Extracting prog: 1m9.526784781s
Minimizing prog: 6m51.665898639s
Simplifying prog options: 0s
Extracting C: 20.541245402s
Simplifying C: 3m34.644896961s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCGKEYCODE-syz_usb_connect
detailed listing:
executing program 0:
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)
syz_usb_connect(0x2, 0x333, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x321, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x5], 0x6}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x43, 'N'}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x1000, 0xef}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x3, 0x0, 0x6, 0x5, 0x1}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x2d}]}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
single: successfully extracted reproducer
found reproducer with 2 syscalls
minimizing guilty program
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$EVIOCGKEYCODE
detailed listing:
executing program 0:
ioctl$EVIOCGKEYCODE(0xffffffffffffffff, 0x80084504, 0x0)

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x333, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x321, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}, [@feature_unit={0x9, 0x24, 0x6, 0x2, 0x2, 0x1, [0x5], 0x6}, @mixer_unit={0x6, 0x24, 0x4, 0x5, 0x43, 'N'}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0x1000, 0xef}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x3, 0x0, 0x6, 0x5, 0x1}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x2d}]}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x0, 0x0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x30c, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fa, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x192, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x180, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0x0, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2a2, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x290, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x2, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x2b4, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2a2, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x2, 0x21}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x1cb, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b9, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0xf1, 0x60, 0x2, 0x1}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x27a, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x268, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x2, 0x4}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]})

program did not crash
testing program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
detailed listing:
executing program 0:
syz_usb_connect(0x2, 0x30c, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xe6, 0x6b, 0xf, 0x40, 0x5c6, 0x920b, 0x8e8a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2fa, 0x2, 0x2, 0x3, 0x40, 0x40, [{{0x9, 0x4, 0x0, 0x2, 0xd, 0xf1, 0x60, 0x2, 0x1, [], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x1, 0x1, 0x4, [@generic={0x2, 0x30}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x40, 0x81, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x16a8}]}}, {{0x9, 0x5, 0x6, 0x10, 0xcb5cece4215e5b0d, 0x5, 0x6, 0x6}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x1f, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}]}}, {{0x9, 0x5, 0x3, 0x4, 0x8, 0x8, 0x5, 0x2, [@generic={0x2, 0xc}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x2, 0x7f, 0x12, [@generic={0x2, 0x1}, @generic={0x94, 0x4, "8132f7da7f1c507ac2b33400e04f9c57c25220be9bcdecd1b60a7053a08395d41606880e7ed852a0048d7b2aa586b658155bd44ec4d902725aca932dcc6530d4e0dab172c4e9919bbd54cb5cfa0eb39646263aa8ae6c4522ddae3c7c3e55c5fa65af58bfeb8316e064a1a522c7b54bda572e9d668e3725ec33503488525460caed6e14f2520c476c188f8e57b450cd2ff088"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ef, 0xaf, 0x4, 0x7f}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x6b, 0xfe, 0x2}}, {{0x9, 0x5, 0x84, 0x4, 0x10, 0x9, 0x8, 0x3, [@generic={0x2, 0x7}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x81, 0x20, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xff, 0x4b}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8a9e7142457352b2, 0x0, 0x3f, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x80, 0x80}, @generic={0x2, 0xd}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x7f, 0x8, [@generic={0x2, 0x22}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x8, 0x8001}]}}, {{0x9, 0x5, 0x8, 0x3, 0x200, 0x6, 0xff, 0x7}}]}}, {{0x9, 0x4, 0x11, 0x7, 0xd, 0x3, 0x0, 0x0, 0x40, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x1ed4}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x40, 0x4, 0x20}, [@mdlm_detail={0x4}]}, @uac_control={{0xa, 0x24, 0x1, 0x0, 0x6}}], [{{0x9, 0x5, 0x5, 0x3, 0x20, 0x3, 0x9, 0x56, [@generic={0x2, 0xd}, @generic={0x2, 0xa}]}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0xfd, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x3}]}}, {{0x9, 0x5, 0x8, 0x3, 0x8, 0x8, 0x7f, 0x3f, [@generic={0x2, 0xb}, @generic={0x2, 0x31}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x3f, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0xf30}, @generic={0x5a, 0x21, "e26c61efa92c112ae9b29b8a223881b0c3788be83bca7b4d6426d29dfc317ba7f8583fc71e097bf51e7f155237e2b93797ba0fe305905af3b9dfaed54589092b2b8a71d43a622216d7a523bf831c67171428fe18b531952c"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1f, 0x8, 0x2, [@generic={0x2, 0x31}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x32}]}}, {{0x9, 0x5, 0xe, 0x2, 0x3ff, 0x9, 0x81, 0x81, [@generic={0x6c, 0x5, "f1a7b25501de47d065ea64703df19597d6c13d3172f25649f71dde03c77ee88ecd7eadfed1d39a16c3bcf7994c289e4c0b1e6d9e6bfc2e4f5bc584da859ad6878514a2f3113e6c034a160b7d6977f3482cea47df63991a5d847d597fce9415fdaba5d07ab9ad0f0a04fc"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xd9, 0x1f, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xffff}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x8, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}]}}, {{0x9, 0x5, 0x6, 0x4, 0x200, 0xff, 0x3, 0x1, [@generic={0x2, 0xe}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x36, 0xff, 0x1}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x8, 0xf4, [@generic={0x2, 0xb}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x8}]}}, {{0x9, 0x5, 0x3, 0x3, 0x40, 0x40, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x5, 0x5, 0x6}}]}}]}}]}}, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=36.031711728s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
simplifying C reproducer
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
testing compiled C program (duration=36.031711728s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect
program crashed: UBSAN: array-index-out-of-bounds in usbhid_parse
reproducing took 11m56.378844035s
repro crashed as (corrupted=false):
usb 5-1: Dual-Role OTG device on HNP port
usb 5-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=8e.8a
usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1025:18
index 1 is out of range for type 'hid_class_descriptor [1]'
CPU: 2 UID: 0 PID: 1465 Comm: kworker/2:2 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_out_of_bounds+0x110/0x150 lib/ubsan.c:429
 usbhid_parse+0x960/0xa30 drivers/hid/usbhid/hid-core.c:1025
 hid_add_device+0x18b/0xa60 drivers/hid/hid-core.c:2875
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2d9a/0x4e10 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace ]---

