Extracting prog: 6m40.307570083s
Minimizing prog: 37m59.447841958s
Simplifying prog options: 0s
Extracting C: 1m5.514254538s
Simplifying C: 26m23.15727381s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend-syz_open_dev$sg-bpf$BPF_PROG_QUERY-quotactl$Q_SYNC
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x11, 0x0, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
bisect: bisecting 30 programs with base timeout 30s
testing program (duration=37s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [10, 2, 8, 15, 10, 24, 11, 22, 27, 10, 22, 25, 6, 6, 4, 27, 27, 15, 15, 19, 4, 19, 20, 4, 4, 6, 15, 5, 30, 12]
detailed listing:
executing program 3:
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, 0x1}, 0xc)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000080)='1', 0x1)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x2280)
write$sndseq(r1, &(0x7f0000000100)=[{0x1, 0x1, 0x13, 0x8, @time={0x7fff, 0x8}, {0x2, 0x4}, {0x9}, @raw32={[0x4, 0x8, 0x8]}}], 0x1c)
ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000140))
ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000240)={{0x3, 0x0, 0x80000001, 0x1, 0xc}, 0x3ff, 0x4, 0x4d})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000340)={0xc})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000005c0)={{0x82, 0xf}, {0x81, 0xa}, 0x2a79, 0xd, 0x1})
executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x126, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f00000002c0), 0x4)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f0000000000)="12e0fc4d77f3b98f9d39e0828fbb0f38fcdd8edf96ad3068d960", &(0x7f0000000140)=""/143, &(0x7f00000003c0)="cb67af570d7df88402d0b21560f5917921071e7fb2da53613978f03a0466a6d26bc6a1dd5b52dabae9c724438204c5be3dc0d6bd50d0248607a9ac268e734b09f8a4a71fd0945181adf24f452aa48b598d8a018d9f2c8209a51d43ff03ed85f9f9f0", &(0x7f0000000440)="62b53806282217402a6d2e4076a8980de48bff005be944e8da1a6146c63e2091ec745c26c0007fe96f85e61803d24bc9e9ff034b8c38da844bdc84508e44c0229b11a605a3d6853a39cb1d7e0c04c9b34b61b6808892c0aa80b430e167", 0x7fff, r0}, 0x38)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f0000000300)={r3, 0x0, 0x25, 0x1, @val=@tcx={@void, @value=r3}}, 0x1c)
executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x106f)
ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
add_key(0x0, 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff)
executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000f00), 0x4)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e)
connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="120100001ca37b10720c1300bebaaf0203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000001c0)={0x40, 0x1, 0x16, "4de315c47bf1784c4e4ec7e4d931b936042e13b72ec1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
close_range(r0, r0, 0x2)
r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x311003)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x4)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x4, 0xffffffff, 0x5, r3}, &(0x7f0000000100)=0x10)
ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, &(0x7f0000000200)={&(0x7f0000000100)="a048d2828481f2f3418b435928f7bf80cd61bb8bb96c21759002f6a9a7abf88879ad4cabfb0329a283582d726684275a45a5943a0b1db547e3a3cbb176b4ace91b922c69253aae63903e1ffb6d63b9d887ee809788344c", 0x57, &(0x7f0000000180)=""/100, 0x64})
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x1000}, 0x20)
mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2)
r4 = syz_open_dev$vcsn(&(0x7f0000000240), 0x2, 0x0)
ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000002c0)=@attr_other={0x0, 0x2b9, 0x401, &(0x7f0000000280)=0xce89})
r5 = inotify_init1(0x80000)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20003, 0x20)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r6, 0xffffffffffffffff, 0x0)
r7 = dup(r5)
read$FUSE(r7, 0x0, 0x0)
r8 = pidfd_getfd(r7, r5, 0x0)
connect$rxrpc(r8, &(0x7f0000000080)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}}, 0x24)
executing program 0:
r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x101}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@allocspi={0x12c, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffff7ffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x5}, [@address_filter={0x28, 0x1a, {@in=@remote, @in6=@empty, 0x2, 0x9, 0x4}}, @sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xb}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x4005}, 0x0)
executing program 4:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000a0)
r1 = epoll_create1(0x0)
r2 = epoll_create1(0x0)
close(r1)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000200)=0x8000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5, 0x40000000}, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000140)={0x77540947ad9a168d})
