Extracting prog: 2m24.13231015s
Minimizing prog: 55m45.67489045s
Simplifying prog options: 0s
Extracting C: 1m56.33827879s
Simplifying C: 30m15.478591799s


extracting reproducer from 31 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_io_uring_setup-close_range-sendmsg$can_raw
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="ee635f9f6fb917548b72cb651999a19715d1330827ea18076817c0a59e6bde2a8e2870dc9d7c01c3c4cc64184c037082c2529520fda7b7122c9282d92f252c2e28697bc93468f12cb335692c8c0f1cfb5c9275195950796d9b500d4c61cd5798c7db7577ef9ca4c6e4c774c7cf057b04e0139e5c49e4b90bfb7fa2dc0a3c34a880e11dcc93b4d037d07968dbf33afa1a4f76aac8e2f057229257cfe890316a10e24723861c9dec549e403e88c8dfd493556bc4908107e5fd1fd5bf52a4ebc7438262ab170eb8711751c456589387a139ad08bbaff0f29e4255e1f2d3e34479116b4b7962b4db765fafb283eb5bda96ae0fa72b7cbe31d44c01d384f4c715e0a22d9a0540768c41e777678b63b9ddf1df726a192ccfa2860a6cc8fa89ac611210cd7206e3c547ec785544ff53c18ecedbe818aeeb2a68268c93805f5de6efff5a78e38dbb9548d74f442aa1ed1dc9c07c4f4b0964b67820fd6f08dadca4e920b98679ac26d6c1257ec9ab8303b3977330ad7f3d740d5511c4338021d54518bd163d87ac8c54ea48e3892cd42b0fedf41b8683993f1f583737bf9aba8f7b265f6494d48dba5bcc576f2ddf4335e2fa33d3d589f878d6873bcc28eb413efed89cad03cfd53f6bece9f264b65810ad14a35003199ee06e60e31a624834a35744805fef4855de379183d36375aee6e40bb5ac25e4d5884a76ccf7efb2f3e56ecdb5f668ed434f1f98990768eb7b09e3be2048db59db6a7bbc4c741130b752f529e189ed704997aa28da27f736578143e78f8c74b11282f05159c8f7e7fbd323892b4fbdc364bc6652a75cc6dc2b920a7bb971c0941c05e2c3a941a6ecd20d66e313afe0aeea781ecdcdab703a6ef4764581368bb981d411eec88e958a50226e91c101591e5bdaf10f19d59097986dd9b59b8069d2a8a9340cfc75760b0503513b1c1d84014dcda71085ea6c29c7479e9722bcf60aede70bd539f3c03a2ba4023993faae4a00e7147b4d1f949db2104379dd7dc0a12c1e2424f7e4720792624de2bc233221e531943e98b393cb2327dd515ecfd5991038ce8fb3152a335d3f174e1b98f4486bf22636cb6b372e3abcc543610a612d7ec4570596b8dc273d1ff5ab02a3ab8770e922edd49d3968894ad997638e91a8203a8a496a2f09ea093bc5bdf9fad8ee14c65d67b0087a7ad356adb9383bf6e84023ed3a9fa82f4bd0f2a8eb1ee60cc5d4939224aa21a8314f8bea58c28519f9dbb91ba4d839736ac41a5588554ea8919c471bfd671dd295dd12b03d6caa1a07098643189cac56eff57f5dd90f1464f68d3df10b5b41a017f823cc11b76b688d660445c80ef4f247066b31be51a835a231c3a83153039e433ede3b756a407aebbf0e3d263f809fb672f82901901a046c2e80086d0881104633a25041fd42a7cb60048acc75584e4e5a9e4e3db6f3a462546c0425fee0f56d6840394b21f022ecc042796103f456786c399461f065da376ce9b140f8fa6f3537eb3399fb06bc4967de4a050736e66d0be08e59f652d7e78758cb0d1ccea4b7d1ed477b691edfad775e3c2a5ea0bb6e5f422362b0a128393860bc87410793aa55b3b1c934