Warning: Permanently added '10.128.0.114' (ECDSA) to the list of known hosts.
executing program
syzkaller login: [ 43.136699][ T83] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 43.376644][ T83] usb 1-1: Using ep0 maxpacket: 32
[ 43.496773][ T83] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 51, changing to 9
[ 43.507869][ T83] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 43.520816][ T83] usb 1-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.40
[ 43.530019][ T83] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 43.539419][ T83] usb 1-1: config 0 descriptor??
[ 44.018758][ T83] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0
[ 44.027117][ T83] logitech-djreceiver 0003:046D:C71C.0001: unknown main item tag 0x0
[ 44.038151][ T83] logitech-djreceiver 0003:046D:C71C.0001: hidraw0: USB HID v0.00 Device [HID 046d:c71c] on usb-dummy_hcd.0-1/input0
[ 44.236644][ C1] logitech-djreceiver 0003:046D:C71C.0001: Unexpected input report number 82
[ 44.245635][ C1] ==================================================================
[ 44.253740][ C1] BUG: KASAN: slab-out-of-bounds in hid_report_raw_event+0x13a/0xed0
[ 44.261779][ C1] Write of size 4084 at addr ffff8881d5a7d50d by task swapper/1/0
[ 44.269551][ C1]
[ 44.271859][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted 5.3.0+ #0
[ 44.278591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 44.288620][ C1] Call Trace:
[ 44.291916][ C1]
[ 44.294747][ C1] dump_stack+0xca/0x13e
[ 44.298973][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 44.306919][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 44.312278][ C1] print_address_description+0x6a/0x32c
[ 44.317796][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 44.323140][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 44.328482][ C1] __kasan_report.cold+0x1a/0x33
[ 44.333392][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 44.338735][ C1] kasan_report+0xe/0x12
[ 44.342964][ C1] check_memory_region+0x128/0x190
[ 44.348075][ C1] memset+0x20/0x40
[ 44.351854][ C1] hid_report_raw_event+0x13a/0xed0
[ 44.357034][ C1] ? logi_dj_raw_event+0x1d3/0x4f0
[ 44.362126][ C1] ? down_trylock+0xe/0x60
[ 44.366525][ C1] ? logi_dj_hidpp_event.isra.0+0x7f0/0x7f0
[ 44.372391][ C1] ? trace_hardirqs_off+0x50/0x1d0
[ 44.377475][ C1] hid_input_report+0x315/0x3f0
[ 44.382299][ C1] ? logi_dj_hidpp_event.isra.0+0x7f0/0x7f0
[ 44.388184][ C1] ? ktime_get_mono_fast_ns+0x163/0x1f0
[ 44.393704][ C1] hid_irq_in+0x50e/0x690
[ 44.398010][ C1] ? led_trigger_blink_oneshot+0xb4/0xe0
[ 44.403626][ C1] __usb_hcd_giveback_urb+0x1f2/0x470
[ 44.408972][ C1] usb_hcd_giveback_urb+0x368/0x420
[ 44.414171][ C1] dummy_timer+0x120f/0x2fa2
[ 44.418735][ C1] ? dummy_udc_probe+0x930/0x930
[ 44.423645][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 44.429163][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 44.434429][ C1] call_timer_fn+0x179/0x650
[ 44.439000][ C1] ? dummy_udc_probe+0x930/0x930