r6 = socket(0x80000000000000a, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000000)={@mcast1, 0x8006f})
r7 = accept$phonet_pipe(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10)
sendmmsg(r7, &(0x7f00000007c0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x2, 0x92, 0x2, "e3881ad57d4472cf14df3dce8a562b03c3217c3875c72db993ee5458a433651dd06f30deab375a0f0db83c587fe0ad51926f7bf5b30e0fd9826272cdf6fe0e", 0x30}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)="33828aec558ea75ae9db2661f555e463446feed98780dbd5f22f2d0e659bb714f1ca6e105ae804b08423298f6f558a7012f9cc9e87e62b0d02e13eac9474b88aae4ad39f8328af734f759d527d9db3393f01d36f9cf9a918e7f167e79fa6aba4eefaccc9fa8747417d3d3bda8540312b345e99599e63d4494a7495ac9dbf5acc7e6d621966af9ea7c4f7f53c7186cf7a66bc", 0x92}, {&(0x7f0000004980)="e4dbc3269829dc1d184f362b509499039b166d68a59e087ee3f29602e37af98c122593481ae7573afdc5348af0720eacadc3ddf60fa48cf51c222e3e0e80cad07897a2f04f727075c67fecf0360693f0c9e0d9606c8475e39554b339e4f8186655160a647eab3e0867dca41341b1c81fb22adfb0ab3d3fc15bb7e557a79c88e685889751ab4e3f10a6cf88c23a32860f9ab05d1f4ad4c903dda7cc3e1c42dfc46451248f15aa576763c62cb1c253c849c3f5f2abc8d3937e9bfab6e24a487e37fb3d6ae086b404df2302037a1a7a42185aaea81876f541251dbcd712dd374374b021959e7b09ebeec9971613c66107cc635803a3aa2a0d81624768361a0000000071eac8d7c64f7675de41a881b5524a33d1ba3a8d78ffa23598c8f2210149f8e3b20e143389ca2bc71ff3", 0x12b}, {&(0x7f00000004c0)="bb78a1194088725f8095bcd205d87e3a0b33682bba72efdbb980216105e13bbf3c5342e4e4f41304932e75cbfe5a46cce01f049c00feb8f36d8dd32bb6ef23024518a5d1760fd3bb0b5a2a4c55fe9f8820b23c9b99ded88727d867cb1d13c4bb478d01ebdc61c364c7338a18f61d60aceeeb51143901ae905d76e5dbbf06769106c55c4008a515e9190d57e514692d0f21b3aa8115c9713645d05be1178f0b4b1dda58ccfac112fa2bb53b36d76dd7e50f2524f59421f1c4c08b37ed2986b473e33376e3167455b5dd5a245e75a5f1bb58f7afe19492bfca2a3f87e2a1b242a6dfcc5f9b5b125650e9bd29b365a1", 0xee}, {&(0x7f00000005c0)="00e497557baba333cc62f449740dea1e3697d436036ed0951d83813fb7ded318ae64e9fdc8a348dcc5078ce6e5154cc4625f6beedbef275181addbf5f436936470b960b45324f1b0cb8885d9b6969e4bc0cc562f6f7aada77b9dadae1862f1f9", 0x60}], 0x4, &(0x7f0000004ac0)=[{0x150, 0x111, 0x2, "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"}, {0x1010, 0x0, 0x800, "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"}, {0xb0, 0x117, 0xfffffff8, "8eb61a82b975185e4eea6d7fba5e79284086d93a104b2d9f070805848b45c68ae2fc1eba30e249df5e552c6daa7818faf2f4323a53490deff796330d5bf395009c381f81e6f61c639fada71405a75263db1250fa60d5446ccd640726c1092985b56d2be704d8cbcd9ed82b4fcd4390d8c266a7c2f1ca2136e1c8a39d57e3d910e6466ef2081b66b7a1a0fcc5ed9d1f4d57d381d15b341dd8d1cdbec03bc3"}], 0x1210}}, {{&(0x7f0000001940)=@llc={0x1a, 0x312, 0x9, 0x68, 0x7, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000019c0)="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", 0xfa}, {&(0x7f0000001ac0)="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", 0x1000}, {&(0x7f0000002ac0)="eda7e344e9b7c2c7f8bdfede3a450cd8da01ba6951e6671f3f0fdc2e8a6487d8d8f50bbf8630405343db656f56e7a0ea5b200891f0cc3c70a0085e0c8baf4a9b469bc5ce93aa30053bf3eb129a74a32de66d62259a299abad65f99504c934c533cac0a9c31a1cf2ce24fa0dde9c385af62f441201365a14b4524d6db61f6457cb27750634c1c1471140ac77c3c8d48eceeb60a7efc84631a43fab8311929b0665ed431dcda2372bbf755428ed437467a1acf7b3729de0b03da149838ec9fd5c85859d063ff3d615379a77cc04ba596a780af830cbd1732", 0xd7}], 0x3}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000002c00)="67baf4499945b5dc77c4cd", 0xb}, {&(0x7f0000002c40)="0ac33c22b7d416363596b2c718c80e67e2ed0fd8550c70ace719a7ffe00a9c941fd025fa862f1c5d865485df617ed833a7753d0c0d066615c91238d95f8a2706a9a3a493c1e1a4695dce8450c0641e82bd2aa64836e753fef579ba5df9511c9b34bc65024ab3", 0x66}, {&(0x7f0000002cc0)="3da786bb3e074c30fb37ae0e961a2b223982cf76845156b0f1de6ffd3c5b71290e24ac875ae895ca05411340a5e32e3ead6645b5dd4872308baaf994549166b291dfc304de92712adb57744aa95bab2b92e266fc00", 0x55}, {&(0x7f0000002d40)="f9c22d285925276582d7505c64a5fdd96e829f87b3523dd773261ed34064f0e7e2411172c923160448f79fa610d226a9bcd92196e075fba3fa394fdb87db3f686abe9685892347f5f38f44b19423689ee2636d0bb4", 0x55}, {&(0x7f0000002dc0)="fe90717a4c53d5c96ca66990b0ae4881c09b1aa09b441eb474b3c91c862f154e2710f046106e00a4a0987c8aa1996517e71bd6187299aead3de292d8698c9b0e0d521b6de5d09b1f5606976bbd22c0e2bbc678216ef766166d9353a92ef87f7f18049f44b91d42923cd311b0c8006b118a58c2de52b3dbba37c9b76409fbe2a169626788ecc93e7c6bef9d344836d4fa7b1e074e14e9d3227b26f09459232511e3971ab6f0f12de6cd083de2adcff6d4c54cb8c696509e4da14dffda33f556c935afb9a0", 0xc4}, {&(0x7f0000002ec0)="c15f1ee594c9d365a378be6b42a91cc6e62c5ff489c22d703319b90ba96d8c0eb4f1a8c8d7a05e717f06157d4a93b8f56818d11c6ab665fd6a68ae869af422f8a0e45c7d3d87eb8674cf026a8613853f759e34ffc26013ae86e21415c11d5c90c44b1c34789f93ec2d8057f9cbcef0370c0c5b8dc524e64e418eabe85c86d8a372ea5f9967eea0c232c1d56be47b", 0x8e}, {&(0x7f0000002f80)="2e2e5ba3dc6909d989bba783bd0317373c681a82c68c7ed404f7661e1cecc5b8d049e01816deca7e4a64b74c05595c7f5ecb8a99087258b026b922cca76e876923b4258488472c4db4d817586ab01e8f877d71a42a217962b86a5259be3c21281d7c17d4fcd9f22f5694c33d17ec008f2c114a3b36a41e65ede2361388910d9302725f8a78f7121309", 0x89}, {&(0x7f0000003040)="8b1c4d529025f3491b29e00113dcbeea3cdfb6ea0b66f372334b8a03626c127d9c4d0eef2b46f97690ddcb8041b90aeb3ff1fb672384e4318fc4c2f99aedd6abeb036c22b7b0a7c9e5", 0x49}], 0x8}}, {{&(0x7f0000003140)=@in6={0xa, 0x4e21, 0x6, @local, 0x5}, 0x80, &(0x7f0000003440)=[{&(0x7f00000031c0)="caa2e016e96bdc41d0d25d7d80ef7786d5586b4dc48464c1c23350b7375116203098be0c5225eac975a45c42c7dcb88bea0584a0b2dbdaa6e4f43d768d1d9166504cd481b17bf5b199217d29e5b4079961f1a3f426a48166034226079c438edd6fba1fe2a74829e8142cf98650d0c68b23db279f9ca9a0916758ae0c7700cf5efb2e2ce0d568eb7c87187316f1f3a73859e3755437184687c7546a23ddc60e7883", 0xa1}, {&(0x7f0000003280)="c14cf18d31100c89325e3fc87881ba4d6c403ac3992e93aedc69c583f34948a042291f4f501b32a8ce3a9bb03c2a212d6be6a7012ffa59062eceb25b850818ad05f5673bb8062f80c8b2e99882ab3a69f656ab31b0892b29b1a3f8f7f467445273601b3dfde31ac6399c777172e70c977ce6d544ef576d519f78905be25395f2394af833c42cb9633c77c6b555305a1f2001abcdde8a66799f57a003a81e7e24349e085afddec0", 0xa7}, {&(0x7f0000003340)="299dc1dd12f86700bd835d827d03028926f1f9fb599295e8d6433c6f26a25450cdbc0ccb5efc4cb022b3a4bcb0b689670702f33d5ded2c1b7da588ce76cbf93cb89fa7dc4742be9fe635e13f65786f4d730504e47d7ec790c96c41e92012916430322ca9252fefee9aa6654969763950eec746ea25e56fe5a3f32dec8852ebfe92e3ff0b1d447a345976e413584a95cfcac7c1876658d28a4b94e3660ee1983b62b5cde49391a5170871f92d4fba9c150479be76f45593d657be0e6f746808688d045de8", 0xc4}], 0x3}}, {{&(0x7f0000003480)=@xdp={0x2c, 0x3, 0x0, 0x3e}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000003500)="a99a7d66fcf9409738f8294f99affbbea4a33e6f5a336dbf6b866f2b305f671ac065f33fa2f4fb6343428e56bafffdf3790ffc4965491d17f9aa98768c265df36b71fd55cbd7b1213779975800fe779341f3f20778de0fc906c2629ac64503e88ba309eb7b5df8", 0x67}, {&(0x7f0000003580)="7f565e684a2c76e7d5f7a7d9a32348f7cdae68f0bd551f429fed4c8ccc7819d7afd35ecfb947ffdc12a26d8ac28f0f760a4bdcf8ff52ba5c8d112bebf3ad65b1e18f5729493d3c0823ab37db9e71181212", 0x51}, {&(0x7f0000003600)="eba8a7b4e655758c55de96a43a8206b78219dbde7dfa79c46096cd9af1eda11d50d1ceec804da6881ba1bd4cb598dcb830f1aff8c8cdd999c9831c4896115701727bf5f665bcf8748a1a1e38fd99511aa05650411c29a166ef964369a8b27ac2619eb69c98a6b3ada6cedaa8835346f699049131d8db4c3970e2388832e6c30b9f7683d4f250df5783", 0x89}, {&(0x7f00000036c0)="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", 0x1000}, {&(0x7f0000000680)="ae1be11b73dfb539e46bf7a29a52817a3197c37e408a99aa0dbb60030983296014daeef201d2fdb3f409a975f42de42e5ad1b15475e5bff39e9ad4862513cd71c3e76d41e969d4191a05f7c5fdbbf7b3da5a61b22a34d774d3b96f96ff037cc00a1a42b16884b55e1d442a8f98023dd5828dd8d273cb507355c2e89d7a8e1026551a8f50d5976db936", 0x89}, {&(0x7f0000004700)="087868867bd705710e6defc45016beff44387495465e57851fed20a41601ae6fb611e4e018fb1bbb66a0be98f96dd0fdcbb5f3bea522f0fc51d402b09999ccfe9ae7f8bba521f5b4a55fddf0ee2b14138627da474f746beafa9088d0aa9611aa558d8594f81576b21ecf79cc3b79665727bd55e7c9bf0565e1338b1cb50dff50146a2e8057196f7c77e17f311c076199b6d4615e52f40d9c63f0fbe1fac28326ba448bdb2b4af291d33789b97595e5a11c335ac8d5e2cb78", 0xb8}], 0x6}}], 0x5, 0x20000001)
r8 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/sync_on_suspend', 0x40242, 0x73)
pwritev(r8, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0xa)
executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x320, 0x0)
syz_emit_ethernet(0x1a4, &(0x7f00000014c0)={@local, @random="9dffc4ab6675", @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "5b677f", 0x16e, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2c, 0xb, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x9, 0x50, "dcf4101f4fb20127ec4b3ecdbb735fdc7624eab165e430f14b08edd6f76e5765d229bcce9cd1f3c6ee1611f7934479d5406e56a23712f750aa8769fbccbfb1daf37937bfbf155d574396e327cf3ac72d"}, @padn]}, @srh={0x3a, 0x6, 0x4, 0x3, 0xca, 0x40, 0x7, [@remote, @remote, @remote]}, @fragment={0x84, 0x0, 0xf, 0x0, 0x0, 0x5, 0x64}], {{0x4e23, 0x4e24, 0x4, 0x1, 0xe, 0x0, 0x0, 0xf, 0x3, "f33d7c", 0x5, "3779d4"}, "9a103f30a1f6eb6bc038a146032bce29fb74853da1852e27609b0c4e785d26f34dedf6ebff98e6cfa53f19e06faa89e616cdad574fe9cfeba3277b3db3d896f5158d7f2fead7bea58728894dbaee93b889268febf45b8f19b34bf177344132a58fa8ae0391c23b190129b179244da4a844c65d01d66b2921659c0b83c37502bcb7d752b367d2babbd9cb96a592d569343afd2e0ea693597512dc6cc3a4e6f82ad1dda4f6d24beba72aa30588251514fbf1aa248eb85e97364b5decf5f051"}}}}}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0xffffffffffffffc9)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140))
