program:
r0 = syz_usb_connect(0x3, 0x9f, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000200000040480b081000010000000109028d0001010080fa0904000005ffffff0007050302000200070584020002"], 0x0)
syz_usb_ep_read(r0, 0x3, 0x0, 0x0)
syz_usb_ep_write(r0, 0x84, 0x5, &(0x7f0000000040)="aa76048000")
r1 = syz_open_dev$dvb_demux(&(0x7f0000000640), 0xcd79, 0x141000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0x4})
[ 93.264115][ T4665] Bluetooth: hci0: command tx timeout
[ 93.268141][ T9] cfg80211: failed to load regulatory.db
[ 93.621072][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 93.772694][ T9] usb 5-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00
[ 93.774146][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 93.774194][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 93.774216][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 94.013807][ T9] ------------[ cut here ]------------
[ 94.013819][ T9] memcpy: detected buffer overflow: 128 byte read of buffer size 60
[ 94.013829][ T9] WARNING: lib/string_helpers.c:1037 at __fortify_report+0x6b/0xa0, CPU#0: kworker/0:0/9
[ 94.024190][ T9] Modules linked in:
[ 94.025980][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.030147][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.034560][ T9] Workqueue: usb_hub_wq hub_event
[ 94.040823][ T9] RIP: 0010:__fortify_report+0x89/0xa0
[ 94.043224][ T9] Code: e8 6c eb 50 fd 48 8d 3d 65 6b d8 0c 45 84 e4 49 8b 37 48 c7 c0 a0 cb 8c 8c 48 c7 c1 c0 cb 8c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc
[ 94.051677][ T9] RSP: 0018:ffffc9000022eb48 EFLAGS: 00010246
[ 94.054358][ T9] RAX: ffffffff8c8ccba0 RBX: 000000000000003c RCX: ffffffff8c8ccba0
[ 94.057913][ T9] RDX: 0000000000000080 RSI: ffffffff8c8cca80 RDI: ffffffff91c94460
[ 94.061504][ T9] RBP: 000000000000000e R08: 000000000000003c R09: 1ffffffff237c397
[ 94.065148][ T9] R10: dffffc0000000000 R11: fffffbfff237c398 R12: 0000000000000000
[ 94.068588][ T9] R13: ffffc9000022ed00 R14: 0000000000000080 R15: ffffffff8c8cc8d8
[ 94.075247][ T9] FS: 0000000000000000(0000) GS:ffff88808aa01000(0000) knlGS:0000000000000000
[ 94.079968][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 94.082957][ T9] CR2: 00007fd6f461a340 CR3: 0000000045563000 CR4: 0000000000352ef0
[ 94.086468][ T9] Call Trace:
[ 94.088040][ T9]
[ 94.089504][ T9] __fortify_panic+0x9/0x10
[ 94.091683][ T9] ttusb_dec_send_command+0x681/0x690
[ 94.095516][ T9] ? __pfx_ttusb_dec_send_command+0x10/0x10
[ 94.098186][ T9] ttusb_dec_probe+0x8e4/0x2160
[ 94.100423][ T9] ? __pfx_ttusb_dec_probe+0x10/0x10
[ 94.102796][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.105621][ T9] ? __pm_runtime_set_status+0xa96/0xd80
[ 94.108210][ T9] usb_probe_interface+0x751/0xe00
[ 94.110622][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.113093][ T9] ? kernfs_create_link+0x1cd/0x240
[ 94.115455][ T9] ? sysfs_do_create_link_sd+0xe0/0x110
[ 94.117981][ T9] ? driver_sysfs_add+0x1fe/0x210
[ 94.120352][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.122889][ T9] really_probe+0x254/0xae0
[ 94.124938][ T9] __driver_probe_device+0x1e8/0x360
[ 94.127315][ T9] driver_probe_device+0x4f/0x240
[ 94.129637][ T9] __device_attach_driver+0x270/0x410
[ 94.132139][ T9] bus_for_each_drv+0x258/0x2f0
[ 94.134255][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 94.136948][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.139784][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.142289][ T9] __device_attach+0x2bd/0x430
[ 94.144477][ T9] ? __pfx___device_attach+0x10/0x10
[ 94.146811][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.149357][ T9] ? _raw_spin_unlock+0x28/0x50
[ 94.151483][ T9] device_initial_probe+0x9c/0x100
[ 94.153747][ T9] __bus_probe_device+0x126/0x220
[ 94.155835][ T9] ? bus_probe_device+0xd/0x20