[ 44.443908][ C1] ? msleep_interruptible+0x130/0x130
[ 44.449250][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 44.454768][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 44.460030][ C1] ? _raw_spin_unlock_irq+0x24/0x30
[ 44.465200][ C1] ? dummy_udc_probe+0x930/0x930
[ 44.470107][ C1] run_timer_softirq+0x5e0/0x14d0
[ 44.475104][ C1] ? add_timer+0x7a0/0x7a0
[ 44.479493][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 44.485047][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 44.490305][ C1] __do_softirq+0x221/0x912
[ 44.494783][ C1] irq_exit+0x178/0x1a0
[ 44.498909][ C1] smp_apic_timer_interrupt+0x12f/0x500
[ 44.504431][ C1] apic_timer_interrupt+0xf/0x20
[ 44.509357][ C1]
[ 44.512384][ C1] RIP: 0010:default_idle+0x28/0x2e0
[ 44.517575][ C1] Code: 90 90 41 56 41 55 65 44 8b 2d 94 9d 90 7a 41 54 55 53 0f 1f 44 00 00 e8 36 71 d2 fb e9 07 00 00 00 0f 00 2d ca 43 51 00 fb f4 <65> 44 8b 2d 70 9d 90 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3
[ 44.537252][ C1] RSP: 0018:ffff8881da217dc8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 44.545644][ C1] RAX: 0000000000000007 RBX: ffff8881da1fb000 RCX: 0000000000000000
[ 44.553594][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881da1fb84c
[ 44.561541][ C1] RBP: ffffed103b43f600 R08: ffff8881da1fb000 R09: 0000000000000000
[ 44.569489][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[ 44.577454][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 44.585423][ C1] ? default_idle+0x1a/0x2e0
[ 44.589988][ C1] do_idle+0x3b6/0x500
[ 44.594034][ C1] ? arch_cpu_idle_exit+0x40/0x40
[ 44.599030][ C1] ? do_idle+0x2ef/0x500
[ 44.603248][ C1] cpu_startup_entry+0x14/0x20
[ 44.607999][ C1] start_secondary+0x27d/0x330
[ 44.612741][ C1] ? set_cpu_sibling_map+0x1ff0/0x1ff0
[ 44.618175][ C1] secondary_startup_64+0xa4/0xb0
[ 44.623209][ C1]
[ 44.625515][ C1] Allocated by task 83:
[ 44.629648][ C1] save_stack+0x1b/0x80
[ 44.633815][ C1] __kasan_kmalloc.constprop.0+0xbf/0xd0
[ 44.639419][ C1] hcd_buffer_alloc+0x1ed/0x290
[ 44.644246][ C1] usb_alloc_coherent+0x5d/0x80
[ 44.649078][ C1] usbhid_start+0x60b/0x22f0
[ 44.653663][ C1] hid_hw_start+0x5d/0x130
[ 44.658054][ C1] logi_dj_probe+0x808/0xcd7
[ 44.662615][ C1] hid_device_probe+0x2be/0x3f0
[ 44.667437][ C1] really_probe+0x281/0x6d0
[ 44.671910][ C1] driver_probe_device+0x101/0x1b0
[ 44.676991][ C1] __device_attach_driver+0x1c2/0x220
[ 44.682334][ C1] bus_for_each_drv+0x162/0x1e0
[ 44.687157][ C1] __device_attach+0x217/0x360
[ 44.691891][ C1] bus_probe_device+0x1e4/0x290
[ 44.696721][ C1] device_add+0xae6/0x16f0
[ 44.701106][ C1] hid_add_device+0x33c/0x990
[ 44.705756][ C1] usbhid_probe+0xa81/0xfa0
[ 44.710232][ C1] usb_probe_interface+0x305/0x7a0
[ 44.715313][ C1] really_probe+0x281/0x6d0
[ 44.719788][ C1] driver_probe_device+0x101/0x1b0
[ 44.724869][ C1] __device_attach_driver+0x1c2/0x220
[ 44.730212][ C1] bus_for_each_drv+0x162/0x1e0
[ 44.735058][ C1] __device_attach+0x217/0x360
[ 44.739790][ C1] bus_probe_device+0x1e4/0x290
