Extracting prog: 1m12.065419074s
Minimizing prog: 21m59.218774221s
Simplifying prog options: 0s
Extracting C: 30.03123227s
Simplifying C: 9m54.996282963s


extracting reproducer from 38 programs
testing a last program of every proc
single: executing 8 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$tun-ioctl$TUNSETIFF-socket$can_raw-syz_emit_ethernet-socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_mesh-sendto$packet-socket-socket$nl_netfilter-sendmsg$NFNL_MSG_CTHELPER_DEL-socket$unix-socket$netlink-socket$nl_route-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmsg$nl_route_sched_retired-recvmsg$can_raw-bind$netlink-ioctl$sock_SIOCGIFINDEX-sendmsg$nl_route_sched-sendmsg$nl_route_sched
detailed listing:
executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$can_raw(0x1d, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040001aaaaaa1190b7581414bbaaaaaaaaaa01ac"], 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x2, 0x9, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4080001}, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x80800)
sendmsg$nl_route_sched_retired(r9, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000001b00)=@newchain={0x580, 0x64, 0x4, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xc, 0xfff3}, {0x7, 0x1a}, {0x1, 0x7}}, [@f_rsvp={{0x9}, {0x550, 0x2, [@TCA_RSVP_POLICE={0x4ac, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffff}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffffff9}, @TCA_POLICE_RATE={0x404, 0x2, [0xf1, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0x80000001, 0xfdc, 0x3, 0x101, 0xfffffff6, 0x2, 0x4, 0xfffffffd, 0x3, 0x4, 0x2, 0x7, 0xfffffffb, 0x3, 0x5, 0x5fb, 0xd81d, 0x800, 0x1ff, 0x5a, 0x6, 0xfff, 0x7, 0x2, 0x3, 0x0, 0x0, 0x6, 0x7, 0x9, 0x5, 0x4, 0x10, 0x1, 0x10, 0x1e3, 0xfffffffa, 0x5, 0x1, 0x80, 0x9, 0x10000, 0x7, 0x23f, 0x4, 0x5, 0x6dcf, 0xe79, 0x1, 0x80000000, 0x6, 0x6, 0x8, 0x37e0, 0xd, 0x7fff, 0x8, 0x7, 0xfffff6ae, 0x4, 0x40, 0xb6, 0x1, 0x6, 0x3, 0x1, 0x0, 0x8001, 0x6, 0xa2, 0x1, 0xff, 0x0, 0x1, 0x4, 0x7, 0x3, 0x7a92e4e9, 0xfffffffb, 0xc0, 0x1, 0x4, 0xfffffffd, 0x7fb, 0x0, 0x2f, 0x2, 0xc, 0x2, 0x6, 0x8, 0x6, 0xd7, 0x1, 0x0, 0xffff, 0x2, 0x9, 0xfffffff7, 0x10000, 0x5, 0x6, 0x8, 0x8, 0x3, 0xab4, 0x10001, 0x551, 0x1ff, 0x5, 0xa11f, 0x5, 0x9, 0xd, 0xbe95, 0x6, 0x1, 0xd3e3, 0x2, 0x8, 0x4, 0x7f, 0x1, 0x2, 0x0, 0xfff, 0x0, 0x6, 0x8, 0x5, 0x6, 0xfff, 0x0, 0x0, 0x400, 0xffff8c0d, 0x6, 0x83b, 0x3, 0x6, 0x0, 0x3, 0x8, 0x101, 0x0, 0x9, 0x2, 0x5, 0x8, 0x8, 0x3, 0x3, 0xfff, 0x8f70, 0x6, 0x2, 0x0, 0x32, 0x100, 0xfffff1c6, 0xfffffff7, 0x7, 0x65775925, 0x2, 0x3, 0x2, 0x3, 0x4, 0x4, 0xce15, 0x4, 0x800, 0x1, 0x3, 0x1, 0x7, 0x9, 0xeaa, 0x3, 0x76, 0x7ff, 0x7b, 0x6, 0xff, 0xd, 0x18e00, 0x5, 0xfff, 0x4, 0xfff, 0x10001, 0x4, 0x50fc, 0x7fff, 0x3, 0x9c, 0x1, 0x9, 0x4, 0x5, 0x7, 0x7, 0x4, 0xfffffffa, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x2, 0x7ff00000, 0x0, 0xc2, 0x8000, 0xf458, 0x52, 0x81, 0x8, 0x80000001, 0x5, 0x1, 0x6, 0x4, 0x3, 0x9, 0xd98, 0x6, 0x8, 0xffff8000, 0xa35, 0xcc, 0xffffff2d, 0x1, 0xe5, 0xf9c4, 0x1, 0xfffffff3, 0x4, 0x4, 0x8001, 0x2, 0x7, 0x5, 0x0, 0x3, 0x0, 0x2, 0xffff6f32, 0xce41]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x7, 0xa, 0x7f, 0x9, {0x8, 0x0, 0xdd33, 0xa50, 0x0, 0x3}, {0xa3, 0x2, 0x0, 0xc00, 0x3, 0xffff}, 0x1, 0x3, 