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x5c}, 0xd3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000004440)=""/4096, 0x1000)
fanotify_mark(0xffffffffffffffff, 0x211, 0x5000101a, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}})
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000f00), 0x4)
connect$unix(r1, &(0x7f0000000140)=@file={0x1, './file1\x00'}, 0x6e)
connect$unix(r1, &(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x44, &(0x7f00000001c0)={0x40, 0x1, 0x16, "4de315c47bf1784c4e4ec7e4d931b936042e13b72ec1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
executing program 4:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000380)="9082", 0x2}], 0x1}}], 0x1, 0x20008000)
executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
ioprio_get$uid(0x3, r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
fcntl$setownex(r3, 0xf, &(0x7f00000002c0)={0x0, r5})
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000340)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10)
bind$can_raw(r4, &(0x7f00000000c0), 0x10)
setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000100)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94)
add_key$keyring(&(0x7f0000000140), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e1f, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000"], 0x18}, 0x40c0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000280)={0x0, 0x0, 0x800})
syz_usb_connect$midi(0x0, 0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)
executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406"], 0x0)
executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x78bd27, 0xf0, {0x0, 0x0, 0x0, r1, {0x5}, {0x0, 0xd}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804)
getsockname$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@rose, @remote, @netrom, @default, @remote, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48)
executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000000)
executing program 2:
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) (async)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x80000000) (async)
add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f00000002c0)="1021060a63e57fd1b9690000f544880000210327da707995dff70cff16c3b4fb9c82eca5", 0x24, 0xfffffffffffffffd) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
syz_emit_ethernet(0x46, 0x0, 0x0) (async)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001b80)={0x2f})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r2 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x143780) (async)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
r5 = signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x4]}, 0x8)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000140)={0x1, r5}) (async)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f0000000000)={0x6, 0x34524742, 0x640, 0x4b0, 0x0, @stepwise={{0x3, 0x4975}, {0x4, 0x7f}, {0x0, 0x3}}}) (async)
sendto$inet6(r0, &(0x7f0000000200)="d7", 0x1, 0x24008049, &(0x7f0000000000)={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r6 = socket(0x10, 0x3, 0x0) (async)
r7 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73)
pwritev(r7, &(0x7f0000002580)=[{&(0x7f0000000040)='9G', 0x2}, {0x0, 0x26}, {&(0x7f0000000500)="a471817b76cad9f782590db8158d681e54d11e22be95f027464b201ef32696b0686983f97afd0e5ae3f07ea53f248fee3c5b79a03575cb647243f91a843444fb38261a7b67920a65eb7be97e9c82be043f90452e032753fed83033c09752661e0b53422683781191619b88e1d0c652d6ca3e5ffea686418ae78b9d7c3b44e4ba3e2cd9a5032acd00a7f6185c6af96a82eec7918645cecfc20dbc4d1803ddc0b3"}, {&(0x7f0000000940)="9848d655e11567531d646274b8673a907639b2d75b586ce7df85b8f33e200a4c109502b563a035e9cbf76ce6c246202042c4db0d7972ee42c408a7c20f2bf9f87c3e54b80808037ae77108616615f2d5baf387d9131367893e498963eb3f1d5fbc35474d43fcad0fa795525534a8359d6f975229437d874699b0482203aa5e3f49493449e4fce3e44fa7f5a036053a17fd65b42f3e0e3bce22b7584c2ef89209c7634d61827f6f19ee8a29a052264479292564181c4bd403f8990fd9145953432ba6a0efb805f4a0a26d6883a82b3c24339794310fe652f4c2bd332ef5ea631c35658fee184044abd38b5d72"}, {&(0x7f00000014c0)="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"}, {&(0x7f00000024c0)="c2a0484c85193278629c4d12eca231a7d1f6475bd566e333c5bbbac7903222eb460209afbdf230c9d88245afdfc2dbe3d7a0f52d9f9586065458bbc491aa49709e4cae4536deafc6e4e9e6387326fd6af2a3ab808efc06d40493d89ac2801e5020fe680f29a3159da06491113491428ee39da663f812202243ff52a190c59a690714692e9eced245811158bd"}], 0x2, 0xffffff01, 0xa) (async)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[@ANYBLOB="a00000001a00010000000000000000001c00"/27], 0xa0}}, 0x0)
executing program 0:
openat$kvm(0xffffffffffffff9c, 0x0, 0x320, 0x0)