[ 94.158075][ T9] device_add+0x7d7/0xb80
[ 94.160188][ T9] usb_set_configuration+0x1bb5/0x2260
[ 94.162711][ T9] usb_generic_driver_probe+0x8d/0x150
[ 94.165311][ T9] usb_probe_device+0x1c3/0x3b0
[ 94.167496][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 94.170049][ T9] really_probe+0x254/0xae0
[ 94.172217][ T9] __driver_probe_device+0x1e8/0x360
[ 94.174989][ T9] driver_probe_device+0x4f/0x240
[ 94.177186][ T9] __device_attach_driver+0x270/0x410
[ 94.179899][ T9] bus_for_each_drv+0x258/0x2f0
[ 94.182083][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 94.184805][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.187179][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.190024][ T9] __device_attach+0x2bd/0x430
[ 94.192196][ T9] ? __pfx___device_attach+0x10/0x10
[ 94.194579][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.196856][ T9] ? _raw_spin_unlock+0x28/0x50
[ 94.199193][ T9] device_initial_probe+0x9c/0x100
[ 94.201568][ T9] __bus_probe_device+0x126/0x220
[ 94.203914][ T9] ? bus_probe_device+0xd/0x20
[ 94.206182][ T9] device_add+0x7d7/0xb80
[ 94.208237][ T9] usb_new_device+0x9aa/0x1690
[ 94.210547][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 94.212786][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 94.215240][ T9] hub_event+0x28e8/0x4d30
[ 94.217271][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.219555][ T9] ? __pfx_hub_event+0x10/0x10
[ 94.221683][ T9] ? rcu_is_watching+0x16/0xb0
[ 94.223811][ T9] ? process_scheduled_works+0x97a/0x1630
[ 94.226305][ T9] process_scheduled_works+0xc3d/0x1630
[ 94.228662][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.231501][ T9] ? assign_work+0x3cf/0x5d0
[ 94.233455][ T9] worker_thread+0xa47/0xfb0
[ 94.235345][ T9] kthread+0x38b/0x480
[ 94.237066][ T9] ? __pfx_worker_thread+0x10/0x10
[ 94.239502][ T9] ? __pfx_kthread+0x10/0x10
[ 94.241340][ T9] ret_from_fork+0x514/0xb70
[ 94.243047][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 94.245021][ T9] ? __switch_to+0xc78/0x1410
[ 94.246890][ T9] ? __pfx_kthread+0x10/0x10
[ 94.248885][ T9] ret_from_fork_asm+0x1a/0x30
[ 94.251166][ T9]
[ 94.252489][ T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 94.255320][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full)
[ 94.259083][ T9] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 94.263521][ T9] Workqueue: usb_hub_wq hub_event
[ 94.265748][ T9] Call Trace:
[ 94.267269][ T9]
[ 94.268614][ T9] vpanic+0x26f/0x710
[ 94.270378][ T9] panic+0xc5/0xd0
[ 94.272007][ T9] ? __pfx_panic+0x10/0x10
[ 94.273973][ T9] ? ret_from_fork_asm+0x1a/0x30
[ 94.276186][ T9] __warn+0x315/0x4c0
[ 94.278034][ T9] ? __fortify_report+0x6b/0xa0
[ 94.280239][ T9] ? __fortify_report+0x6b/0xa0
[ 94.282411][ T9] __report_bug+0x276/0x570
[ 94.284441][ T9] ? __fortify_report+0x6b/0xa0
[ 94.286652][ T9] ? __pfx___report_bug+0x10/0x10
[ 94.289100][ T9] ? lockdep_hardirqs_on+0x7b/0x110
[ 94.291432][ T9] ? kfree+0x1c5/0x650
[ 94.293260][ T9] ? usb_start_wait_urb+0x4ba/0x5b0
[ 94.295478][ T9] report_bug_entry+0x19b/0x290
[ 94.297648][ T9] ? __fortify_report+0x89/0xa0
[ 94.299921][ T9] ? __fortify_report+0x8e/0xa0
[ 94.302055][ T9] handle_bug+0xce/0x200
[ 94.303902][ T9] exc_invalid_op+0x1a/0x50
[ 94.305819][ T9] asm_exc_invalid_op+0x1a/0x20
[ 94.307995][ T9] RIP: 0010:__fortify_report+0x89/0xa0
[ 94.310378][ T9] Code: e8 6c eb 50 fd 48 8d 3d 65 6b d8 0c 45 84 e4 49 8b 37 48 c7 c0 a0 cb 8c 8c 48 c7 c1 c0 cb 8c 8c 48 0f 44 c8 4c 89 f2 49 89 d8 <67> 48 0f b9 3a 5b 41 5c 41 5e 41 5f 5d c3 cc cc cc cc cc cc cc cc
[ 94.318840][ T9] RSP: 0018:ffffc9000022eb48 EFLAGS: 00010246
[ 94.321533][ T9] RAX: ffffffff8c8ccba0 RBX: 000000000000003c RCX: ffffffff8c8ccba0
[ 94.324909][ T9] RDX: 0000000000000080 RSI: ffffffff8c8cca80 RDI: ffffffff91c94460
[ 94.328428][ T9] RBP: 000000000000000e R08: 000000000000003c R09: 1ffffffff237c397