0x6}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xb6, 0x6, 0x1, 0x7fff, 0x2, {0xfe, 0x1, 0x101, 0x7, 0x7, 0x8}, {0x6, 0x2, 0x8000, 0xe, 0x1ff, 0xfff}, 0x4f03, 0x4c638388, 0xc7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc9f6}]}, @TCA_RSVP_POLICE={0x4}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7, 0x7}}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_ACT={0x8c, 0x6, [@m_simple={0x5c, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x2d, 0x6, "f9140f21d572200bfb3dccdb1d23dd4cc3a5ed2769b7514dc8d06ee99e865cf56b5a5a347fce0c7d89"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ife={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x580}, 0x1, 0x0, 0x0, 0x24000}, 0x41040)
recvmsg$can_raw(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1}, 0x40)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newtfilter={0x888, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0x854, 0x2, [@TCA_FW_POLICE={0x850, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xa, 0x9, 0x4, 0x1, 0x8, 0x0, 0x1ff, 0x2, 0x81, 0x1, 0x9, 0x8, 0x1, 0x4, 0x7, 0x3e, 0x10001, 0x7fffffff, 0x1, 0x6, 0x0, 0xef, 0x7, 0x1000, 0x9, 0x7, 0x1778a66f, 0x6, 0xa34, 0x7, 0x3, 0x3, 0xffffffff, 0x1, 0x1b5, 0x3, 0xe5, 0xfffffff5, 0xfc46, 0xffff, 0x7, 0x4, 0x6, 0x9, 0x1, 0x64, 0xfffffffa, 0x7368, 0x2e, 0x0, 0x1, 0x3, 0x4, 0x6, 0x3, 0x3, 0x80000000, 0x6, 0x800, 0x9, 0x6, 0xfffffffd, 0x80000001, 0x40, 0x3, 0x8f, 0x7, 0x1, 0x5, 0x4, 0xc, 0x3, 0x10001, 0x80000000, 0x4007008, 0x200, 0x1, 0x5, 0x1000, 0x0, 0xaaf5, 0x2, 0x0, 0x0, 0x1, 0x9, 0xb, 0xd3, 0x5, 0x9, 0x1, 0x9, 0x2, 0x6, 0x10001, 0x3ff, 0x0, 0xa, 0x101, 0x8, 0x5, 0xb, 0x4, 0x1, 0xb3f4, 0xc8, 0x6a41, 0xde, 0x400, 0x54, 0x0, 0x2, 0xe6c, 0x7c77a153, 0x5, 0x9, 0x2, 0x8001, 0x1ff, 0x0, 0x401, 0x1, 0x8, 0x47, 0x7, 0x1, 0x5, 0x4, 0xc, 0x9, 0xff, 0x8006, 0x3ff, 0x6, 0x10, 0x3, 0x2, 0xe0000, 0x1, 0x7, 0xfffffff7, 0xfff, 0x2, 0x5, 0x8, 0x9, 0x5, 0xfffff801, 0x0, 0x9e76, 0x8, 0x8, 0xfff, 0x3034, 0xe, 0x200, 0x2, 0x1ff, 0x2, 0x9, 0x0, 0x80000001, 0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffb24, 0x4, 0x7ff, 0x6, 0x4, 0x8, 0x8, 0x1400, 0xfbac, 0xa, 0x81, 0x7, 0x3, 0x4, 0x6, 0x0, 0x0, 0x565e975e, 0xbac8, 0x0, 0xffff8001, 0x0, 0x0, 0x248, 0x9, 0x7, 0xfffffffc, 0x400, 0x80, 0x8, 0x14f8, 0x10, 0x8, 0x9, 0x0, 0x101, 0x0, 0x101, 0x40, 0x101, 0x294, 0x6, 0xfff, 0x3, 0x5c0a, 0x9, 0x7fffffff, 0xfffffff7, 0x9, 0xa5, 0x8, 0x7, 0x5f, 0x4, 0x825, 0xf592, 0x2, 0x8, 0x800, 0x1, 0x4, 0x3, 0x5, 0x2, 0x1, 0x5, 0xffffffff, 0x9, 0x7f, 0xa, 0x9e, 0x7, 0xef1, 0x800, 0x6, 0x4, 0x10000, 0x400, 0x9, 0x8, 0x38f, 0x5b7f0f1c, 0x7, 0x80, 0x2, 0xffffffff, 0x7273, 0x5, 0xff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x1c, 0x1ff, 0x800, 0x2, 0xa4000000, 0xbcb, 0x422, 0x4, 0x1, 0x400, 0xe326, 0x0, 0x6, 0x4, 0x1, 0x6, 0x200, 0x3, 0x2, 0x7, 0xe89b, 0x7c0, 0x6, 0x9, 0x3, 0xc0, 0x3ff, 0x1, 0x9, 0x9, 0x7, 0x3, 0xfffffffc, 0x8, 0x3ff, 0x3, 0x6, 0x2, 0x3, 0x5, 0x0, 0x50000, 0x80, 0x9, 0x1, 0x5, 0xe60, 0x6, 0x4310, 0x5, 0x55, 0x8, 0xb, 0x0, 0x3ff, 0xcdc, 0x1, 0x1, 0xd933, 0x6, 0x0, 0xb, 0x4, 0xb, 0x4000000, 0x6, 0x3, 0x3, 0x401, 0x2, 0x6, 0xb85, 0x5, 0x5, 0x9, 0xfffffffc, 0x1, 0x1, 0x75, 0x6, 0xffffffff, 0x0, 0x3, 0x6, 0x1f, 0x3, 0x0, 0x0, 0x2, 0x9, 0x383e, 0x18, 0x3, 0x1, 0xbdb3, 0x0, 0x8001, 0x7fffffff, 0x2c3e426c, 0x3, 0x0, 0x1, 0x10, 0x0, 0x0, 0x3, 0x9, 0x7e, 0x81, 0x8, 0xffffffff, 0xe6, 