syz_emit_ethernet(0x154, &(0x7f00000014c0)={@local, @random="9dffc4ab6675", @void, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "5b677f", 0x11e, 0x21, 0x1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2c, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}, @padn]}, @srh={0x3a, 0x6, 0x4, 0x3, 0xca, 0x40, 0x7, [@remote, @remote, @remote]}, @fragment={0x84, 0x0, 0xf, 0x0, 0x0, 0x5, 0x64}], {{0x4e23, 0x4e24, 0x4, 0x1, 0xe, 0x0, 0x0, 0xf, 0x3, "f33d7c", 0x5, "3779d4"}, "9a103f30a1f6eb6bc038a146032bce29fb74853da1852e27609b0c4e785d26f34dedf6ebff98e6cfa53f19e06faa89e616cdad574fe9cfeba3277b3db3d896f5158d7f2fead7bea58728894dbaee93b889268febf45b8f19b34bf177344132a58fa8ae0391c23b190129b179244da4a844c65d01d66b2921659c0b83c37502bcb7d752b367d2babbd9cb96a592d569343afd2e0ea693597512dc6cc3a4e6f82ad1dda4f6d24beba72aa30588251514fbf1aa248eb85e97364b5decf5f051"}}}}}}, 0x0)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000014f000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0xffffffffffffffc9)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20)
ioctl$KVM_GET_DEBUGREGS(r0, 0x8080aea1, &(0x7f0000000140))
sendmsg$inet6(r1, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0xfffffffd, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x00\v\x00\x00\x00\x00\b'], 0x5c}, 0xd3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x0)
fchdir(r6)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r7, &(0x7f0000004440)=""/4096, 0x1000)
fanotify_mark(0xffffffffffffffff, 0x211, 0x5000101a, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000440)=@svm={0x0, 0x1, 0x1080, {0xeeef0000}, {"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"}})
executing program 1:
syz_io_uring_setup(0x1f85, &(0x7f0000000140)={0x0, 0x2, 0x20, 0x4, 0x1ec}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000080)) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) (async)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0)
ioctl$COMEDI_CMD(r3, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x80, 0xd, 0x10, 0xfffffed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000600)=[0x7], 0x42c2, 0x0}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="100001"], 0x28}}, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r4 = memfd_secret(0x0)
fdatasync(r4)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000000040)) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000280), 0x8)
executing program 4:
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000003c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x29, 0x5, 0x7, {0xd, @sctp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x25}, @local, 0x4e22, 0x4e21}, {0x0, @multicast, 0x6, 0x0, [0xffffffff, 0x800]}, @sctp_ip6_spec={@mcast2, @mcast2, 0x4e24, 0x4e22, 0x6}, {0x0, @broadcast, 0xdc74, 0x6077, [0x200, 0x8]}, 0x2, 0x5}}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
setregid(0xee01, 0xffffffffffffffff)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0x74, 0xffffffffffffff18, &(0x7f0000000640)="4e8dd52121f6886cc14eaf3913822da6de2905c707b381400964a588f7b300000000000000313863b5a8144a8e20be7653300e8665fe516525a8c39f69833b505d9299f2b019a73d358f6b45486ada61ce6788a5ff676bbb4d66368d7926dd6ce4d817af96bcbf34cf488c0657", 0x0, 0x31, 0xe8034000, 0xfffffffffffffe4d, 0x45, 0x0, 0x0, 0x5dd}, 0x10)
r1 = getpid()
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
move_pages(r1, 0x5, &(0x7f00000000c0)=[&(0x7f0000875000/0x1000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00001fc000/0x3000)=nil, &(0x7f0000ad2000/0x1000)=nil], &(0x7f0000000100)=[0x3, 0x2], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2)
pipe2(&(0x7f00000001c0), 0x80)
r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
openat$sysfs(0xffffff9c, &(0x7f0000000640)='/sys/kernel/cpu_byteorder', 0x0, 0xb8)
landlock_restrict_self(r2, 0x9)
executing program 2:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54000000120005092abd7000fddbdf030a0906fe4e324e24fbffffff010400008e00000006000000fdbfffff050000010000000000380000", @ANYBLOB="000001000010000006000000ffff"], 0x54}, 0x1, 0x0, 0x0, 0x22044050}, 0x4815)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920723f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1}, 0x44)
executing program 1:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x8df1}, &(0x7f00000000c0)=0x8)
executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="54000000120005092abd7000fddbdf030a0906fe4e324e24fbffffff010400008e00000006000000fdbfffff050000010000000000380000", @ANYBLOB="000001000010000006000000ffff"], 0x54}, 0x1, 0x0, 0x0, 0x22044050}, 0x4815)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="030000007a7ffc21d0976ddda51403d39d4f870400fdff040000000a00000000000000151c50331be7bb806fb8a027143a3a989cb149064303fc0926b0e46e012983bfebda6a6bb47d55a757a48eae8dc9863d1e0e4b616149d0809f64ad3449a6898613891294e565e923b3c1536734f690ca7d99156e1621243addc3db9b203c9e2fda97e44276091c8fc778cd80b42238bc643adb422b95e8467ea2bb06e5aa4e35c68dafba5d024374ab35b28fe9ecd7ab605fdd91e51f842e8b3732fd7292bdb3eb9737701558ac4dcf0f4abd1b76d46bb27bc131bb7bfb70cf630b6d387ee8d4261477daf02a746e7ec85b57450a6df8e3d514c01a8d7596c030a6521dbaddb92d5fd207d19a4dd077c126ad5af151a72be3fdd82cbe71dc122f242fc0e62316", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920723f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1}, 0x44)