f93fe7305050de98bc51608345b5cce1b0f6639185e2f5cbd06fcbec0702e415caffbb138d9874c65e05ce68019cdc8d2a6e7fc36fd8ea746289828200fa164bd0a881fc70019b4d012d72245f06e0c09819530584d213737e2f613b7cb0b2f4dc62b77642b270c0e98def66ad70fd77c35ed5c5b01d57fcd01838234cadc481faedad15628d05e27e8c164a84dd6c5f8244f59808150fb6e2811596f93670faacfe91495f423e19be1b20116b7acd46d03b23d4d5bdc78197910988b0b272deb1060655910da9256a02029784cef0bc2e27a27bfc1de2b99b020995e932ed29cbece81f55e77f23460102f6e93b63135e674b9f9d95079595cef52b2486856d12cea6fe8f6552401e2fd1ca4b5eb46ddf80b0d0523e247cd225daaa5ddc185a7358179e1bcf4d25d5ba7907b1c5fbdfeeb8138171f4497d41d9d92416bad4178412aea3b1a97892a4ae59752aeb19fd57967d148e94acbcf6337cfe0fb7c966da91f50d2128aa4de7e8f47b910506019d6efefe92401a8e927f6b0117ebdda792ca685c09c8ba0452bf0db78125bdd8e5f17aeb076ee9468295853a179695d8c70fabf9ded02304a9298780c7b78819304e2f55f2909642b7025aff4ce1e40dc0bbfa3212fcfd48214e0302b1b1438de31d35875dfe152a36b136a4e8c6cb3363f987a705c8923a08ea5ca8e326e8e1cd2e4054247be56018b36a4230345d54364b288d19ff98fbec0e3b2ec08677ea47493b8fafd05d4daf5366bdfee45aba2929e78f1a58465b624030bb39b7d26b325adf6f6a29eb1bca8c8c664f2d2f19be9b2f72be9b53ea38b0381c48796b7640bd4b0f5f39eb80264e040d27f41f123d3ec6ce646d2d690e56b7c2b3db99795c3d227aef16f47bbdb2d5fb7d751bd00158818c970706799461e86d9df4780716118ed735f33d1c8dd5410db298708d8166edebeca2bcea73f5bae540f7572df11b1530cbf144a1340a6504317aac657be7c5720862507fd0a769076f4a58a76c9681ab5069f8cd60597150af76333d7a9133981563e193b74dfcbb8154254e77589190bc157f75bb1d8055de542194df5f78a0966394a47b39c5d5bcfd7b2d8f5920fd4be080308df696ece1326528f14e9ecd9d59f5c850b2ebeb8beea188e1cba4e4acfd12e25d6cd519ed26e09e581a7a3556e94c321dcd8275a2b2408d800a3bcd07c631e9b82edb5da2cde67d45e7bcdb75b27909aff8194f6cdb61fe92ed0f190d89e9008ee900149ecb360cd273dc3e4a3c3bc93636b986c178550a8915daf381e18448526d85fe27720cfc1ac4b43f81ad85e1cbe64a6cf8cb95c723ff7b7b80995fb21ef0f3ca9c0a5e31bfe6283658763e2b8a2886f60a377b4ad37ae657b222f0e3ff3ca980f24cf1eb71d4f38a740a6d4b8d6e11f3756d4f182ef57c3b06fea963293c871352172ded5e23527061df19289f439e480d676d51e30fb46a302ca54ca7d53812b6a10b3ce98a8b32fa4928a27e90f8489e25bf494626d6fccbb2832b7a8656d3b2572104826973aaac3f371accba14b940d608aecc996f9fb03c4965e6870fb3aa000677d9a89754cca0c21ef7f45d9be419b82ec781776cabd3ff295c16b51734c7958a287a7c297153e44c40bfa43acb70376867b2e2466735580656c29d08b3f09214a5b987998ed4cbbdf88b89ce7793e94cba65d414796c2dac30cff4716018ddd206e9cee0e9ae026d08d5b2a6a53683ba6fe261174d4df1fbdd5f24036c25087ca355067e5fb99b8444e7a946746b5407fdffab287db126fa20ce7bc38be6fbd17f1ce069ddc2e91d59e421c70ba9451e0873531d62a5814d330