0x6e, 0xd0625800, 0x100, 0x1, 0x1, 0x80000000, 0x919, 0x3, 0xa, 0xb18, 0x60b3fb30, 0xbd, 0x5, 0xb9de, 0x9, 0x0, 0x4, 0x923, 0x800, 0x80, 0xf, 0x4, 0x3, 0x5, 0x80, 0x4, 0x4, 0x0, 0x10, 0x2, 0x65e2d6b5, 0xfffffff8, 0x200, 0xfffffffa, 0x7, 0x9, 0xbb97, 0x0, 0x7fffffff, 0x7, 0xffffffff, 0x8, 0x6, 0x3d3e, 0x19c3, 0x0, 0x5, 0xfffffffd, 0x400, 0xa, 0x80000000, 0x2, 0x33, 0xb, 0x5fd4, 0x8000, 0x0, 0xc, 0xd, 0x10000, 0x0, 0xff, 0x51c, 0x18, 0x6, 0xfffffff5, 0x4, 0x7c53, 0xfb, 0x3, 0x4, 0x2, 0x7, 0x3, 0xfffffffd, 0x31, 0xffff, 0x4, 0x87d, 0x5, 0x65d, 0x3, 0x3, 0x14, 0x8, 0x81, 0x8a22, 0x9, 0x2, 0x800, 0xca5, 0x7, 0x3, 0x6, 0xe45, 0x9, 0x599, 0x3, 0x1ff, 0x200, 0xa, 0x8, 0x4f77, 0x6, 0xf6, 0x7, 0x9, 0x4, 0x9, 0xfffffffa, 0x8000, 0xff, 0x9, 0xf, 0x7fffffff, 0x1000, 0x7, 0x80000000, 0x4, 0xfffffffa, 0x460, 0xee, 0x800, 0x8, 0x7ff, 0xd66, 0xc4, 0x5, 0xf, 0x81, 0x3, 0x22, 0xfffffff7, 0x7, 0x5, 0x9, 0x3, 0x0, 0x69, 0x800, 0x13bc013c, 0x1, 0x80]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xfffffffffffffffe, 0x0, 0x110, 0x1, {0x1, 0x2, 0x3, 0x1, 0x101, 0x1}, {0xb, 0x0, 0x3, 0xf, 0x800, 0xdb}, 0x2, 0x1, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x7}}]}, 0x888}, 0x1, 0x0, 0x0, 0x10}, 0x0)

program did not crash
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_SHOW_LINK_STATS-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x24040085)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
single: successfully extracted reproducer
found reproducer with 20 syscalls
minimizing guilty program
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_SHOW_LINK_STATS-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x24040085)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-socket$nl_generic-syz_genetlink_get_family_id$tipc-sendmsg$TIPC_CMD_SHOW_LINK_STATS-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r5, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}}, 0x24040085)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-socket$nl_generic-syz_genetlink_get_family_id$tipc-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-socket$nl_generic-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
socket$nl_generic(0x10, 0x3, 0x10)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-mount-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl')
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-mkdirat-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100), 0x13f, 0x4}}, 0x20) (async)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-mmap-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-ioctl$VIDIOC_S_SELECTION-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}})
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-ioctl$VIDIOC_S_SELECTION-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f00000000c0)={0x2, 0x0, 0x0, {0x0, 0x20, 0xffffffff}}) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r3=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r3}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r3, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-openat$vicodec0-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-openat$vicodec0-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$rtc-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0xabdee16eaf5e9532, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r1=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r1}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}}}, 0x30) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program did not crash