executing program 4:
r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000)
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5})
ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6})
r1 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0)
r2 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="19", 0x1, 0xfffffffffffffffc)
keyctl$update(0x2, r2, &(0x7f00000003c0)="04c9", 0x2)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r1, 0x1, 0x1)
fchdir(r3)
r4 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f00000000c0)={0x7, 0xffffffffffffffff, 0xc, {0x2, 0x4}, 0x80}, 0x1)
fremovexattr(r4, &(0x7f0000000000)=@known='user.syz\x00')
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000140)="f06cc812f4777ef482ca", 0xa)
setsockopt$inet6_tcp_TLS_RX(r5, 0x6, 0x2, &(0x7f0000000040)=@ccm_128={{0x304}, "e9b172ecf2655b52", "7712b91180acb093fb6b48dce5ba7c41", "0711e4b2", "e9190a5ace69e884"}, 0x28)
wait4(0x0, 0x0, 0x1000000, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, 0x0)
setresuid(0x0, 0xee01, 0xee00)
r6 = shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffc000/0x3000)=nil)
shmctl$IPC_RMID(r6, 0x0)
executing program 2:
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x81)
syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0xc00c0)
r1 = socket$caif_stream(0x25, 0x1, 0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000)
sendmsg$NFT_BATCH(r0, 0x0, 0x4000000)
executing program 4:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1, 0x0, 0xfdef}, 0x0)
executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
ioprio_get$uid(0x3, r0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
fcntl$setownex(r3, 0xf, &(0x7f00000002c0)={0x0, r4})
executing program 2:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d22a6640da0320283c52000000010902440001000000000904000000ef040100052406"], 0x0)
executing program 1:
io_uring_setup(0x6b, &(0x7f0000000080)={0x0, 0x8dd3, 0x200, 0x3e, 0x235})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x4004)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fchown(r1, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
connect$unix(r4, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e)
ppoll(&(0x7f0000000000), 0x0, 0x0, &(0x7f0000000480)={[0x78c]}, 0x8)
fsopen(&(0x7f0000000280)='ext4\x00', 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
executing program 3:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x11, 0x0, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

program did not crash
replaying the whole log did not cause a kernel crash
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend-syz_open_dev$sg-bpf$BPF_PROG_QUERY-quotactl$Q_SYNC
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x11, 0x0, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
single: successfully extracted reproducer
found reproducer with 12 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend-syz_open_dev$sg-bpf$BPF_PROG_QUERY
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map, 0x11, 0x0, 0xffffffff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend-syz_open_dev$sg
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)
syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x3)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-mmap
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-timer_settime-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-mprotect-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-bpf$MAP_LOOKUP_ELEM-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-bpf$MAP_CREATE-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1ff, 0x7}, 0x50)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-timer_create-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): capset-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
simplifying C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000340), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
reproducing took 1h17m56.233248761s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802be5b018 by task syz.0.19/6080

CPU: 1 UID: 0 PID: 6080 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xba/0x230 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 dvb_device_open+0xc4/0x360 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411
 do_dentry_open+0x83d/0x13e0 fs/open.c:949