447d0c3bacce839a882bdcc81ac75f310dda85c0f4877d36b35db9bf21689fcf0e1a8bed16339da7abeeb5fac463a797642d828d8a5995d13f92fbf2bb4f3384d10f30d626be80d4539060245e0c59eab5dccb0252e96d0f9a6e3354dd14f158ee03fcd4a41a97c654e14c5a19b50db48024106d54f7756cc5e2927843541b815d89261ac0e8f82e1e7392fb46775d3d83740bbf47d121ee1868e60c0bd84ebd3e92c9c5e112e34764049c7f276dda4491f604dc11770c01503db69d2ae915709ea5172db42552e4b20ab548917273297e6e57cc12f91917e48875fe302edf2cae5d1b980676eccb23f2dd50392f2e16b3a748e20ad1ed0fa9861023c75070e4caebed169db040531aaac93a1d00c75b9fa51083e05a0621f0035dfbd64abb29c90d0f54efbba4bc6f5a9e5093ea4f70de456160eea922e57b5c5e908107076008994ef55c603bdaf845a0fd8535337d6961e5a7ab34ef7c2b06a33a891889ad7bd146ebc6217215c2ba02c5ef04fe00ed67e648d9488d0536219c648cd15d7321bb49828dad1e0c9770a695e9f02fcccce1969695adb28f181987578194dfde38ce240c26b57bbb536532f22deb578496fcd45548cd8b0abe3ec1cc71cd3f35a615327e24c3fea3d3f742f4d1fee50fc44b6c1a943a907119287e1ac8f6deacfa09ad50fd5d54b1917d75c2ba1fa787b985d64a3cd21d4a0c6b89903b0c2c1d5dd9a8c6cf3b4089fda810f05aa7eddc1f354f455244ae66749f7f9849cae6b99bd677710bba8f5699d5fef7b41a9935be3053b4955f8baf7ee735a0c035e7273d06f3c11df69ae0fc09288d326695498c7953e3574cf7710cde600912687587ea659d82662edf77a7f7debdf1e849878801924b63335825637c79343e7ec40c1b69550c7c66e028e3ec1c60d83468b190a438c3ec237e5daf936361d52d7500cbfdb7bd451682162f783dd563eb8f95bb03d086f593c5062986ba10072f34359883c1887fd093efec0a88db817f81bf59b67287759a30c486766f9658fd704298ea562d039c68bef4ac13b49226246220f5c8f5222f3b7d1a777971aaf8dce61a834bb75d1019814ea8dab0fe1550ce0362a5ca4dcb4ca0b7b4354be960187c712663036ab529606139d8111accf46527f3a28a7a24d273df0fd43f1683473782c9d85a2b822aaf924c477edfee5caade85f90ea2fb0644670c2cffdda34b6035799fe19397a0022bc6087d19d9b4053d0ae98ddc6c50df8af5f3a4f8bd020294876671f707ffb78ff1dd0d1e7dff92418cca43a59f5c5b75428cad67dfa4615aefa9952427fe76a34090f8a7189ade62a1a562f22492bd1cc2a2b6eded990b76f1ef96a867a987c03c5c9915053021ad8eccaac0fcd5ca01887f15aceee2a36aa349002493a6c8353d0c598678ba4d242f80ebdac61b80c88c03a55971f45d204501efaaadda9ed25d79a76cf28d63d2fed88484e81ad7c010654c8e2d4af6d345d0da8e3c6f10980aa9173ace6fdcc7dd40f73e0b364288ef44a107e979ee7ec5449fd7ded663e154d28e4ece1af0cd6914052c48cc370b2bec828afc0bba74774cb839e384f3ec880c87a7bb7f6a9574bef226420e14a1ab6e5247f0935fdba48bf5486bc2eab579eda7cf91e2b042e83c0bd172a77eaec5a29d4305952ca9455dd83a30704864addfbf140d2920eaaec2f0d21ba8fb450359a3511c908543f0340b91d1ac3aa4eb70a49f3765111d194d42da009d0d0439608b17d9115b8b028b3901b125c9b62de9475a05908357a3772523a2f1466ba8aed186fb79764aebecc6026cdc3b0906516780d907bf60f0cbf7737fa404