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
simplifying C reproducer
testing compiled C program (duration=32.478942258s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program did not crash
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program did not crash
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program did not crash
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program did not crash
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program did not crash
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing compiled C program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
validation run: crashed=true
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
validation run: crashed=true
testing program (duration=32.478942258s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_rdma-sendmsg$RDMA_NLDEV_CMD_NEWLINK-openat$rdma_cm-write$RDMA_USER_CM_CMD_CREATE_ID-write$RDMA_USER_CM_CMD_BIND_IP-write$RDMA_USER_CM_CMD_JOIN_MCAST-write$RDMA_USER_CM_CMD_JOIN_MCAST
detailed listing:
executing program 0:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x20000094)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={<r2=>0xffffffffffffffff}, 0x13f, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @local, 0x12}, r2}}, 0x30)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0) (async)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r2, 0x10, 0x0, @in={0x2, 0x6e23, @broadcast}}}, 0xa0)

program crashed: KASAN: slab-use-after-free Read in ucma_create_uevent
validation run: crashed=true
reproducing took 35m43.367387326s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xadb/0xb30 drivers/infiniband/core/ucma.c:275
Read of size 8 at addr ffff88802b69d410 by task kworker/u32:3/52

CPU: 1 UID: 0 PID: 52 Comm: kworker/u32:3 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: rdma_cm cma_iboe_join_work_handler
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 ucma_create_uevent+0xadb/0xb30 drivers/infiniband/core/ucma.c:275
 ucma_event_handler+0x102/0x940 drivers/infiniband/core/ucma.c:351
 cma_cm_event_handler+0x97/0x300 drivers/infiniband/core/cma.c:2173
 cma_iboe_join_work_handler+0xca/0x170 drivers/infiniband/core/cma.c:3008
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 6122:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 ucma_process_join+0x237/0xa30 drivers/infiniband/core/ucma.c:1465
 ucma_join_multicast+0xe8/0x160 drivers/infiniband/core/ucma.c:1557
 ucma_write+0x1fb/0x330 drivers/infiniband/core/ucma.c:1738
 vfs_write+0x2a0/0x1150 fs/read_write.c:684
 ksys_write+0x1f8/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6122:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2381 [inline]
 slab_free mm/slub.c:4643 [inline]
 kfree+0x2b4/0x4d0 mm/slub.c:4842
 ucma_process_join+0x3b9/0xa30 drivers/infiniband/core/ucma.c:1516
 ucma_join_multicast+0xe8/0x160 drivers/infiniband/core/ucma.c:1557
 ucma_write+0x1fb/0x330 drivers/infiniband/core/ucma.c:1738
 vfs_write+0x2a0/0x1150 fs/read_write.c:684
 ksys_write+0x1f8/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802b69d400
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 16 bytes inside of