 vfs_open+0x3b/0x350 fs/open.c:1081
 do_open fs/namei.c:4677 [inline]
 path_openat+0x2e43/0x38a0 fs/namei.c:4836
 do_file_open+0x23e/0x4a0 fs/namei.c:4865
 do_sys_openat2+0x113/0x200 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f44f607d04e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffe815de258 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00005555952b0500 RCX: 00007f44f607d04e
RDX: 0000000000000002 RSI: 00007ffe815de330 RDI: ffffffffffffff9c
RBP: 00007ffe815de330 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007f44f6335fac R14: 00007f44f6335fa0 R15: 00007f44f6335fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x3a6/0x690 mm/slub.c:5380
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 dvb_register_device+0x2fd/0x21e0 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x665/0x970 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:436 [inline]
 vidtv_bridge_probe+0x9aa/0xf80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:508
 platform_probe+0xf9/0x190 drivers/base/platform.c:1418
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:721
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:863
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:893
 __driver_attach+0x34c/0x640 drivers/base/dd.c:1287
 bus_for_each_dev+0x23e/0x2c0 drivers/base/bus.c:383
 bus_add_driver+0x348/0x670 drivers/base/bus.c:756
 driver_register+0x23a/0x320 drivers/base/driver.c:249
 vidtv_bridge_init+0x28/0x50 drivers/media/test-drivers/vidtv/vidtv_bridge.c:598
 do_one_initcall+0x250/0x8d0 init/main.c:1382
 do_initcall_level+0x104/0x190 init/main.c:1444
 do_initcalls+0x59/0xa0 init/main.c:1460
 kernel_init_freeable+0x2a6/0x3e0 init/main.c:1692
 kernel_init+0x1d/0x1d0 init/main.c:1582
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 6078:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2685 [inline]
 slab_free mm/slub.c:6165 [inline]
 kfree+0x1c1/0x6c0 mm/slub.c:6483
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put drivers/media/dvb-core/dvbdev.c:629 [inline]
 dvb_device_open+0x2d6/0x360 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411
 do_dentry_open+0x83d/0x13e0 fs/open.c:949
 vfs_open+0x3b/0x350 fs/open.c:1081
 do_open fs/namei.c:4677 [inline]
 path_openat+0x2e43/0x38a0 fs/namei.c:4836
 do_file_open+0x23e/0x4a0 fs/namei.c:4865
 do_sys_openat2+0x113/0x200 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802be5b000
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 24 bytes inside of
 freed 512-byte region [ffff88802be5b000, ffff88802be5b200)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be58
head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x80000000000040(head|node=0|zone=1)
page_type: f5(slab)
raw: 0080000000000040 ffff88813fe1ac80 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 0080000000000040 ffff88813fe1ac80 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 0080000000000002 ffffea0000af9601 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 19177877244, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x28bb/0x2950 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5250
 alloc_slab_page mm/slub.c:3292 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3481
 new_slab mm/slub.c:3539 [inline]
 refill_objects+0x334/0x3c0 mm/slub.c:7175
 refill_sheaf mm/slub.c:2812 [inline]
 __pcs_replace_empty_main+0x35c/0x710 mm/slub.c:4615
 alloc_from_pcs mm/slub.c:4717 [inline]
 slab_alloc_node mm/slub.c:4851 [inline]
 __kmalloc_cache_noprof+0x44e/0x690 mm/slub.c:5375
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 set_kthread_struct+0xbb/0x340 kernel/kthread.c:107
 copy_process+0x128c/0x3cd0 kernel/fork.c:2152
 kernel_clone+0x249/0x840 kernel/fork.c:2653
 kernel_thread+0x13f/0x1b0 kernel/fork.c:2714
 create_kthread kernel/kthread.c:459 [inline]
 kthreadd+0x4ec/0x6e0 kernel/kthread.c:817
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802be5af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802be5af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802be5b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802be5b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802be5b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x360 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802be5b018 by task syz.0.19/6080

CPU: 1 UID: 0 PID: 6080 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call Trace:
 <TASK>
 dump_stack_lvl+0xe8/0x150 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xba/0x230 mm/kasan/report.c:482
 kasan_report+0x117/0x150 mm/kasan/report.c:595
 dvb_device_open+0xc4/0x360 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411
 do_dentry_open+0x83d/0x13e0 fs/open.c:949
 vfs_open+0x3b/0x350 fs/open.c:1081
 do_open fs/namei.c:4677 [inline]
 path_openat+0x2e43/0x38a0 fs/namei.c:4836
