Extracting prog: 59.685575277s
Minimizing prog: 16m12.046624515s
Simplifying prog options: 1m31.908084281s
Extracting C: 21.607989345s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100)) (async)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) (async)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
single: successfully extracted reproducer
found reproducer with 16 syscalls
minimizing guilty program
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100)) (async)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) (async)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "c77fdace6d0f08d330a8c03534c211fb2db8ff6967d025b4c050d8d54debeaab55a0afd027977e80a838cf4a3688a9dcc399709cc3c7e3ea3d2deed769ad0133118fa80ca6dc683f344467d68f3e6d78228efd0ac69bc07420181e901c5b82a36aa3ee8e46eb6f9d3eded3af67270028e0328c6de3ea2c5488a84497394c5f0dd1122b92cc10f8f0a9cd255d166ab23ef66d01494f3a7dfb3e02233476a2307660c3ffd40d502282d25c51a33f74dddfc6a38c03c31d8e7a8efd70ec445aac15a808c546f721ac369b05fdae73295353a79a944b33fc6976bc4e8d3f33e2a54e888389e6f8458e612c2505cb239a3387a6c64475a1ddd2cdd74d1cde8023f2a27c3a0648c8065d5e7399f1567828f9ca1b6289a4d67c5d8c87b622699894fb2ffdd7e1876c930242d65fbb694767b107f8ba560627d21a8c7652aa0cd5f80efb9732997aa360470d5ce54250f3a13f65c0655e9acd612888ecfa327134c64b180ca5d03bd944da4688127c50b05689d670113fc95b13f667d137b863af5145f29688d1fefefe2330f0fd907e86461c3ca0af23996d7b1a01517fcc2de44007c06f6d951dc2233837887e73a948bdd596f5adbc031b3852fcc2c9e68b7013ec84715490391d3a118ad29ccf5878f38a10794d5020b909d340750930c6251a6a0e2ed8c1fc365251d2ace0752492f3157254e425e81a71af2e869766e4fc67bab97d68d1e1a993fcf06d910cf84ebe1dbd13abf516d5915f2ff83bd17a2485926b9ea1394a72afd7ac0e8f53131d90b54bfe1c5de218d043232ac3479cf5bcf6cdf8622fe20e883a0df595818555fc024c20b4b3e5403d3e4642bbead00e038607e59a33cba9d5355831ac2f663446c278d00b0e380bfef89a9761e7c93b9a02de771fe16761d9939ea0a181efec582d088c072595c6e1e8615eded5f92c887a2dcc49bcca76d5bb4e45b9555b6c52b92a4f6c785bb882975850a60f8f04ca61403ae43c02ee8ad690da95784db2713cccb6fec27423498e9933163308a4d7015c23a4e01c31b1fa7c0e9b664630d859607b2f211137b44d90d4cf14ecc7c269753553b933393df3828ad73aa559da46815d096b95fe370e8beedd7d5052fad3c6c5d8f1ed3881c8fb34f6e944a377d83a0632ed6c47dc2693fb9ccf87f6c3de3ece88025527a6316f492f8f6b3728439d933dd8d1bfe055125a127402a9489e7e8726fd7cec9d9bb2df331162f807cea2696f3f0a480762bd0e5316c8fb3075bf4fb2927acb0e41cef952ca2f30eca2fa99cd2608397b660af14aad57e8fa54c43b2581c9f60def4446a12ec99b6ced3a932ae38a2c9e5ea748772b8a22b76ac5d01fa7519f92c9206bccf7c0e68da1d1517aae9716e5f2a7c793f9279ef863d25488fcc07247797e97c394ba4fc114a10c463d4d984bb34bfbdac84b873898c8ce114de3346febd50e48785ca99c595f23f257d46c8b39b54b7062abb9455eb7d6ed4288cf0fc1e027bd36f543dd0b4c1316f9aaf60bc23e0465bc0f5e0e860612c72f24bf99aed27470c0617a0c353323f4701cc7d6d4b807b0148bd2f1e1c006651e8164bcd1c2a3660ac3c0c605b12a7d3dd30e4bcc94edb0ae36e78b736c43a3b9b1b920b4704d62673359b17c74dbad94aa4b0e326b9241efbfeb27b99b5cc9af359074885ca072d00353ea477479ee0ac1063454310030713dcd2173d2d5c7f68d5f62f78f5478de60d0e4303ad0df57b350982d61815395325be86c18f133e10f71aa8492494982e580cc00f0da7a1dc2a25aa8d75d6dbdc042c9eee0ebc811b3225499f9055136359d4063e834466d0566ccc83c7c1ed87d270bdd94445ff5465f421b134bc4be151cf51114b6986166d15ea9f5f65bc6dbcd44392ff1f3322a5cf188d1d96bacede7b86f023633d966d80d2983a1885c8724e4826a86dc27a95aba595f9041566d6618733eca72fa1cb87347bfa021b75cbe938ccb891b6a7555d747018bd7f552aec0c5799f3110018ddfb3af0d1ce95df738ef4bfcde02bb507d7d7b9b21ad26e72fc54dd8349a6f15e687e36e15757a4bf269ce9b766af65fa2e63365129369459bc4dc4114d13e94c21f05e36a40da9046a480ed625a22c1916727b34b83c61ffde305e5183b1b8ad8b475ddf7a06ae0d4903b165b4313d0919fef788c36592c2f03820acf523e5280fbe27130db58ed07053307dc980d9830ed340873debe0ac8dd2e0ef2f70b2b51e9e3a644ec5d0d80c7669cb259d3ae4bdd41b88b15159ce1e645762f40cb760f3c83aba2b6332680803d1383170dd6c4e338cc1ae406247d44a55ddeb193359370a5d0f3ed0fb2c4d0492c0dfaca2c7a536f7dd617fa3acae0a0e183c6618117154c6747e6546034c6d741ce55cf9a3cb2281fcd7d646a2c6b133f6dfac9922535852cafad7f18c9f0cbb3f6b5fe2ce6a82a4a78d8354150a3934cd84978422c36d4e414497bf5b9080780fbc58b5e48326c684b9e998b0dba802d810da531f4fcf969a20a6eeed9993fce954dcc90133454e7aefaf45528480929201d494824c3a01fe9c9037ba002d949005cb2a049104f5b4f90ac3d1d42d6125f8fe8a5c6916e879ea639a777e0cf61f00169b5afe3332d292a6c290e70a2e1ba75fb2e56223aae764b58de8ac2d10e87e2631f100842d5e2d754748968b48480897eda9f005f56a4970b1201128904522410d550a7bc698e090904c4d986e18e73cc28d66f4acb43b1e43f74f9d19414ad225209e9eeb71335ce0cd037fd0b1a342ddcc3c053b07c55a248ec97f2ef67175484eb84c6c7821d13978b08ba3dad136e7174a6494c01d596c9cd1c2dafb64e9e4f8a2ec1abda66f73bba32a73890fc536b12f83f8951a895d27b58b75e303c5e22af70981b16c9f29eb3267273680463b217f7a3695c2845e6bff7e37f94177deb2e5829b3b3530f9f3f7d43ed1a3ff174c04ff4ba9b2a21f3e19e2f396c82517a0ced44ba0a65c6378a7dc6e79d0b8c416924c12ace940b40ba4987fd24cd458dcd469bc6e5cf7887e20ccca160c535e41bf27973b13bc45c7abc70901d8e22aec7d309d33463a1d3ef30207cfb5d4f61bf344d0055ec178acc2b76383b622118051728d5e0584dc625b96f01d5e024328f8d95906e475b4f8c0e4a8123280bf1bffb8c6d95827a208d91f4d0a1fa4ce8f59054b9b491cfd868d434c7387740e9c5e3231f63fc0f60aa6efdb17518cfb665d69509922ec72c029174758d5f968f1d3a170d07b612c23d8e972558facf8358349c47c895e1bb8e7fd9682967314a5b42411c419269968a5343bcc90d5aa922023c3dfc2f48c8a846fd3fb3a69d3aa72db73f5835b62eae61cbb14612b345760656e7c579539fd0ca4c5b356a9ba076be0c6f24c2ea3389c373a71b6e156a506e658490e94a198abb55cdfd13667ef56a4dc9035d78e29f50cfd0200533e83f365aa77a6e0b19b4be92107e6413ff45f361772bc21625fb6e0c30ae3690783a3fc69f213937d888f7c8f6e438ff343ad1627768c3bbe4b84192cb0ba103aaf21f523005a1947c32169547f4b1d09d8fb1fae3c2be9694b1eeb6c23b05a0165910ae66d1483b83597c02125f986bd99f538da93f613a9763009d8eaabb3c5a5071ea9363a9fefe592f7eff3cad7eba081efb1e64dc2d6cc348bc877c98d9a5f0a48e43f1d85c37b2b802fa0a685de4d7e4ae16a3f36a02fb4f7f8d3b0712b032e7b609e8ed07318665bffbeea53563b50f216cb0b71707c6423eb460981cb3971a28699769a9aa2a6c4308bf985944c2792119d79f898996cea9700dee8726cde924e9f325515a80cf8a3c52717f40d684f1650d40a595967aa6301c0aa67c24061d2f0c3602d06f826c30fdf3c35ebed506ab6e9ac019e5559829bc191d1a27b44513b22d1f35a129d2af592d50ca7dfbf38794a67484ac529290a4431390d1ddb250d0d94862bf2727f1245c1da52e82e58fbf1f0f613dc97dd7f283cafa6634e4fcf09bb0c7a5ae81c0b7b5adfc56dcdf8016ddc98c8f4eff1ff98995744b5dd8afb034b49541f810f4ffbd819f8914c4f23f013806a6b0697812da1ec2ba6dee40456b206d946fc50dedd2972fea49f4bdbffab045c01e8a18f5bd298d975156ea029273a686a0ab671c92e378f5d93669fc01ff34fd6e280d1619427c46ffb61d48206731d0930d5d17aa282f5385287d1faa54ffbc4c80d14e06b6f6462d6cb6de61df765fe2d6dc9ab8ab1d3b307542f2f6698b94e32a879e135e14cc245a9695b9b34bd53b23963c"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100)) (async)
syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-ioctl$HIDIOCGRDESCSIZE-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100)) (async)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_control_io$uac1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_connect$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "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"})
syz_usb_connect$uac1(0x0, 0xf0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201100300000040732b29004000010203010902de0003010580070904000000010100000a2401000011000201020724040501c1a7090401000001020000090401010101020000072401050201000e24020106012808ed7c8d71303c0924020133040a002d0a240202a35a0300091c11240201030302f88f58e56f6e5f6b8b800905010900000701020725010c0a06000904020000010200000904020101010200000a2402020004030009000f2402020900950c05e6d016d9bf7307240103090110072401010105000c240201000406080866df490b2402017b036980194f3b09058209000040080e07250108071000"], &(0x7f0000000680)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x300, 0x4, 0xb, 0x4, 0xff, 0xff}, 0x9e, &(0x7f0000000400)={0x5, 0xf, 0x9e, 0x2, [@generic={0x8d, 0x10, 0x1, "6be52692563680cac3e2eab9ca71284de3298bbcb1b39d419b515bf8a9f2a5a803f5235653cf042952628273112642b1152e956f8d8f2a3b06019037e64e847fcd929d7f479f215e9150abd56e5c383d6f414ce829713c0493b8deed3354698bfae0f63e11dc94acec886764d35ea1adc7ee83b485def838e7f0eba03a98b4b2251928d192dbe999ed10"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x800, 0xf, 0x101}]}, 0x2, [{0x9d, &(0x7f00000004c0)=@string={0x9d, 