258c6d70d6a13825e7a487586518c806d258ebe6cc0feca4bd45cd5664bf00f58707a10204bb00f8c71dfa5493a6ca2afeac93e6c73c5b9ae437ba76bf134bf0eb6ac67d871ba435740910712545da1adfe5ecea97dbba1f1d1a319a7376844cb821c3e5e7b037e090f87829a75fa26f5e79bc892f3c65bb438e2ef61a1adfa1fa89b8f43b06c9758a1b32678e0c1249bae644728bafa063b2a243f0d34074e75481adad626f6d5eaa8a805698722dc4c15d80637d1521cd903d8e1077e2a12720a8907961a13a0998739b345ad9c82d0ed1467ef9077b52d8554630d86e1cab0c42db5116fe76fb62f138ab5d12299496fca145fa21d9ec27e04eeefaa519f90dbbbd4f4519e47eb14097746f1d0764307225727606c2e5a4a44f48553ae2d98f417e98d5aea34747f645f1ea1b8736328361277acef835284809d52abf2782b6f241ed58cb997befe617651499b21e4e55122370047f87345c9da559401da"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x783c, 0x1000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$can_raw(r5, &(0x7f0000001480)={&(0x7f0000000240), 0x10, &(0x7f0000001440)={&(0x7f00000013c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0x26, 0x2, 0x0, 0x0, "d759768cf7e875a24eaff5a8de46844616f51194568d1c9f2d3597cb6989696cf603fafc85400750d721c22c67c4add56a11e40600b54518ce1d47f6cb702486"}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x20000004)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
single: successfully extracted reproducer
found reproducer with 22 syscalls
minimizing guilty program
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_io_uring_setup-close_range
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x783c, 0x1000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER-syz_io_uring_setup
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x783c, 0x1000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000))

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise-ioctl$UFFDIO_API-ioctl$UFFDIO_REGISTER
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise-ioctl$UFFDIO_API
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108})

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY-madvise
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend-ioctl$FE_SET_PROPERTY
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
ioctl$FE_SET_PROPERTY(r5, 0x40106f52, &(0x7f0000000000)={0xe, &(0x7f0000000140)=[{0x13, '\x00', @data=0x2, 0x400080}]})

