 34.024643][ T1743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.024651][ T1743] Call Trace: [ 34.031769][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 34.039605][ T1743] dump_stack+0xca/0x13e [ 34.039616][ T1743] ? usbhid_power+0xca/0xe0 [ 34.039630][ T1743] ? usbhid_power+0xca/0xe0 [ 34.046721][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 34.056750][ T1743] print_address_description+0x6a/0x32c [ 34.056762][ T1743] ? usbhid_power+0xca/0xe0 [ 34.056771][ T1743] ? usbhid_power+0xca/0xe0 [ 34.056785][ T1743] __kasan_report.cold+0x1a/0x33 [ 34.060140][ T83] logitech 0003:046D:CA04.0005: unknown main item tag 0x0 [ 34.067241][ T1743] ? usbhid_power+0xca/0xe0 [ 34.067252][ T1743] kasan_report+0xe/0x12 [ 34.067262][ T1743] usbhid_power+0xca/0xe0 [ 34.067276][ T1743] hidraw_open+0x20d/0x740 [ 34.131380][ T1743] ? usbhid_output_report+0x290/0x290 [ 34.136734][ T1743] ? hidraw_ioctl+0xae0/0xae0 [ 34.141394][ T1743] chrdev_open+0x219/0x5c0 [ 34.145790][ T1743] ? cdev_put.part.0+0x50/0x50 [ 34.150545][ T1743] do_dentry_open+0x494/0x1120 [ 34.155297][ T1743] ? cdev_put.part.0+0x50/0x50 [ 34.160038][ T1743] ? chmod_common+0x3c0/0x3c0 [ 34.164692][ T1743] ? inode_permission+0xbe/0x3a0 [ 34.169611][ T1743] path_openat+0x1430/0x3f50 [ 34.174177][ T1743] ? save_stack+0x1b/0x80 [ 34.178499][ T1743] ? do_sys_open+0x294/0x580 [ 34.183177][ T1743] ? do_syscall_64+0xb7/0x580 [ 34.187855][ T1743] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 34.193229][ T1743] ? __lock_acquire+0x145e/0x3b50 [ 34.198249][ T1743] do_filp_open+0x1a1/0x280 [ 34.202731][ T1743] ? may_open_dev+0xf0/0xf0 [ 34.207210][ T1743] ? __alloc_fd+0x46d/0x600 [ 34.211691][ T1743] ? do_raw_spin_lock+0x11a/0x280 [ 34.216690][ T1743] ? do_raw_spin_unlock+0x50/0x220 [ 34.221780][ T1743] ? _raw_spin_unlock+0x1f/0x30 [ 34.226603][ T1743] ? __alloc_fd+0x46d/0x600 [ 34.231079][ T1743] do_sys_open+0x3c0/0x580 [ 34.235472][ T1743] ? filp_open+0x70/0x70 [ 34.239691][ T1743] ? trace_hardirqs_off_caller+0x55/0x1e0 [ 34.245395][ T1743] do_syscall_64+0xb7/0x580 [ 34.249875][ T1743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.255740][ T1743] RIP: 0033:0x401930 [ 34.259621][ T1743] Code: 01 f0 ff ff 0f 83 c0 0b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 5d 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 94 0b 00 00 c3 48 83 ec 08 e8 fa 00 00 00 [ 34.279461][ T1743] RSP: 002b:00007ffd52bc77e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 34.287855][ T1743] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000401930 [ 34.295810][ T1743] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 00007ffd52bc77f0 [ 34.303759][ T1743] RBP: 6666666666666667 R08: 000000000000000f R09: 0000000000000000 [ 34.311707][ T1743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402950 [ 34.319663][ T1743] R13: 00000000004029e0 R14: 0000000000000000 R15: 0000000000000000 [ 34.327622][ T1743] [ 