 do_file_open+0x23e/0x4a0 fs/namei.c:4865
 do_sys_openat2+0x113/0x200 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f44f607d04e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffe815de258 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 00005555952b0500 RCX: 00007f44f607d04e
RDX: 0000000000000002 RSI: 00007ffe815de330 RDI: ffffffffffffff9c
RBP: 00007ffe815de330 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007f44f6335fac R14: 00007f44f6335fa0 R15: 00007f44f6335fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0x93/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x3a6/0x690 mm/slub.c:5380
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 dvb_register_device+0x2fd/0x21e0 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x665/0x970 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:436 [inline]
 vidtv_bridge_probe+0x9aa/0xf80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:508
 platform_probe+0xf9/0x190 drivers/base/platform.c:1418
 call_driver_probe drivers/base/dd.c:-1 [inline]
 really_probe+0x267/0xaf0 drivers/base/dd.c:721
 __driver_probe_device+0x18c/0x320 drivers/base/dd.c:863
 driver_probe_device+0x4f/0x240 drivers/base/dd.c:893
 __driver_attach+0x34c/0x640 drivers/base/dd.c:1287
 bus_for_each_dev+0x23e/0x2c0 drivers/base/bus.c:383
 bus_add_driver+0x348/0x670 drivers/base/bus.c:756
 driver_register+0x23a/0x320 drivers/base/driver.c:249
 vidtv_bridge_init+0x28/0x50 drivers/media/test-drivers/vidtv/vidtv_bridge.c:598
 do_one_initcall+0x250/0x8d0 init/main.c:1382
 do_initcall_level+0x104/0x190 init/main.c:1444
 do_initcalls+0x59/0xa0 init/main.c:1460
 kernel_init_freeable+0x2a6/0x3e0 init/main.c:1692
 kernel_init+0x1d/0x1d0 init/main.c:1582
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 6078:
 kasan_save_stack mm/kasan/common.c:57 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:78
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2685 [inline]
 slab_free mm/slub.c:6165 [inline]
 kfree+0x1c1/0x6c0 mm/slub.c:6483
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put drivers/media/dvb-core/dvbdev.c:629 [inline]
 dvb_device_open+0x2d6/0x360 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x4d0/0x5f0 fs/char_dev.c:411
 do_dentry_open+0x83d/0x13e0 fs/open.c:949
 vfs_open+0x3b/0x350 fs/open.c:1081
 do_open fs/namei.c:4677 [inline]
 path_openat+0x2e43/0x38a0 fs/namei.c:4836
 do_file_open+0x23e/0x4a0 fs/namei.c:4865
 do_sys_openat2+0x113/0x200 fs/open.c:1366
 do_sys_open fs/open.c:1372 [inline]
 __do_sys_openat fs/open.c:1388 [inline]
 __se_sys_openat fs/open.c:1383 [inline]
 __x64_sys_openat+0x138/0x170 fs/open.c:1383
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802be5b000
 which belongs to the cache kmalloc-512 of size 512
The buggy address is located 24 bytes inside of
 freed 512-byte region [ffff88802be5b000, ffff88802be5b200)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2be58
head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0x80000000000040(head|node=0|zone=1)
page_type: f5(slab)
raw: 0080000000000040 ffff88813fe1ac80 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 0080000000000040 ffff88813fe1ac80 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 0080000000000002 ffffea0000af9601 00000000ffffffff 00000000ffffffff
head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 19177877244, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x231/0x280 mm/page_alloc.c:1889
 prep_new_page mm/page_alloc.c:1897 [inline]
 get_page_from_freelist+0x28bb/0x2950 mm/page_alloc.c:3962
 __alloc_frozen_pages_noprof+0x18d/0x380 mm/page_alloc.c:5250
 alloc_slab_page mm/slub.c:3292 [inline]
 allocate_slab+0x77/0x660 mm/slub.c:3481
 new_slab mm/slub.c:3539 [inline]
 refill_objects+0x334/0x3c0 mm/slub.c:7175
 refill_sheaf mm/slub.c:2812 [inline]
 __pcs_replace_empty_main+0x35c/0x710 mm/slub.c:4615
 alloc_from_pcs mm/slub.c:4717 [inline]
 slab_alloc_node mm/slub.c:4851 [inline]
 __kmalloc_cache_noprof+0x44e/0x690 mm/slub.c:5375
 kmalloc_noprof include/linux/slab.h:950 [inline]
 kzalloc_noprof include/linux/slab.h:1188 [inline]
 set_kthread_struct+0xbb/0x340 kernel/kthread.c:107
 copy_process+0x128c/0x3cd0 kernel/fork.c:2152
 kernel_clone+0x249/0x840 kernel/fork.c:2653
 kernel_thread+0x13f/0x1b0 kernel/fork.c:2714
 create_kthread kernel/kthread.c:459 [inline]
 kthreadd+0x4ec/0x6e0 kernel/kthread.c:817
 ret_from_fork+0x51e/0xb90 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802be5af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802be5af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802be5b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802be5b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802be5b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
==================================================================