0x3, "d032857f3dd8af3d54173d121e6d433362e63ba084463d28c0c55c3c9b9e61ff0a3796f1f2566733bac77244fdfd7c041edd3ab9a71316aa530b2b51ca6b6f5ab4bf5148a97a71fce22a48bb97c4969abcf6729b3aba369b09c9080f4e83b38679a96360391d02a92987022b321d229f6a907219c61d4c64b55657ab820ef5a9713c8bc18552bb6fff09069d7f2a72a815621c3792638d53cff1c1"}}, {0xd7, &(0x7f0000000580)=@string={0xd7, 0x3, "ed0a5d370caa9383413dce7d3f8614f26332203a2d53cca69cdacccd0af734f9da9000e91df16da79f71901a39049b75e73aef0dcfdd93dd116ddaaf090861d5ff07872a9d0e3077281c78d4feb98d407185134632667f4df903462b01d93ff6893acdd477a6928dedac1a77f3fb570ed1e78baf306463a4485b7211b1943e6d2ac977a641bbdb302668eb1f54683523269752bf33cc055ca25e34796a9f256b40de31431f86f5c20b9c33f21e1ea0b9bedb6f3df9ca712eba0f8dc858d19ac73789ce0c6972d385d6c0ced85b4e82089df1b3f820"}}]})
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-ioctl$HIDIOCGRDESC-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
ioctl$HIDIOCGRDESC(r2, 0x90044802, &(0x7f0000000700)={0xbe2, "c77fdace6d0f08d330a8c03534c211fb2db8ff6967d025b4c050d8d54debeaab55a0afd027977e80a838cf4a3688a9dcc399709cc3c7e3ea3d2deed769ad0133118fa80ca6dc683f344467d68f3e6d78228efd0ac69bc07420181e901c5b82a36aa3ee8e46eb6f9d3eded3af67270028e0328c6de3ea2c5488a84497394c5f0dd1122b92cc10f8f0a9cd255d166ab23ef66d01494f3a7dfb3e02233476a2307660c3ffd40d502282d25c51a33f74dddfc6a38c03c31d8e7a8efd70ec445aac15a808c546f721ac369b05fdae73295353a79a944b33fc6976bc4e8d3f33e2a54e888389e6f8458e612c2505cb239a3387a6c64475a1ddd2cdd74d1cde8023f2a27c3a0648c8065d5e7399f1567828f9ca1b6289a4d67c5d8c87b622699894fb2ffdd7e1876c930242d65fbb694767b107f8ba560627d21a8c7652aa0cd5f80efb9732997aa360470d5ce54250f3a13f65c0655e9acd612888ecfa327134c64b180ca5d03bd944da4688127c50b05689d670113fc95b13f667d137b863af5145f29688d1fefefe2330f0fd907e86461c3ca0af23996d7b1a01517fcc2de44007c06f6d951dc2233837887e73a948bdd596f5adbc031b3852fcc2c9e68b7013ec84715490391d3a118ad29ccf5878f38a10794d5020b909d340750930c6251a6a0e2ed8c1fc365251d2ace0752492f3157254e425e81a71af2e869766e4fc67bab97d68d1e1a993fcf06d910cf84ebe1dbd13abf516d5915f2ff83bd17a2485926b9ea1394a72afd7ac0e8f53131d90b54bfe1c5de218d043232ac3479cf5bcf6cdf8622fe20e883a0df595818555fc024c20b4b3e5403d3e4642bbead00e038607e59a33cba9d5355831ac2f663446c278d00b0e380bfef89a9761e7c93b9a02de771fe16761d9939ea0a181efec582d088c072595c6e1e8615eded5f92c887a2dcc49bcca76d5bb4e45b9555b6c52b92a4f6c785bb882975850a60f8f04ca61403ae43c02ee8ad690da95784db2713cccb6fec27423498e9933163308a4d7015c23a4e01c31b1fa7c0e9b664630d859607b2f211137b44d90d4cf14ecc7c269753553b933393df3828ad73aa559da46815d096b95fe370e8beedd7d5052fad3c6c5d8f1ed3881c8fb34f6e944a377d83a0632ed6c47dc2693fb9ccf87f6c3de3ece88025527a6316f492f8f6b3728439d933dd8d1bfe055125a127402a9489e7e8726fd7cec9d9bb2df331162f807cea2696f3f0a480762bd0e5316c8fb3075bf4fb2927acb0e41cef952ca2f30eca2fa99cd2608397b660af14aad57e8fa54c43b2581c9f60def4446a12ec99b6ced3a932ae38a2c9e5ea748772b8a22b76ac5d01fa7519f92c9206bccf7c0e68da1d1517aae9716e5f2a7c793f9279ef863d25488fcc07247797e97c394ba4fc114a10c463d4d984bb34bfbdac84b873898c8ce114de3346febd50e48785ca99c595f23f257d46c8b39b54b7062abb9455eb7d6ed4288cf0fc1e027bd36f543dd0b4c1316f9aaf60bc23e0465bc0f5e0e860612c72f24bf99aed27470c0617a0c353323f4701cc7d6d4b807b0148bd2f1e1c006651e8164bcd1c2a3660ac3c0c605b12a7d3dd30e4bcc94edb0ae36e78b736c43a3b9b1b920b4704d62673359b17c74dbad94aa4b0e326b9241efbfeb27b99b5cc9af359074885ca072d00353ea477479ee0ac1063454310030713dcd2173d2d5c7f68d5f62f78f5478de60d0e4303ad0df57b350982d61815395325be86c18f133e10f71aa8492494982e580cc00f0da7a1dc2a25aa8d75d6dbdc042c9eee0ebc811b3225499f9055136359d4063e834466d0566ccc83c7c1ed87d270bdd94445ff5465f421b134bc4be151cf51114b6986166d15ea9f5f65bc6dbcd44392ff1f3322a5cf188d1d96bacede7b86f023633d966d80d2983a1885c8724e4826a86dc27a95aba595f9041566d6618733eca72fa1cb87347bfa021b75cbe938ccb891b6a7555d747018bd7f552aec0c5799f3110018ddfb3af0d1ce95df738ef4bfcde02bb507d7d7b9b21ad26e72fc54dd8349a6f15e687e36e15757a4bf269ce9b766af65fa2e63365129369459bc4dc4114d13e94c21f05e36a40da9046a480ed625a22c1916727b34b83c61ffde305e5183b1b8ad8b475ddf7a06ae0d4903b165b4313d0919fef788c36592c2f03820acf523e5280fbe27130db58ed07053307dc980d9830ed340873debe0ac8dd2e0ef2f70b2b51e9e3a644ec5d0d80c7669cb259d3ae4bdd41b88b15159ce1e645762f40cb760f3c83aba2b6332680803d1383170dd6c4e338cc1ae406247d44a55ddeb193359370a5d0f3ed0fb2c4d0492c0dfaca2c7a536f7dd617fa3acae0a0e183c6618117154c6747e6546034c6d741ce55cf9a3cb2281fcd7d646a2c6b133f6dfac9922535852cafad7f18c9f0cbb3f6b5fe2ce6a82a4a78d8354150a3934cd84978422c36d4e414497bf5b9080780fbc58b5e48326c684b9e998b0dba802d810da531f4fcf969a20a6eeed9993fce954dcc90133454e7aefaf45528480929201d494824c3a01fe9c9037ba002d949005cb2a049104f5b4f90ac3d1d42d6125f8fe8a5c6916e879ea639a777e0cf61f00169b5afe3332d292a6c290e70a2e1ba75fb2e56223aae764b58de8ac2d10e87e2631f100842d5e2d754748968b48480897eda9f005f56a4970b1201128904522410d550a7bc698e090904c4d986e18e73cc28d66f4acb43b1e43f74f9d19414ad225209e9eeb71335ce0cd037fd0b1a342ddcc3c053b07c55a248ec97f2ef67175484eb84c6c7821d13978b08ba3dad136e7174a6494c01d596c9cd1c2dafb64e9e4f8a2ec1abda66f73bba32a73890fc536b12f83f8951a895d27b58b75e303c5e22af70981b16c9f29eb3267273680463b217f7a3695c2845e6bff7e37f94177deb2e5829b3b3530f9f3f7d43ed1a3ff174c04ff4ba9b2a21f3e19e2f396c82517a0ced44ba0a65c6378a7dc6e79d0b8c416924c12ace940b40ba4987fd24cd458dcd469bc6e5cf7887e20ccca160c535e41bf27973b13bc45c7abc70901d8e22aec7d309d33463a1d3ef30207cfb5d4f61bf344d0055ec178acc2b76383b622118051728d5e0584dc625b96f01d5e024328f8d95906e475b4f8c0e4a8123280bf1bffb8c6d95827a208d91f4d0a1fa4ce8f59054b9b491cfd868d434c7387740e9c5e3231f63fc0f60aa6efdb17518cfb665d69509922ec72c029174758d5f968f1d3a170d07b612c23d8e972558facf8358349c47c895e1bb8e7fd9682967314a5b42411c419269968a5343bcc90d5aa922023c3dfc2f48c8a846fd3fb3a69d3aa72db73f5835b62eae61cbb14612b345760656e7c579539fd0ca4c5b356a9ba076be0c6f24c2ea3389c373a71b6e156a506e658490e94a198abb55cdfd13667ef56a4dc9035d78e29f50cfd0200533e83f365aa77a6e0b19b4be92107e6413ff45f361772bc21625fb6e0c30ae3690783a3fc69f213937d888f7c8f6e438ff343ad1627768c3bbe4b84192cb0ba103aaf21f523005a1947c32169547f4b1d09d8fb1fae3c2be9694b1eeb6c23b05a0165910ae66d1483b83597c02125f986bd99f538da93f613a9763009d8eaabb3c5a5071ea9363a9fefe592f7eff3cad7eba081efb1e64dc2d6cc348bc877c98d9a5f0a48e43f1d85c37b2b802fa0a685de4d7e4ae16a3f36a02fb4f7f8d3b0712b032e7b609e8ed07318665bffbeea53563b50f216cb0b71707c6423eb460981cb3971a28699769a9aa2a6c4308bf985944c2792119d79f898996cea9700dee8726cde924e9f325515a80cf8a3c52717f40d684f1650d40a595967aa6301c0aa67c24061d2f0c3602d06f826c30fdf3c35ebed506ab6e9ac019e5559829bc191d1a27b44513b22d1f35a129d2af592d50ca7dfbf38794a67484ac529290a4431390d1ddb250d0d94862bf2727f1245c1da52e82e58fbf1f0f613dc97dd7f283cafa6634e4fcf09bb0c7a5ae81c0b7b5adfc56dcdf8016ddc98c8f4eff1ff98995744b5dd8afb034b49541f810f4ffbd819f8914c4f23f013806a6b0697812da1ec2ba6dee40456b206d946fc50dedd2972fea49f4bdbffab045c01e8a18f5bd298d975156ea029273a686a0ab671c92e378f5d93669fc01ff34fd6e280d1619427c46ffb61d48206731d0930d5d17aa282f5385287d1faa54ffbc4c80d14e06b6f6462d6cb6de61df765fe2d6dc9ab8ab1d3b307542f2f6698b94e32a879e135e14cc245a9695b9b34bd53b23963c"})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_open_dev$hidraw-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f00000006c0), 0x3, 0x300)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$cdc_ecm-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_ep_write$ath9k_ep1-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="0000004e3b6cb9375580dccdc1d5bb1a7a095daac469364374108ebb9f1df850209ab78173b6fed3b9a1be2d2f5126337b72d89485fb61e77d2f1c8fff4adc69f3b4a7587884040ad06aaffa65388004ba98850b40b6cca8c53b34e5bf4ac4c168334ab10a4c130ca063a6926343691f6c0dfc657b710758999ef7efa90055babae384fdd9dbcccd88e9820c02aea29335c8ad268037abc8f1ee4d539bc070b7ae8cf7256b41172433d10a0cca38ac523ad29878cd1a1fd3851693791d9a492f5fa3db8219ce84aa5853c5d4c88742dacfc1b9768773a0a79648de3abbed447f4fdf2ad82e7146487f41d46f386c61e22b299a47f5b681c655334ab98c4c39f716cae6698142b4f308f5f6d394b457d7a8e1f231c9a163d6b8841c4b4827e76422000000000000000f87ab35cf2788e8f4f437dffad33d6a6610b5a6214ade5ab22d1a5d2a11df9d7e879203f92627381d210c1de9764d7a35f1863cf80a58c216c6f43aa92d13"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_ep_write-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): ioctl$HIDIOCGRDESCSIZE-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000100))
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(0xffffffffffffffff, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x10, &(0x7f00000000c0)={0x20, 0x18}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, 0x0)