final repro crashed as (corrupted=false):
usb 5-1: Dual-Role OTG device on HNP port
usb 5-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=8e.8a
usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
------------[ cut here ]------------
UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1025:18
index 1 is out of range for type 'hid_class_descriptor [1]'
CPU: 2 UID: 0 PID: 1465 Comm: kworker/2:2 Not tainted 6.13.0-rc5-syzkaller-00004-gccb98ccef0e5 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: usb_hub_wq hub_event
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120
 ubsan_epilogue lib/ubsan.c:231 [inline]
 __ubsan_handle_out_of_bounds+0x110/0x150 lib/ubsan.c:429
 usbhid_parse+0x960/0xa30 drivers/hid/usbhid/hid-core.c:1025
 hid_add_device+0x18b/0xa60 drivers/hid/hid-core.c:2875
 usbhid_probe+0xd32/0x1400 drivers/hid/usbhid/hid-core.c:1431
 usb_probe_interface+0x300/0x9c0 drivers/usb/core/driver.c:396
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_set_configuration+0x10cb/0x1c50 drivers/usb/core/message.c:2210
 usb_generic_driver_probe+0xb1/0x110 drivers/usb/core/generic.c:254
 usb_probe_device+0xec/0x3e0 drivers/usb/core/driver.c:291
 call_driver_probe drivers/base/dd.c:579 [inline]
 really_probe+0x23e/0xa90 drivers/base/dd.c:658
 __driver_probe_device+0x1de/0x440 drivers/base/dd.c:800
 driver_probe_device+0x4c/0x1b0 drivers/base/dd.c:830
 __device_attach_driver+0x1df/0x310 drivers/base/dd.c:958
 bus_for_each_drv+0x157/0x1e0 drivers/base/bus.c:459
 __device_attach+0x1e8/0x4b0 drivers/base/dd.c:1030
 bus_probe_device+0x17f/0x1c0 drivers/base/bus.c:534
 device_add+0x114b/0x1a70 drivers/base/core.c:3665
 usb_new_device+0xd90/0x1a10 drivers/usb/core/hub.c:2651
 hub_port_connect drivers/usb/core/hub.c:5521 [inline]
 hub_port_connect_change drivers/usb/core/hub.c:5661 [inline]
 port_event drivers/usb/core/hub.c:5821 [inline]
 hub_event+0x2d9a/0x4e10 drivers/usb/core/hub.c:5903
 process_one_work+0x9c5/0x1ba0 kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x6c8/0xf00 kernel/workqueue.c:3391
 kthread+0x2c1/0x3a0 kernel/kthread.c:389
 ret_from_fork+0x45/0x80 arch/x86/kernel/process.c:147
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
 </TASK>
---[ end trace ]---