[ 44.744612][ C1] device_add+0xae6/0x16f0
[ 44.749026][ C1] usb_set_configuration+0xdf6/0x1670
[ 44.754377][ C1] generic_probe+0x9d/0xd5
[ 44.758766][ C1] usb_probe_device+0x99/0x100
[ 44.763500][ C1] really_probe+0x281/0x6d0
[ 44.767972][ C1] driver_probe_device+0x101/0x1b0
[ 44.773055][ C1] __device_attach_driver+0x1c2/0x220
[ 44.778396][ C1] bus_for_each_drv+0x162/0x1e0
[ 44.783225][ C1] __device_attach+0x217/0x360
[ 44.787962][ C1] bus_probe_device+0x1e4/0x290
[ 44.792793][ C1] device_add+0xae6/0x16f0
[ 44.797182][ C1] usb_new_device.cold+0x6a4/0xe79
[ 44.802262][ C1] hub_event+0x1b5c/0x3640
[ 44.806658][ C1] process_one_work+0x92b/0x1530
[ 44.811574][ C1] worker_thread+0x96/0xe20
[ 44.816064][ C1] kthread+0x318/0x420
[ 44.820124][ C1] ret_from_fork+0x24/0x30
[ 44.824506][ C1]
[ 44.826805][ C1] Freed by task 1:
[ 44.830500][ C1] save_stack+0x1b/0x80
[ 44.834625][ C1] __kasan_slab_free+0x130/0x180
[ 44.839535][ C1] kfree+0xe4/0x2f0
[ 44.843317][ C1] kobject_uevent_env+0x29e/0x1150
[ 44.848513][ C1] sysfs_slab_add+0x239/0x300
[ 44.853160][ C1] __kmem_cache_create+0x4d6/0x510
[ 44.858248][ C1] create_cache+0x11a/0x210
[ 44.862724][ C1] kmem_cache_create_usercopy+0x191/0x240
[ 44.868413][ C1] proto_register+0x11a/0x990
[ 44.873497][ C1] inet6_init+0xf7/0x6b3
[ 44.877711][ C1] do_one_initcall+0xf0/0x614
[ 44.882381][ C1] kernel_init_freeable+0x4a9/0x596
[ 44.887638][ C1] kernel_init+0xd/0x1bf
[ 44.891853][ C1] ret_from_fork+0x24/0x30
[ 44.896237][ C1]
[ 44.898539][ C1] The buggy address belongs to the object at ffff8881d5a7d500
[ 44.898539][ C1] which belongs to the cache kmalloc-4k of size 4096
[ 44.912569][ C1] The buggy address is located 13 bytes inside of
[ 44.912569][ C1] 4096-byte region [ffff8881d5a7d500, ffff8881d5a7e500)
[ 44.925832][ C1] The buggy address belongs to the page:
[ 44.931449][ C1] page:ffffea0007569e00 refcount:1 mapcount:0 mapping:ffff8881da00c280 index:0x0 compound_mapcount: 0
[ 44.942356][ C1] flags: 0x200000000010200(slab|head)
[ 44.947705][ C1] raw: 0200000000010200 dead000000000100 dead000000000122 ffff8881da00c280
[ 44.956293][ C1] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000
[ 44.964845][ C1] page dumped because: kasan: bad access detected
[ 44.971224][ C1]
[ 44.973535][ C1] Memory state around the buggy address:
[ 44.979307][ C1] ffff8881d5a7e400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.987345][ C1] ffff8881d5a7e480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 44.995387][ C1] >ffff8881d5a7e500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.003426][ C1] ^
[ 45.007472][ C1] ffff8881d5a7e580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 45.015515][ C1] ffff8881d5a7e600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 45.023550][ C1] ==================================================================
[ 45.031582][ C1] Disabling lock debugging due to kernel taint
[ 45.037711][ C1] Kernel panic - not syncing: panic_on_warn set ...
