usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 ------------[ cut here ]------------ UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1024:7 index 1 is out of range for type 'struct hid_class_descriptor[1]' CPU: 0 PID: 6598 Comm: kworker/0:4 Not tainted 6.10.0-rc7-syzkaller-00109-gc912bf709078 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 Workqueue: usb_hub_wq hub_event Call trace: dump_backtrace+0x1b8/0x1e4 arch/arm64/kernel/stacktrace.c:317 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:324 __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0xe4/0x150 lib/dump_stack.c:114 dump_stack+0x1c/0x28 lib/dump_stack.c:123 ubsan_epilogue lib/ubsan.c:231 [inline] __ubsan_handle_out_of_bounds+0xf8/0x148 lib/ubsan.c:429 usbhid_parse+0x49c/0xbac drivers/hid/usbhid/hid-core.c:1024 hid_add_device+0xfc/0x4a8 drivers/hid/hid-core.c:2789 usbhid_probe+0x834/0xb58 drivers/hid/usbhid/hid-core.c:1429 usb_probe_interface+0x57c/0xa24 drivers/usb/core/driver.c:399 really_probe+0x38c/0x8fc drivers/base/dd.c:656 __driver_probe_device+0x194/0x374 drivers/base/dd.c:798 driver_probe_device+0x78/0x330 drivers/base/dd.c:828 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:956 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1028 device_initial_probe+0x24/0x34 drivers/base/dd.c:1077 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x728/0xa6c drivers/base/core.c:3679 usb_set_configuration+0x15cc/0x1b38 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x8c/0x148 drivers/usb/core/generic.c:254 usb_probe_device+0x1a4/0x348 drivers/usb/core/driver.c:294 really_probe+0x38c/0x8fc drivers/base/dd.c:656 __driver_probe_device+0x194/0x374 drivers/base/dd.c:798 driver_probe_device+0x78/0x330 drivers/base/dd.c:828 __device_attach_driver+0x2a8/0x4f4 drivers/base/dd.c:956 bus_for_each_drv+0x228/0x2bc drivers/base/bus.c:457 __device_attach+0x2b4/0x434 drivers/base/dd.c:1028 device_initial_probe+0x24/0x34 drivers/base/dd.c:1077 bus_probe_device+0x178/0x240 drivers/base/bus.c:532 device_add+0x728/0xa6c drivers/base/core.c:3679 usb_new_device+0x908/0x149c drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2454/0x4280 drivers/usb/core/hub.c:5903 process_one_work+0x79c/0x15b8 kernel/workqueue.c:3248 process_scheduled_works kernel/workqueue.c:3329 [inline] worker_thread+0x938/0xecc kernel/workqueue.c:3409 kthread+0x288/0x310 kernel/kthread.c:389 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:860 ---[ end trace ]--- usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22 usb 1-1: new high-speed USB device number 3 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 170 but max is 1 usb 1-1: config 1 has an invalid interface number: 234 but max is 1 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 has no interface number 1 usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 1 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping usb 1-1: config 1 interface 170 has no altsetting 0 usb 1-1: config 1 interface 234 has no altsetting 0 usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22 usb 1-1: USB disconnect, device number 3 usb 1-1: new high-speed USB device number 4 using dummy_hcd usb 1-1: Using ep0 maxpacket: 32 usb 1-1: unable to get BOS descriptor or descriptor too short usb 1-1: config 1 has an invalid interface number: 170 but max is 1 usb 1-1: config 1 has an invalid interface number: 234 but max is 1 usb 1-1: config 1 has no interface number 0 usb 1-1: config 1 has no interface number 1 usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x2 has an invalid bInterval 129, changing to 7 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 endpoint 0x82 has an invalid bInterval 33, changing to 9 usb 1-1: config 1 interface 170 altsetting 5 has a duplicate endpoint with address 0x4, skipping usb 1-1: config 1 interface 170 altsetting 5 has 6 endpoint descriptors, different from the interface descriptor's value: 5 usb 1-1: config 1 interface 234 altsetting 1 endpoint 0x8 has invalid maxpacket 1024, setting to 64 usb 1-1: config 1 interface 234 altsetting 1 has an invalid descriptor for endpoint zero, skipping usb 1-1: config 1 interface 234 altsetting 1 has a duplicate endpoint with address 0xC, skipping usb 1-1: config 1 interface 170 has no altsetting 0 usb 1-1: config 1 interface 234 has no altsetting 0 usb 1-1: string descriptor 0 read error: -22 usb 1-1: New USB device found, idVendor=080e, idProduct=4eb9, bcdDevice=d7.f6 usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usbhid 1-1:1.170: can't add hid device: -22 usbhid 1-1:1.170: probe with driver usbhid failed with error -22 usb 1-1: USB disconnect, device number 4