 freed 192-byte region [ffff88802b69d400, ffff88802b69d4c0)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b69d
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b8423c0 ffffea0000acd6c0 dead000000000002
raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 13398274277, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
 prep_new_page mm/page_alloc.c:1712 [inline]
 get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
 alloc_slab_page mm/slub.c:2451 [inline]
 allocate_slab mm/slub.c:2619 [inline]
 new_slab+0x23b/0x330 mm/slub.c:2673
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3859
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3949
 __slab_alloc_node mm/slub.c:4024 [inline]
 slab_alloc_node mm/slub.c:4185 [inline]
 __do_kmalloc_node mm/slub.c:4327 [inline]
 __kmalloc_noprof+0x2f2/0x510 mm/slub.c:4340
 kmalloc_noprof include/linux/slab.h:909 [inline]
 usb_alloc_urb+0x66/0xa0 drivers/usb/core/urb.c:75
 usb_internal_control_msg drivers/usb/core/message.c:96 [inline]
 usb_control_msg+0x1d3/0x4a0 drivers/usb/core/message.c:154
 usb_get_string+0xab/0x1a0 drivers/usb/core/message.c:844
 usb_string_sub+0x107/0x390 drivers/usb/core/message.c:883
 usb_string+0x307/0x670 drivers/usb/core/message.c:988
 usb_cache_string+0x80/0x150 drivers/usb/core/message.c:1030
 usb_enumerate_device drivers/usb/core/hub.c:2537 [inline]
 usb_new_device+0x1d0/0x1a20 drivers/usb/core/hub.c:2664
 register_root_hub+0x299/0x730 drivers/usb/core/hcd.c:994
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802b69d300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802b69d380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
>ffff88802b69d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                         ^
 ffff88802b69d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88802b69d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in ucma_create_uevent+0xadb/0xb30 drivers/infiniband/core/ucma.c:275
Read of size 8 at addr ffff88802b69d410 by task kworker/u32:3/52

CPU: 1 UID: 0 PID: 52 Comm: kworker/u32:3 Not tainted 6.16.0-rc5-syzkaller-00025-gd006330be3f7 #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: rdma_cm cma_iboe_join_work_handler
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x116/0x1f0 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:408 [inline]
 print_report+0xcd/0x680 mm/kasan/report.c:521
 kasan_report+0xe0/0x110 mm/kasan/report.c:634
 ucma_create_uevent+0xadb/0xb30 drivers/infiniband/core/ucma.c:275
 ucma_event_handler+0x102/0x940 drivers/infiniband/core/ucma.c:351
 cma_cm_event_handler+0x97/0x300 drivers/infiniband/core/cma.c:2173
 cma_iboe_join_work_handler+0xca/0x170 drivers/infiniband/core/cma.c:3008
 process_one_work+0x9cf/0x1b70 kernel/workqueue.c:3238
 process_scheduled_works kernel/workqueue.c:3321 [inline]
 worker_thread+0x6c8/0xf10 kernel/workqueue.c:3402
 kthread+0x3c5/0x780 kernel/kthread.c:464
 ret_from_fork+0x5d7/0x6f0 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>

Allocated by task 6122:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 poison_kmalloc_redzone mm/kasan/common.c:377 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:394
 kmalloc_noprof include/linux/slab.h:905 [inline]
 kzalloc_noprof include/linux/slab.h:1039 [inline]
 ucma_process_join+0x237/0xa30 drivers/infiniband/core/ucma.c:1465
