program: syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2d, 0x3d, 0xb, 0x10, 0x46d, 0xa0e, 0x38d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0xda, 0xf6, 0x90, 0x7e, [{{0x9, 0x4, 0x87, 0x1, 0x4, 0x3, 0x0, 0x0, 0x59, [], [{{0x9, 0x5, 0xc, 0x3, 0x8, 0xe, 0x59, 0xfb, [@generic={0x10, 0x21, "548e2177258e0151420d1b340b0f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0x82, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x2, 0x9d, 0x29}}, {{0x9, 0x5, 0x8c, 0x3, 0x200, 0x4, 0x7, 0x92}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) [ 68.677967][ T4670] Bluetooth: hci0: command tx timeout [ 68.878902][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 69.029388][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 69.036667][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 69.042287][ T55] usb 5-1: config 218 has an invalid interface number: 135 but max is 0 [ 69.046016][ T55] usb 5-1: config 218 has no interface number 0 [ 69.050657][ T55] usb 5-1: config 218 interface 135 has no altsetting 0 [ 69.056145][ T55] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 69.060593][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.064241][ T55] usb 5-1: Product: syz [ 69.066048][ T55] usb 5-1: Manufacturer: syz [ 69.068222][ T55] usb 5-1: SerialNumber: syz [ 69.299786][ T55] ------------[ cut here ]------------ [ 69.302292][ T55] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1026:7 [ 69.314584][ T55] index 1 is out of range for type 'struct hid_class_descriptor[1]' [ 69.317719][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 69.317736][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.317743][ T55] Workqueue: usb_hub_wq hub_event [ 69.317868][ T55] Call Trace: [ 69.317875][ T55] [ 69.317881][ T55] dump_stack_lvl+0x189/0x250 [ 69.317903][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.317918][ T55] ? __pfx__printk+0x10/0x10 [ 69.317941][ T55] ubsan_epilogue+0xa/0x40 [ 69.317953][ T55] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 69.318006][ T55] usbhid_parse+0x4ec/0xbd0 [ 69.318024][ T55] ? __pfx_usbhid_parse+0x10/0x10 [ 69.318041][ T55] ? hid_ignore+0x615/0x820 [ 69.318056][ T55] hid_add_device+0x125/0x540 [ 69.318076][ T55] usbhid_probe+0xe13/0x12a0 [ 69.318097][ T55] usb_probe_interface+0x644/0xbc0 [ 69.318117][ T55] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.318129][ T55] really_probe+0x26a/0x9a0 [ 69.318148][ T55] __driver_probe_device+0x18c/0x2f0 [ 69.318190][ T55] driver_probe_device+0x4f/0x430 [ 69.318205][ T55] __device_attach_driver+0x2ce/0x530 [ 69.318223][ T55] bus_for_each_drv+0x251/0x2e0 [ 69.318245][ T55] ? __pfx___device_attach_driver+0x10/0x10 [ 69.318258][ T55] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.318281][ T55] __device_attach+0x2b8/0x400 [ 69.318296][ T55] ? __pfx___device_attach+0x10/0x10 [ 69.318311][ T55] ? do_raw_spin_unlock+0x4d/0x240 [ 69.318326][ T55] bus_probe_device+0x185/0x260 [ 69.318344][ T55] device_add+0x7b6/0xb50 [ 69.318359][ T55] usb_set_configuration+0x1a87/0x20e0 [ 69.318405][ T55] usb_generic_driver_probe+0x8d/0x150 [ 69.318425][ T55] usb_probe_device+0x1c4/0x390 [ 69.318440][ T55] ? __pfx_usb_probe_device+0x10/0x10 [ 69.318451][ T55] really_probe+0x26a/0x9a0 [ 69.318467][ T55] __driver_probe_device+0x18c/0x2f0 [ 69.318483][ T55] driver_probe_device+0x4f/0x430 [ 69.318498][ T55] __device_attach_driver+0x2ce/0x530 [ 69.318514][ T55] bus_for_each_drv+0x251/0x2e0 [ 69.318530][ T55] ? __pfx___device_attach_driver+0x10/0x10 [ 69.318542][ T55] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.318566][ T55] __device_attach+0x2b8/0x400 [ 69.318581][ T55] ? __pfx___device_attach+0x10/0x10 [ 69.318597][ T55] ? do_raw_spin_unlock+0x4d/0x240 [ 69.318612][ T55] bus_probe_device+0x185/0x260 [ 69.318630][ T55] device_add+0x7b6/0xb50 [ 69.318646][ T55] usb_new_device+0xa39/0x16c0 [ 69.318671][ T55] ? __pfx_usb_new_device+0x10/0x10 [ 69.318687][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.318727][ T55] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.318743][ T55] hub_event+0x2941/0x4a00 [ 69.318796][ T55] ? __pfx_hub_event+0x10/0x10 [ 69.318812][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.318833][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.318844][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.318856][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.318871][ T55] process_scheduled_works+0xade/0x17b0 [ 69.318906][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.318932][ T55] worker_thread+0x8a0/0xda0 [ 69.318970][ T55] kthread+0x711/0x8a0 [ 69.318985][ T55] ? __pfx_worker_thread+0x10/0x10 [ 69.318998][ T55] ? __pfx_kthread+0x10/0x10 [ 69.319011][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.319022][ T55] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.319033][ T55] ? __pfx_kthread+0x10/0x10 [ 69.319044][ T55] ret_from_fork+0x3fc/0x770 [ 69.319060][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 69.319078][ T55] ? __pfx_kthread+0x10/0x10 [ 69.319090][ T55] ret_from_fork_asm+0x1a/0x30 [ 69.319114][ T55] [ 69.479991][ T55] ---[ end trace ]--- [ 69.481754][ T55] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 69.484776][ T55] CPU: 0 UID: 0 PID: 55 Comm: kworker/0:2 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 69.489650][ T55] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 69.494261][ T55] Workqueue: usb_hub_wq hub_event [ 69.496494][ T55] Call Trace: [ 69.497944][ T55] [ 69.499285][ T55] dump_stack_lvl+0x99/0x250 [ 69.501254][ T55] ? __asan_memcpy+0x40/0x70 [ 69.503310][ T55] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.505699][ T55] ? __pfx__printk+0x10/0x10 [ 69.507845][ T55] panic+0x2db/0x790 [ 69.509642][ T55] ? __pfx_panic+0x10/0x10 [ 69.511716][ T55] ? _printk+0xcf/0x120 [ 69.513617][ T55] ? __pfx__printk+0x10/0x10 [ 69.515731][ T55] check_panic_on_warn+0x89/0xb0 [ 69.517890][ T55] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 69.520392][ T55] usbhid_parse+0x4ec/0xbd0 [ 69.522904][ T55] ? __pfx_usbhid_parse+0x10/0x10 [ 69.525470][ T55] ? hid_ignore+0x615/0x820 [ 69.527320][ T55] hid_add_device+0x125/0x540 [ 69.529417][ T55] usbhid_probe+0xe13/0x12a0 [ 69.531498][ T55] usb_probe_interface+0x644/0xbc0 [ 69.533781][ T55] ? __pfx_usb_probe_interface+0x10/0x10 [ 69.536248][ T55] really_probe+0x26a/0x9a0 [ 69.538301][ T55] __driver_probe_device+0x18c/0x2f0 [ 69.540620][ T55] driver_probe_device+0x4f/0x430 [ 69.542899][ T55] __device_attach_driver+0x2ce/0x530 [ 69.545317][ T55] bus_for_each_drv+0x251/0x2e0 [ 69.547491][ T55] ? __pfx___device_attach_driver+0x10/0x10 [ 69.549993][ T55] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.552368][ T55] __device_attach+0x2b8/0x400 [ 69.554367][ T55] ? __pfx___device_attach+0x10/0x10 [ 69.556407][ T55] ? do_raw_spin_unlock+0x4d/0x240 [ 69.558580][ T55] bus_probe_device+0x185/0x260 [ 69.560698][ T55] device_add+0x7b6/0xb50 [ 69.562716][ T55] usb_set_configuration+0x1a87/0x20e0 [ 69.565230][ T55] usb_generic_driver_probe+0x8d/0x150 [ 69.567597][ T55] usb_probe_device+0x1c4/0x390 [ 69.569681][ T55] ? __pfx_usb_probe_device+0x10/0x10 [ 69.572210][ T55] really_probe+0x26a/0x9a0 [ 69.574223][ T55] __driver_probe_device+0x18c/0x2f0 [ 69.576413][ T55] driver_probe_device+0x4f/0x430 [ 69.578647][ T55] __device_attach_driver+0x2ce/0x530 [ 69.580960][ T55] bus_for_each_drv+0x251/0x2e0 [ 69.583118][ T55] ? __pfx___device_attach_driver+0x10/0x10 [ 69.585573][ T55] ? __pfx_bus_for_each_drv+0x10/0x10 [ 69.587896][ T55] __device_attach+0x2b8/0x400 [ 69.590234][ T55] ? __pfx___device_attach+0x10/0x10 [ 69.592610][ T55] ? do_raw_spin_unlock+0x4d/0x240 [ 69.594899][ T55] bus_probe_device+0x185/0x260 [ 69.597070][ T55] device_add+0x7b6/0xb50 [ 69.598905][ T55] usb_new_device+0xa39/0x16c0 [ 69.601040][ T55] ? __pfx_usb_new_device+0x10/0x10 [ 69.603339][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.605652][ T55] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.607879][ T55] hub_event+0x2941/0x4a00 [ 69.609803][ T55] ? __pfx_hub_event+0x10/0x10 [ 69.611914][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.614382][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.616624][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.619135][ T55] ? process_scheduled_works+0x9ef/0x17b0 [ 69.621593][ T55] process_scheduled_works+0xade/0x17b0 [ 69.624037][ T55] ? __pfx_process_scheduled_works+0x10/0x10 [ 69.626733][ T55] worker_thread+0x8a0/0xda0 [ 69.628790][ T55] kthread+0x711/0x8a0 [ 69.630549][ T55] ? __pfx_worker_thread+0x10/0x10 [ 69.632765][ T55] ? __pfx_kthread+0x10/0x10 [ 69.634919][ T55] ? _raw_spin_unlock_irq+0x23/0x50 [ 69.637183][ T55] ? lockdep_hardirqs_on+0x9c/0x150 [ 69.639440][ T55] ? __pfx_kthread+0x10/0x10 [ 69.641504][ T55] ret_from_fork+0x3fc/0x770 [ 69.643698][ T55] ? __pfx_ret_from_fork+0x10/0x10 [ 69.645976][ T55] ? __pfx_kthread+0x10/0x10 [ 69.648059][ T55] ret_from_fork_asm+0x1a/0x30 [ 69.650253][ T55] [ 69.651936][ T55] Kernel Offset: disabled [ 69.653904][ T55] Rebooting in 86400 seconds..