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x0, &(0x7f0000000040)) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b")
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
program did not crash
simplifying guilty program options
testing program (duration=30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
extracting C reproducer
testing compiled C program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
program did not crash
testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
validation run: crashed=true
testing program (duration=30s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect-syz_usb_control_io$cdc_ecm-syz_usb_control_io$lan78xx-syz_usb_control_io$uac1-syz_usb_ep_write$ath9k_ep1-syz_usb_ep_write-syz_usb_connect
detailed listing:
executing program 0:
r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d118af1e0000010203010902270001010080fa0904000003ffffff00070581020002000705820200020007050302"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x18, 0x2, "0200"}, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB])
syz_usb_ep_write(r0, 0x3, 0x8, &(0x7f0000000040)="621881105379a06b") (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0], 0x0)

program crashed: KASAN: slab-out-of-bounds Write in gb_operation_message_alloc
validation run: crashed=true
reproducing took 21m5.069271117s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in gb_operation_message_init drivers/greybus/operation.c:341 [inline]
BUG: KASAN: slab-out-of-bounds in gb_operation_message_alloc+0x26e/0x2c0 drivers/greybus/operation.c:385
Write of size 2 at addr ffff888013b9f3e2 by task syz.0.17/5925

CPU: 1 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 gb_operation_message_init drivers/greybus/operation.c:341 [inline]
 gb_operation_message_alloc+0x26e/0x2c0 drivers/greybus/operation.c:385
 gb_operation_create_common+0x9f/0x710 drivers/greybus/operation.c:532
 gb_operation_create_incoming drivers/greybus/operation.c:644 [inline]
 gb_connection_recv_request drivers/greybus/operation.c:926 [inline]
 gb_connection_recv+0x1dc/0x1050 drivers/greybus/operation.c:1063
 greybus_data_rcvd+0x244/0x600 drivers/greybus/connection.c:89
 cport_in_callback+0x1fb/0x280 drivers/greybus/es2.c:840
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:check_kcov_mode kernel/kcov.c:181 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x70 kernel/kcov.c:213
Code: 80 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b <8b> 82 10 17 00 00 83 f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17
RSP: 0000:ffffc9000330fcf0 EFLAGS: 00000246
RAX: 8000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88802a038000 RSI: ffffffff81f6b488 RDI: ffff88802a038000
RBP: ffffc9000330fd50 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: 000000000bebc200 R15: dffffc0000000000
 trace_hrtimer_setup+0x78/0x220 include/trace/events/timer.h:193
 debug_setup_on_stack kernel/time/hrtimer.c:524 [inline]
 hrtimer_setup_sleeper_on_stack kernel/time/hrtimer.c:2396 [inline]
 hrtimer_nanosleep+0xad/0x350 kernel/time/hrtimer.c:2473
 common_nsleep+0xa1/0xd0 kernel/time/posix-timers.c:1360
 __do_sys_clock_nanosleep_time32 kernel/time/posix-timers.c:1434 [inline]
 __se_sys_clock_nanosleep_time32 kernel/time/posix-timers.c:1411 [inline]
 __ia32_sys_clock_nanosleep_time32+0x352/0x480 kernel/time/posix-timers.c:1411
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 do_int80_emulation+0x166/0x650 arch/x86/entry/syscall_32.c:166
 asm_int80_emulation+0x1a/0x20 arch/x86/include/asm/idtentry.h:598
RIP: 0023:0xf71a75ab
Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
RSP: 002b:00000000f686438c EFLAGS: 00000246 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00000000f6864424 RSI: 00000000f686441c RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Allocated by task 5925:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5414 [inline]
 __kmalloc_noprof+0x32f/0x840 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 gb_operation_message_alloc+0x9b/0x2c0 drivers/greybus/operation.c:380
 gb_operation_create_common+0x9f/0x710 drivers/greybus/operation.c:532