 ucma_join_multicast+0xe8/0x160 drivers/infiniband/core/ucma.c:1557
 ucma_write+0x1fb/0x330 drivers/infiniband/core/ucma.c:1738
 vfs_write+0x2a0/0x1150 fs/read_write.c:684
 ksys_write+0x1f8/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 6122:
 kasan_save_stack+0x33/0x60 mm/kasan/common.c:47
 kasan_save_track+0x14/0x30 mm/kasan/common.c:68
 kasan_save_free_info+0x3b/0x60 mm/kasan/generic.c:576
 poison_slab_object mm/kasan/common.c:247 [inline]
 __kasan_slab_free+0x51/0x70 mm/kasan/common.c:264
 kasan_slab_free include/linux/kasan.h:233 [inline]
 slab_free_hook mm/slub.c:2381 [inline]
 slab_free mm/slub.c:4643 [inline]
 kfree+0x2b4/0x4d0 mm/slub.c:4842
 ucma_process_join+0x3b9/0xa30 drivers/infiniband/core/ucma.c:1516
 ucma_join_multicast+0xe8/0x160 drivers/infiniband/core/ucma.c:1557
 ucma_write+0x1fb/0x330 drivers/infiniband/core/ucma.c:1738
 vfs_write+0x2a0/0x1150 fs/read_write.c:684
 ksys_write+0x1f8/0x250 fs/read_write.c:738
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xcd/0x4c0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802b69d400
 which belongs to the cache kmalloc-192 of size 192
The buggy address is located 16 bytes inside of
 freed 192-byte region [ffff88802b69d400, ffff88802b69d4c0)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b69d
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff88801b8423c0 ffffea0000acd6c0 dead000000000002
raw: 0000000000000000 0000000080100010 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 13398274277, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x1c0/0x230 mm/page_alloc.c:1704
 prep_new_page mm/page_alloc.c:1712 [inline]
 get_page_from_freelist+0x1321/0x3890 mm/page_alloc.c:3669
 __alloc_frozen_pages_noprof+0x261/0x23f0 mm/page_alloc.c:4959
 alloc_pages_mpol+0x1fb/0x550 mm/mempolicy.c:2419
 alloc_slab_page mm/slub.c:2451 [inline]
 allocate_slab mm/slub.c:2619 [inline]
 new_slab+0x23b/0x330 mm/slub.c:2673
 ___slab_alloc+0xd9c/0x1940 mm/slub.c:3859
 __slab_alloc.constprop.0+0x56/0xb0 mm/slub.c:3949
 __slab_alloc_node mm/slub.c:4024 [inline]
 slab_alloc_node mm/slub.c:4185 [inline]
 __do_kmalloc_node mm/slub.c:4327 [inline]
 __kmalloc_noprof+0x2f2/0x510 mm/slub.c:4340
 kmalloc_noprof include/linux/slab.h:909 [inline]
 usb_alloc_urb+0x66/0xa0 drivers/usb/core/urb.c:75
 usb_internal_control_msg drivers/usb/core/message.c:96 [inline]
 usb_control_msg+0x1d3/0x4a0 drivers/usb/core/message.c:154
 usb_get_string+0xab/0x1a0 drivers/usb/core/message.c:844
 usb_string_sub+0x107/0x390 drivers/usb/core/message.c:883
 usb_string+0x307/0x670 drivers/usb/core/message.c:988
 usb_cache_string+0x80/0x150 drivers/usb/core/message.c:1030
 usb_enumerate_device drivers/usb/core/hub.c:2537 [inline]
 usb_new_device+0x1d0/0x1a20 drivers/usb/core/hub.c:2664
 register_root_hub+0x299/0x730 drivers/usb/core/hcd.c:994
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802b69d300: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802b69d380: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
>ffff88802b69d400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                         ^
 ffff88802b69d480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
 ffff88802b69d500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
==================================================================