34.330550][ T1743] Allocated by task 1708: [ 34.334871][ T1743] save_stack+0x1b/0x80 [ 34.339006][ T1743] __kasan_kmalloc.constprop.0+0xbf/0xd0 [ 34.344634][ T1743] __kmalloc_node_track_caller+0xfc/0x380 [ 34.350337][ T1743] __kmalloc_reserve.isra.0+0x39/0xe0 [ 34.355699][ T1743] __alloc_skb+0xef/0x5a0 [ 34.360014][ T1743] netlink_sendmsg+0x8cd/0xcc0 [ 34.364760][ T1743] sock_sendmsg+0xcf/0x120 [ 34.369161][ T1743] ___sys_sendmsg+0x803/0x920 [ 34.373817][ T1743] __sys_sendmsg+0xec/0x1b0 [ 34.378297][ T1743] do_syscall_64+0xb7/0x580 [ 34.382777][ T1743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.388637][ T1743] [ 34.390939][ T1743] Freed by task 1708: [ 34.394907][ T1743] save_stack+0x1b/0x80 [ 34.399038][ T1743] __kasan_slab_free+0x130/0x180 [ 34.403965][ T1743] kfree+0xe4/0x2f0 [ 34.407754][ T1743] skb_free_head+0x8b/0xa0 [ 34.412205][ T1743] skb_release_data+0x41f/0x7c0 [ 34.417086][ T1743] skb_release_all+0x46/0x60 [ 34.421654][ T1743] consume_skb+0xd9/0x320 [ 34.425958][ T1743] netlink_unicast+0x4d7/0x690 [ 34.430693][ T1743] netlink_sendmsg+0x802/0xcc0 [ 34.435433][ T1743] sock_sendmsg+0xcf/0x120 [ 34.439838][ T1743] ___sys_sendmsg+0x803/0x920 [ 34.444501][ T1743] __sys_sendmsg+0xec/0x1b0 [ 34.448979][ T1743] do_syscall_64+0xb7/0x580 [ 34.453456][ T1743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.459328][ T1743] [ 34.461634][ T1743] The buggy address belongs to the object at ffff8881d1da8000 [ 34.461634][ T1743] which belongs to the cache kmalloc-1k of size 1024 [ 34.475671][ T1743] The buggy address is located 8 bytes inside of [ 34.475671][ T1743] 1024-byte region [ffff8881d1da8000, ffff8881d1da8400) [ 34.488836][ T1743] The buggy address belongs to the page: [ 34.494443][ T1743] page:ffffea0007476a00 refcount:1 mapcount:0 mapping:ffff8881da002280 index:0x0 compound_mapcount: 0 [ 34.505354][ T1743] flags: 0x200000000010200(slab|head) [ 34.510703][ T1743] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da002280 [ 34.519270][ T1743] raw: 0000000000000000 00000000000e000e 00000001ffffffff 0000000000000000 [ 34.527834][ T1743] page dumped because: kasan: bad access detected [ 34.534302][ T1743] [ 34.536604][ T1743] Memory state around the buggy address: [ 34.542223][ T1743] ffff8881d1da7f00: fb fb fb fb fb fb fc fc fc fc fb fb fb fb fb fb [ 34.550260][ T1743] ffff8881d1da7f80: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc [ 34.558305][ T1743] >ffff8881d1da8000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.566345][ T1743] ^ [ 34.570666][ T1743] ffff8881d1da8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.578725][ T1743] ffff8881d1da8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 34.586761][ T1743] ================================================================== [ 34.594796][ T1743] Disabling lock debugging due to kernel taint [ 34.601185][ T1743] Kernel panic - not syncing: panic_on_warn set ... [ 34.607771][ T1743] CPU: 