 gb_operation_create_incoming drivers/greybus/operation.c:644 [inline]
 gb_connection_recv_request drivers/greybus/operation.c:926 [inline]
 gb_connection_recv+0x1dc/0x1050 drivers/greybus/operation.c:1063
 greybus_data_rcvd+0x244/0x600 drivers/greybus/connection.c:89
 cport_in_callback+0x1fb/0x280 drivers/greybus/es2.c:840
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674

The buggy address belongs to the object at ffff888013b9f3e0
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 2 bytes inside of
 allocated 3-byte region [ffff888013b9f3e0, ffff888013b9f3e3)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888013b9f120 pfn:0x13b9f
flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000200 ffff88801c042500 ffffea000093fa10 ffffea0000852290
raw: ffff888013b9f120 0000000000800076 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 46634677482
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x6a8/0x870 mm/slub.c:5545
 __kmemdup_nul mm/util.c:64 [inline]
 kstrdup+0x51/0xe0 mm/util.c:84
 kstrdup_const+0x63/0x80 mm/util.c:104
 __kernfs_new_node+0x9b/0xa10 fs/kernfs/dir.c:661
 kernfs_new_node fs/kernfs/dir.c:751 [inline]
 kernfs_create_dir_ns+0xa6/0x2b0 fs/kernfs/dir.c:1120
 sysfs_create_dir_ns+0x13a/0x2b0 fs/sysfs/dir.c:59
 create_dir lib/kobject.c:73 [inline]
 kobject_add_internal+0x2c8/0x930 lib/kobject.c:240
 kobject_add_varg lib/kobject.c:374 [inline]
 kobject_add+0x16a/0x1e0 lib/kobject.c:426
 device_add+0x294/0x1970 drivers/base/core.c:3699
 netdev_register_kobject+0x1df/0x410 net/core/net-sysfs.c:2340
page last free pid 5865 tgid 5865 ts 46561283457 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x269/0x6a0 mm/slub.c:5010
 alloc_empty_file+0x5b/0x1c0 fs/file_table.c:262
 alloc_file fs/file_table.c:396 [inline]
 alloc_file_pseudo+0x183/0x290 fs/file_table.c:427
 sock_alloc_file+0x50/0x210 net/socket.c:557
 sock_map_fd net/socket.c:587 [inline]
 __sys_socket+0x1c0/0x260 net/socket.c:1827
 __do_compat_sys_socketcall net/compat.c:447 [inline]
 __se_compat_sys_socketcall net/compat.c:422 [inline]
 __ia32_compat_sys_socketcall+0x65b/0x770 net/compat.c:422
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e

Memory state around the buggy address:
 ffff888013b9f280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff888013b9f300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff888013b9f380: fa fc fc fc fa fc fc fc fa fc fc fc 03 fc fc fc
                                                       ^
 ffff888013b9f400: fa fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc
 ffff888013b9f480: fa fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc
==================================================================
----------------
Code disassembly (best guess):
   0:	80 12 48             	adcb   $0x48,(%rdx)
   3:	63 c8                	movsxd %eax,%ecx
   5:	a9 00 01 00 ff       	test   $0xff000100,%eax
   a:	74 1e                	je     0x2a
   c:	f6 c4 01             	test   $0x1,%ah
   f:	74 44                	je     0x55
  11:	a9 00 00 00 0f       	test   $0xf000000,%eax
  16:	75 3d                	jne    0x55
  18:	f7 c1 00 00 00 f0    	test   $0xf0000000,%ecx
  1e:	75 35                	jne    0x55
  20:	8b 82 3c 17 00 00    	mov    0x173c(%rdx),%eax
  26:	85 c0                	test   %eax,%eax
  28:	74 2b                	je     0x55
* 2a:	8b 82 10 17 00 00    	mov    0x1710(%rdx),%eax <-- trapping instruction
  30:	83 f8 02             	cmp    $0x2,%eax
  33:	75 20                	jne    0x55
  35:	48 8b 8a 18 17 00 00 	mov    0x1718(%rdx),%rcx
  3c:	8b                   	.byte 0x8b
  3d:	92                   	xchg   %eax,%edx
  3e:	14 17                	adc    $0x17,%al

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-out-of-bounds in gb_operation_message_init drivers/greybus/operation.c:341 [inline]
BUG: KASAN: slab-out-of-bounds in gb_operation_message_alloc+0x26e/0x2c0 drivers/greybus/operation.c:385
Write of size 2 at addr ffff888013b9f3e2 by task syz.0.17/5925

CPU: 1 UID: 0 PID: 5925 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
Call Trace:
 <IRQ>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 gb_operation_message_init drivers/greybus/operation.c:341 [inline]