[ 45.044268][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G B 5.3.0+ #0
[ 45.052386][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 45.062412][ C1] Call Trace:
[ 45.065669][ C1]
[ 45.068499][ C1] dump_stack+0xca/0x13e
[ 45.072724][ C1] panic+0x2a3/0x6da
[ 45.076590][ C1] ? add_taint.cold+0x16/0x16
[ 45.081239][ C1] ? print_shadow_for_address+0xb8/0x114
[ 45.086841][ C1] ? trace_hardirqs_off+0x50/0x1d0
[ 45.091922][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 45.097266][ C1] end_report+0x43/0x49
[ 45.101392][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 45.107774][ C1] __kasan_report.cold+0xd/0x33
[ 45.112595][ C1] ? hid_report_raw_event+0x13a/0xed0
[ 45.117938][ C1] kasan_report+0xe/0x12
[ 45.122153][ C1] check_memory_region+0x128/0x190
[ 45.127243][ C1] memset+0x20/0x40
[ 45.131022][ C1] hid_report_raw_event+0x13a/0xed0
[ 45.136195][ C1] ? logi_dj_raw_event+0x1d3/0x4f0
[ 45.141277][ C1] ? down_trylock+0xe/0x60
[ 45.145663][ C1] ? logi_dj_hidpp_event.isra.0+0x7f0/0x7f0
[ 45.151524][ C1] ? trace_hardirqs_off+0x50/0x1d0
[ 45.156604][ C1] hid_input_report+0x315/0x3f0
[ 45.161433][ C1] ? logi_dj_hidpp_event.isra.0+0x7f0/0x7f0
[ 45.167299][ C1] ? ktime_get_mono_fast_ns+0x163/0x1f0
[ 45.172821][ C1] hid_irq_in+0x50e/0x690
[ 45.177211][ C1] ? led_trigger_blink_oneshot+0xb4/0xe0
[ 45.182819][ C1] __usb_hcd_giveback_urb+0x1f2/0x470
[ 45.188160][ C1] usb_hcd_giveback_urb+0x368/0x420
[ 45.193333][ C1] dummy_timer+0x120f/0x2fa2
[ 45.197892][ C1] ? dummy_udc_probe+0x930/0x930
[ 45.202804][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 45.208328][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 45.213584][ C1] call_timer_fn+0x179/0x650
[ 45.218142][ C1] ? dummy_udc_probe+0x930/0x930
[ 45.223050][ C1] ? msleep_interruptible+0x130/0x130
[ 45.228391][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 45.233907][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 45.239172][ C1] ? _raw_spin_unlock_irq+0x24/0x30
[ 45.244338][ C1] ? dummy_udc_probe+0x930/0x930
[ 45.249253][ C1] run_timer_softirq+0x5e0/0x14d0
[ 45.254255][ C1] ? add_timer+0x7a0/0x7a0
[ 45.258643][ C1] ? rcu_read_lock_sched_held+0x9c/0xd0
[ 45.264164][ C1] ? rcu_read_lock_bh_held+0xb0/0xb0
[ 45.269426][ C1] __do_softirq+0x221/0x912
[ 45.273910][ C1] irq_exit+0x178/0x1a0
[ 45.278038][ C1] smp_apic_timer_interrupt+0x12f/0x500
[ 45.283558][ C1] apic_timer_interrupt+0xf/0x20
[ 45.288473][ C1]
[ 45.291385][ C1] RIP: 0010:default_idle+0x28/0x2e0
[ 45.296556][ C1] Code: 90 90 41 56 41 55 65 44 8b 2d 94 9d 90 7a 41 54 55 53 0f 1f 44 00 00 e8 36 71 d2 fb e9 07 00 00 00 0f 00 2d ca 43 51 00 fb f4 <65> 44 8b 2d 70 9d 90 7a 0f 1f 44 00 00 5b 5d 41 5c 41 5d 41 5e c3
[ 45.316129][ C1] RSP: 0018:ffff8881da217dc8 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13
[ 45.324510][ C1] RAX: 0000000000000007 RBX: ffff8881da1fb000 RCX: 0000000000000000
[ 45.332451][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: ffff8881da1fb84c
[ 45.340390][ C1] RBP: ffffed103b43f600 R08: ffff8881da1fb000 R09: 0000000000000000
[ 45.348339][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001
[ 45.356282][ C1] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000
[ 45.364232][ C1] ? default_idle+0x1a/0x2e0
[ 45.368809][ C1] do_idle+0x3b6/0x500
[ 45.372900][ C1] ? arch_cpu_idle_exit+0x40/0x40
[ 45.377907][ C1] ? do_idle+0x2ef/0x500
[ 45.382133][ C1] cpu_startup_entry+0x14/0x20
[ 45.386913][ C1] start_secondary+0x27d/0x330
[ 45.391658][ C1] ? set_cpu_sibling_map+0x1ff0/0x1ff0
[ 45.397101][ C1] secondary_startup_64+0xa4/0xb0
[ 45.402782][ C1] Kernel Offset: disabled
[ 45.407094][ C1] Rebooting in 86400 seconds..