0 PID: 1743 Comm: syz-executor429 Tainted: G B 5.3.0-rc7+ #0 [ 34.617025][ T1743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 34.627158][ T1743] Call Trace: [ 34.630436][ T1743] dump_stack+0xca/0x13e [ 34.634657][ T1743] panic+0x2a3/0x6da [ 34.638537][ T1743] ? add_taint.cold+0x16/0x16 [ 34.643452][ T1743] ? retint_kernel+0x10/0x10 [ 34.648017][ T1743] ? trace_hardirqs_on+0x55/0x1e0 [ 34.653025][ T1743] ? usbhid_power+0xca/0xe0 [ 34.657501][ T1743] end_report+0x43/0x49 [ 34.661637][ T1743] ? usbhid_power+0xca/0xe0 [ 34.666123][ T1743] __kasan_report.cold+0xd/0x33 [ 34.670948][ T1743] ? usbhid_power+0xca/0xe0 [ 34.675433][ T1743] kasan_report+0xe/0x12 [ 34.679652][ T1743] usbhid_power+0xca/0xe0 [ 34.683956][ T1743] hidraw_open+0x20d/0x740 [ 34.688347][ T1743] ? usbhid_output_report+0x290/0x290 [ 34.693695][ T1743] ? hidraw_ioctl+0xae0/0xae0 [ 34.698350][ T1743] chrdev_open+0x219/0x5c0 [ 34.702749][ T1743] ? cdev_put.part.0+0x50/0x50 [ 34.707503][ T1743] do_dentry_open+0x494/0x1120 [ 34.712241][ T1743] ? cdev_put.part.0+0x50/0x50 [ 34.716985][ T1743] ? chmod_common+0x3c0/0x3c0 [ 34.721646][ T1743] ? inode_permission+0xbe/0x3a0 [ 34.726576][ T1743] path_openat+0x1430/0x3f50 [ 34.731167][ T1743] ? save_stack+0x1b/0x80 [ 34.735475][ T1743] ? do_sys_open+0x294/0x580 [ 34.740044][ T1743] ? do_syscall_64+0xb7/0x580 [ 34.744712][ T1743] ? path_lookupat.isra.0+0x8d0/0x8d0 [ 34.750065][ T1743] ? __lock_acquire+0x145e/0x3b50 [ 34.755069][ T1743] do_filp_open+0x1a1/0x280 [ 34.759546][ T1743] ? may_open_dev+0xf0/0xf0 [ 34.764029][ T1743] ? __alloc_fd+0x46d/0x600 [ 34.768515][ T1743] ? do_raw_spin_lock+0x11a/0x280 [ 34.773511][ T1743] ? do_raw_spin_unlock+0x50/0x220 [ 34.778605][ T1743] ? _raw_spin_unlock+0x1f/0x30 [ 34.783431][ T1743] ? __alloc_fd+0x46d/0x600 [ 34.787917][ T1743] do_sys_open+0x3c0/0x580 [ 34.792310][ T1743] ? filp_open+0x70/0x70 [ 34.796529][ T1743] ? trace_hardirqs_off_caller+0x55/0x1e0 [ 34.802230][ T1743] do_syscall_64+0xb7/0x580 [ 34.806713][ T1743] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 34.812597][ T1743] RIP: 0033:0x401930 [ 34.816474][ T1743] Code: 01 f0 ff ff 0f 83 c0 0b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 9d 5d 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 94 0b 00 00 c3 48 83 ec 08 e8 fa 00 00 00 [ 34.836081][ T1743] RSP: 002b:00007ffd52bc77e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 34.844472][ T1743] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000401930 [ 34.852421][ T1743] RDX: 0000000000000000 RSI: 0000000000020000 RDI: 00007ffd52bc77f0 [ 34.860378][ T1743] RBP: 6666666666666667 R08: 000000000000000f R09: 0000000000000000 [ 34.868324][ T1743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000402950 [ 34.876272][ T1743] R13: 00000000004029e0 R14: 0000000000000000 R15: 0000000000000000 [ 34.884836][ T1743] Kernel Offset: disabled [ 34.889146][ T1743] Rebooting in 86400 seconds..