 gb_operation_message_alloc+0x26e/0x2c0 drivers/greybus/operation.c:385
 gb_operation_create_common+0x9f/0x710 drivers/greybus/operation.c:532
 gb_operation_create_incoming drivers/greybus/operation.c:644 [inline]
 gb_connection_recv_request drivers/greybus/operation.c:926 [inline]
 gb_connection_recv+0x1dc/0x1050 drivers/greybus/operation.c:1063
 greybus_data_rcvd+0x244/0x600 drivers/greybus/connection.c:89
 cport_in_callback+0x1fb/0x280 drivers/greybus/es2.c:840
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:check_kcov_mode kernel/kcov.c:181 [inline]
RIP: 0010:__sanitizer_cov_trace_pc+0x40/0x70 kernel/kcov.c:213
Code: 80 12 48 63 c8 a9 00 01 00 ff 74 1e f6 c4 01 74 44 a9 00 00 00 0f 75 3d f7 c1 00 00 00 f0 75 35 8b 82 3c 17 00 00 85 c0 74 2b <8b> 82 10 17 00 00 83 f8 02 75 20 48 8b 8a 18 17 00 00 8b 92 14 17
RSP: 0000:ffffc9000330fcf0 EFLAGS: 00000246
RAX: 8000000000000000 RBX: 0000000000000001 RCX: 0000000000000000
RDX: ffff88802a038000 RSI: ffffffff81f6b488 RDI: ffff88802a038000
RBP: ffffc9000330fd50 R08: 0000000000000001 R09: 0000000000000000
R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001
R13: 0000000000000000 R14: 000000000bebc200 R15: dffffc0000000000
 trace_hrtimer_setup+0x78/0x220 include/trace/events/timer.h:193
 debug_setup_on_stack kernel/time/hrtimer.c:524 [inline]
 hrtimer_setup_sleeper_on_stack kernel/time/hrtimer.c:2396 [inline]
 hrtimer_nanosleep+0xad/0x350 kernel/time/hrtimer.c:2473
 common_nsleep+0xa1/0xd0 kernel/time/posix-timers.c:1360
 __do_sys_clock_nanosleep_time32 kernel/time/posix-timers.c:1434 [inline]
 __se_sys_clock_nanosleep_time32 kernel/time/posix-timers.c:1411 [inline]
 __ia32_sys_clock_nanosleep_time32+0x352/0x480 kernel/time/posix-timers.c:1411
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 do_int80_emulation+0x166/0x650 arch/x86/entry/syscall_32.c:166
 asm_int80_emulation+0x1a/0x20 arch/x86/include/asm/idtentry.h:598
RIP: 0023:0xf71a75ab
Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
RSP: 002b:00000000f686438c EFLAGS: 00000246 ORIG_RAX: 000000000000010b
RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000
RDX: 00000000f6864424 RSI: 00000000f686441c RDI: 0000000000000000
RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
 </TASK>

Allocated by task 5925:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __do_kmalloc_node mm/slub.c:5414 [inline]
 __kmalloc_noprof+0x32f/0x840 mm/slub.c:5439
 _kmalloc_noprof include/linux/slab.h:995 [inline]
 _kzalloc_noprof include/linux/slab.h:1312 [inline]
 gb_operation_message_alloc+0x9b/0x2c0 drivers/greybus/operation.c:380
 gb_operation_create_common+0x9f/0x710 drivers/greybus/operation.c:532
 gb_operation_create_incoming drivers/greybus/operation.c:644 [inline]
 gb_connection_recv_request drivers/greybus/operation.c:926 [inline]
 gb_connection_recv+0x1dc/0x1050 drivers/greybus/operation.c:1063
 greybus_data_rcvd+0x244/0x600 drivers/greybus/connection.c:89
 cport_in_callback+0x1fb/0x280 drivers/greybus/es2.c:840
 __usb_hcd_giveback_urb+0x38e/0x610 drivers/usb/core/hcd.c:1657
 usb_hcd_giveback_urb+0x3ca/0x4a0 drivers/usb/core/hcd.c:1741
 dummy_timer+0xdb2/0x3700 drivers/usb/gadget/udc/dummy_hcd.c:2019
 __run_hrtimer kernel/time/hrtimer.c:2067 [inline]
 __hrtimer_run_queues+0x462/0x9c0 kernel/time/hrtimer.c:2124
 hrtimer_run_softirq+0x1ca/0x360 kernel/time/hrtimer.c:2141
 handle_softirqs+0x1e6/0x9d0 kernel/softirq.c:645
 __do_softirq kernel/softirq.c:679 [inline]
 invoke_softirq kernel/softirq.c:519 [inline]
 __irq_exit_rcu+0x16a/0x210 kernel/softirq.c:758
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:775
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674

The buggy address belongs to the object at ffff888013b9f3e0
 which belongs to the cache kmalloc-8 of size 8
The buggy address is located 2 bytes inside of
 allocated 3-byte region [ffff888013b9f3e0, ffff888013b9f3e3)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888013b9f120 pfn:0x13b9f
flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000200 ffff88801c042500 ffffea000093fa10 ffffea0000852290
raw: ffff888013b9f120 0000000000800076 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5865, tgid 5865 (syz-executor), ts 46634677482