[ 94.331691][ T9] R10: dffffc0000000000 R11: fffffbfff237c398 R12: 0000000000000000
[ 94.334995][ T9] R13: ffffc9000022ed00 R14: 0000000000000080 R15: ffffffff8c8cc8d8
[ 94.338563][ T9] ? __fortify_report+0x2c/0xa0
[ 94.340728][ T9] __fortify_panic+0x9/0x10
[ 94.342747][ T9] ttusb_dec_send_command+0x681/0x690
[ 94.345075][ T9] ? __pfx_ttusb_dec_send_command+0x10/0x10
[ 94.347622][ T9] ttusb_dec_probe+0x8e4/0x2160
[ 94.349801][ T9] ? __pfx_ttusb_dec_probe+0x10/0x10
[ 94.352155][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.354746][ T9] ? __pm_runtime_set_status+0xa96/0xd80
[ 94.357272][ T9] usb_probe_interface+0x751/0xe00
[ 94.359531][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.362066][ T9] ? kernfs_create_link+0x1cd/0x240
[ 94.364424][ T9] ? sysfs_do_create_link_sd+0xe0/0x110
[ 94.366979][ T9] ? driver_sysfs_add+0x1fe/0x210
[ 94.369067][ T9] ? __pfx_usb_probe_interface+0x10/0x10
[ 94.371188][ T9] really_probe+0x254/0xae0
[ 94.373205][ T9] __driver_probe_device+0x1e8/0x360
[ 94.375496][ T9] driver_probe_device+0x4f/0x240
[ 94.377702][ T9] __device_attach_driver+0x270/0x410
[ 94.380108][ T9] bus_for_each_drv+0x258/0x2f0
[ 94.382294][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 94.384697][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.387012][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.389550][ T9] __device_attach+0x2bd/0x430
[ 94.391613][ T9] ? __pfx___device_attach+0x10/0x10
[ 94.393813][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.395892][ T9] ? _raw_spin_unlock+0x28/0x50
[ 94.397729][ T9] device_initial_probe+0x9c/0x100
[ 94.399656][ T9] __bus_probe_device+0x126/0x220
[ 94.401567][ T9] ? bus_probe_device+0xd/0x20
[ 94.403434][ T9] device_add+0x7d7/0xb80
[ 94.405146][ T9] usb_set_configuration+0x1bb5/0x2260
[ 94.407521][ T9] usb_generic_driver_probe+0x8d/0x150
[ 94.410046][ T9] usb_probe_device+0x1c3/0x3b0
[ 94.411966][ T9] ? __pfx_usb_probe_device+0x10/0x10
[ 94.414125][ T9] really_probe+0x254/0xae0
[ 94.416195][ T9] __driver_probe_device+0x1e8/0x360
[ 94.418660][ T9] driver_probe_device+0x4f/0x240
[ 94.420932][ T9] __device_attach_driver+0x270/0x410
[ 94.423344][ T9] bus_for_each_drv+0x258/0x2f0
[ 94.425490][ T9] ? __pfx___device_attach_driver+0x10/0x10
[ 94.428194][ T9] ? __pfx_bus_for_each_drv+0x10/0x10
[ 94.430485][ T9] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 94.432796][ T9] __device_attach+0x2bd/0x430
[ 94.434864][ T9] ? __pfx___device_attach+0x10/0x10
[ 94.437210][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.439357][ T9] ? _raw_spin_unlock+0x28/0x50
[ 94.441302][ T9] device_initial_probe+0x9c/0x100
[ 94.443524][ T9] __bus_probe_device+0x126/0x220
[ 94.445701][ T9] ? bus_probe_device+0xd/0x20
[ 94.447756][ T9] device_add+0x7d7/0xb80
[ 94.449627][ T9] usb_new_device+0x9aa/0x1690
[ 94.451625][ T9] ? __pfx_usb_new_device+0x10/0x10
[ 94.453690][ T9] ? _raw_spin_unlock_irq+0x23/0x50
[ 94.455756][ T9] hub_event+0x28e8/0x4d30
[ 94.457552][ T9] ? do_raw_spin_unlock+0x4d/0x200
[ 94.459818][ T9] ? __pfx_hub_event+0x10/0x10
[ 94.461956][ T9] ? rcu_is_watching+0x16/0xb0
[ 94.464063][ T9] ? process_scheduled_works+0x97a/0x1630
[ 94.466498][ T9] process_scheduled_works+0xc3d/0x1630
[ 94.468975][ T9] ? __pfx_process_scheduled_works+0x10/0x10
[ 94.471733][ T9] ? assign_work+0x3cf/0x5d0
[ 94.473779][ T9] worker_thread+0xa47/0xfb0
[ 94.475414][ T9] kthread+0x38b/0x480
[ 94.477112][ T9] ? __pfx_worker_thread+0x10/0x10
[ 94.479439][ T9] ? __pfx_kthread+0x10/0x10
[ 94.481434][ T9] ret_from_fork+0x514/0xb70
[ 94.483468][ T9] ? __pfx_ret_from_fork+0x10/0x10
[ 94.485300][ T9] ? __switch_to+0xc78/0x1410
[ 94.487045][ T9] ? __pfx_kthread+0x10/0x10
[ 94.489144][ T9] ret_from_fork_asm+0x1a/0x30
[ 94.491198][ T9]
[ 94.493126][ T9] Kernel Offset: disabled
[ 94.495029][ T9] Rebooting in 86400 seconds..