usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1024:7 index 1 is out of range for type 'struct hid_class_descriptor[1]' CPU: 1 PID: 6255 Comm: kworker/1:3 Not tainted 6.9.0-rc3-syzkaller-00024-gb5d2afe8745b #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 Workqueue: usb_hub_wq hub_event Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:317 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:324 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:114 dump_stack+0x1c/0x28 lib/dump_stack.c:123 ubsan_epilogue lib/ubsan.c:217 [inline] __ubsan_handle_out_of_bounds+0xf8/0x148 lib/ubsan.c:415 usbhid_parse+0x49c/0xbac drivers/hid/usbhid/hid-core.c:1024 hid_add_device+0xfc/0x4a8 drivers/hid/hid-core.c:2790 usbhid_probe+0x834/0xb58 drivers/hid/usbhid/hid-core.c:1429 usb_probe_interface+0x57c/0xa24 drivers/usb/core/driver.c:399 really_probe+0x394/0x904 drivers/base/dd.c:656 __driver_probe_device+0x194/0x374 drivers/base/dd.c:798 driver_probe_device+0x78/0x330 drivers/base/dd.c:828 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:956 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1028 device_initial_probe+0x24/0x34 drivers/base/dd.c:1077 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x768/0xaac drivers/base/core.c:3720 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:254 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:294 really_probe+0x394/0x904 drivers/base/dd.c:656 __driver_probe_device+0x194/0x374 drivers/base/dd.c:798 driver_probe_device+0x78/0x330 drivers/base/dd.c:828 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:956 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1028 device_initial_probe+0x24/0x34 drivers/base/dd.c:1077 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x768/0xaac drivers/base/core.c:3720 usb_new_device+0x908/0x149c drivers/usb/core/hub.c:2652 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5903 process_one_work+0x7b8/0x15d4 kernel/workqueue.c:3254 process_scheduled_works kernel/workqueue.c:3335 [inline] worker_thread+0x938/0xef4 kernel/workqueue.c:3416 kthread+0x288/0x310 kernel/kthread.c:388 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 ---[ end trace ]--- usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22 usb 1-1: new high-speed USB device number 5 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 170 but max is 1 usb 1-1: config 1 has an invalid interface number: 234 but max is 1 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 has no interface number 1 usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 1 interface 234 altsetting 1 has an invalid endpoint with address 0x80, skipping usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping usb 1-1: config 1 interface 170 has no altsetting 0 usb 1-1: config 1 interface 234 has no altsetting 0 usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22 usb 1-1: new high-speed USB device number 6 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 170 but max is 1 usb 1-1: config 1 has an invalid interface number: 234 but max is 1 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 has no interface number 1 usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 1 interface 234 altsetting 1 has an invalid endpoint with address 0x80, skipping usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping usb 1-1: config 1 interface 170 has no altsetting 0 usb 1-1: config 1 interface 234 has no altsetting 0 usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22