 set_page_owner include/linux/page_owner.h:33 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1871
 prep_new_page mm/page_alloc.c:1879 [inline]
 get_page_from_freelist+0x110d/0x35d0 mm/page_alloc.c:3943
 __alloc_frozen_pages_noprof+0x2eb/0x3300 mm/page_alloc.c:5436
 alloc_slab_page mm/slub.c:3347 [inline]
 allocate_slab mm/slub.c:3462 [inline]
 new_slab+0xa9/0x6e0 mm/slub.c:3513
 refill_objects+0xe3/0x410 mm/slub.c:7410
 refill_sheaf mm/slub.c:2885 [inline]
 __pcs_replace_empty_main+0x35e/0x650 mm/slub.c:4774
 alloc_from_pcs mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:4984 [inline]
 __do_kmalloc_node mm/slub.c:5413 [inline]
 __kmalloc_node_track_caller_noprof+0x6a8/0x870 mm/slub.c:5545
 __kmemdup_nul mm/util.c:64 [inline]
 kstrdup+0x51/0xe0 mm/util.c:84
 kstrdup_const+0x63/0x80 mm/util.c:104
 __kernfs_new_node+0x9b/0xa10 fs/kernfs/dir.c:661
 kernfs_new_node fs/kernfs/dir.c:751 [inline]
 kernfs_create_dir_ns+0xa6/0x2b0 fs/kernfs/dir.c:1120
 sysfs_create_dir_ns+0x13a/0x2b0 fs/sysfs/dir.c:59
 create_dir lib/kobject.c:73 [inline]
 kobject_add_internal+0x2c8/0x930 lib/kobject.c:240
 kobject_add_varg lib/kobject.c:374 [inline]
 kobject_add+0x16a/0x1e0 lib/kobject.c:426
 device_add+0x294/0x1970 drivers/base/core.c:3699
 netdev_register_kobject+0x1df/0x410 net/core/net-sysfs.c:2340
page last free pid 5865 tgid 5865 ts 46561283457 stack trace:
 reset_page_owner include/linux/page_owner.h:26 [inline]
 __free_pages_prepare mm/page_alloc.c:1418 [inline]
 __free_frozen_pages+0x79f/0x10f0 mm/page_alloc.c:2962
 qlink_free mm/kasan/quarantine.c:163 [inline]
 qlist_free_all+0x47/0xf0 mm/kasan/quarantine.c:179
 kasan_quarantine_reduce+0x1a0/0x1f0 mm/kasan/quarantine.c:286
 __kasan_slab_alloc+0x69/0x90 mm/kasan/common.c:350
 kasan_slab_alloc include/linux/kasan.h:253 [inline]
 slab_post_alloc_hook mm/slub.c:4683 [inline]
 slab_alloc_node mm/slub.c:4996 [inline]
 kmem_cache_alloc_noprof+0x269/0x6a0 mm/slub.c:5010
 alloc_empty_file+0x5b/0x1c0 fs/file_table.c:262
 alloc_file fs/file_table.c:396 [inline]
 alloc_file_pseudo+0x183/0x290 fs/file_table.c:427
 sock_alloc_file+0x50/0x210 net/socket.c:557
 sock_map_fd net/socket.c:587 [inline]
 __sys_socket+0x1c0/0x260 net/socket.c:1827
 __do_compat_sys_socketcall net/compat.c:447 [inline]
 __se_compat_sys_socketcall net/compat.c:422 [inline]
 __ia32_compat_sys_socketcall+0x65b/0x770 net/compat.c:422
 do_syscall_32_irqs_on arch/x86/entry/syscall_32.c:79 [inline]
 __do_fast_syscall_32+0x13a/0x8b0 arch/x86/entry/syscall_32.c:291
 do_fast_syscall_32+0x32/0x70 arch/x86/entry/syscall_32.c:316
 entry_SYSENTER_compat_after_hwframe+0x84/0x8e

Memory state around the buggy address:
 ffff888013b9f280: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
 ffff888013b9f300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
>ffff888013b9f380: fa fc fc fc fa fc fc fc fa fc fc fc 03 fc fc fc
                                                       ^
 ffff888013b9f400: fa fc fc fc fa fc fc fc 06 fc fc fc 06 fc fc fc
 ffff888013b9f480: fa fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc
==================================================================
----------------
Code disassembly (best guess):
   0:	80 12 48             	adcb   $0x48,(%rdx)
   3:	63 c8                	movsxd %eax,%ecx
   5:	a9 00 01 00 ff       	test   $0xff000100,%eax
   a:	74 1e                	je     0x2a
   c:	f6 c4 01             	test   $0x1,%ah
   f:	74 44                	je     0x55
  11:	a9 00 00 00 0f       	test   $0xf000000,%eax
  16:	75 3d                	jne    0x55
  18:	f7 c1 00 00 00 f0    	test   $0xf0000000,%ecx
  1e:	75 35                	jne    0x55
  20:	8b 82 3c 17 00 00    	mov    0x173c(%rdx),%eax
  26:	85 c0                	test   %eax,%eax
  28:	74 2b                	je     0x55
* 2a:	8b 82 10 17 00 00    	mov    0x1710(%rdx),%eax <-- trapping instruction
  30:	83 f8 02             	cmp    $0x2,%eax
  33:	75 20                	jne    0x55
  35:	48 8b 8a 18 17 00 00 	mov    0x1718(%rdx),%rcx
  3c:	8b                   	.byte 0x8b
  3d:	92                   	xchg   %eax,%edx
  3e:	14 17                	adc    $0x17,%al