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="ee635f9f6fb917548b72cb651999a19715d1330827ea18076817c0a59e6bde2a8e2870dc9d7c01c3c4cc64184c037082c2529520fda7b7122c9282d92f252c2e28697bc93468f12cb335692c8c0f1cfb5c9275195950796d9b500d4c61cd5798c7db7577ef9ca4c6e4c774c7cf057b04e0139e5c49e4b90bfb7fa2dc0a3c34a880e11dcc93b4d037d07968dbf33afa1a4f76aac8e2f057229257cfe890316a10e24723861c9dec549e403e88c8dfd493556bc4908107e5fd1fd5bf52a4ebc7438262ab170eb8711751c456589387a139ad08bbaff0f29e4255e1f2d3e34479116b4b7962b4db765fafb283eb5bda96ae0fa72b7cbe31d44c01d384f4c715e0a22d9a0540768c41e777678b63b9ddf1df726a192ccfa2860a6cc8fa89ac611210cd7206e3c547ec785544ff53c18ecedbe818aeeb2a68268c93805f5de6efff5a78e38dbb9548d74f442aa1ed1dc9c07c4f4b0964b67820fd6f08dadca4e920b98679ac26d6c1257ec9ab8303b3977330ad7f3d740d5511c4338021d54518bd163d87ac8c54ea48e3892cd42b0fedf41b8683993f1f583737bf9aba8f7b265f6494d48dba5bcc576f2ddf4335e2fa33d3d589f878d6873bcc28eb413efed89cad03cfd53f6bece9f264b65810ad14a35003199ee06e60e31a624834a35744805fef4855de379183d36375aee6e40bb5ac25e4d5884a76ccf7efb2f3e56ecdb5f668ed434f1f98990768eb7b09e3be2048db59db6a7bbc4c741130b752f529e189ed704997aa28da27f736578143e78f8c74b11282f05159c8f7e7fbd323892b4fbdc364bc6652a75cc6dc2b920a7bb971c0941c05e2c3a941a6ecd20d66e313afe0aeea781ecdcdab703a6ef4764581368bb981d411eec88e958a50226e91c101591e5bdaf10f19d59097986dd9b59b8069d2a8a9340cfc75760b0503513b1c1d84014dcda71085ea6c29c7479e9722bcf60aede70bd539f3c03a2ba4023993faae4a00e7147b4d1f949db2104379dd7dc0a12c1e2424f7e4720792624de2bc233221e531943e98b393cb2327dd515ecfd5991038ce8fb3152a335d3f174e1b98f4486bf22636cb6b372e3abcc543610a612d7ec4570596b8dc273d1ff5ab02a3ab8770e922edd49d3968894ad997638e91a8203a8a496a2f09ea093bc5bdf9fad8ee14c65d67b0087a7ad356adb9383bf6e84023ed3a9fa82f4bd0f2a8eb1ee60cc5d4939224aa21a8314f8bea58c28519f9dbb91ba4d839736ac41a5588554ea8919c471bfd671dd295dd12b03d6caa1a07098643189cac56eff57f5dd90f1464f68d3df10b5b41a017f823cc11b76b688d660445c80ef4f247066b31be51a835a231c3a83153039e433ede3b756a407aebbf0e3d263f809fb672f82901901a046c2e80086d0881104633a25041fd42a7cb60048acc75584e4e5a9e4e3db6f3a462546c0425fee0f56d6840394b21f022ecc042796103f456786c399461f065da376ce9b140f8fa6f3537eb3399fb06bc4967de4a050736e66d0be08e59f652d7e78758cb0d1ccea4b7d1ed477b691edfad775e3c2a5ea0bb6e5f422362b0a128393860bc87410793aa55b3b1c934f93fe7305050de98bc51608345b5cce1b0f6639185e2f5cbd06fcbec0702e415caffbb138d9874c65e05ce68019cdc8d2a6e7fc36fd8ea746289828200fa164bd0a881fc70019b4d012d72245f06e0c09819530584d213737e2f613b7cb0b2f4dc62b77642b270c0e98def66ad70fd77c35ed5c5b01d57fcd01838234cadc481faedad15628d05e27e8c164a84dd6c5f8244f59808150fb6e2811596f93670faacfe91495f423e19be1b20116b7acd46d03b23d4d5bdc78197910988b0b272deb1060655910da9256a02029784cef0bc2e27a27bfc1de2b99b020995e932ed29cbece81f55e77f23460102f6e93b63135e674b9f9d95079595cef52b2486856d12cea6fe8f6552401e2fd1ca4b5eb46ddf80b0d0523e247cd225daaa5ddc185a7358179e1bcf4d25d5ba7907b1c5fbdfeeb8138171f4497d41d9d92416bad4178412aea3b1a97892a4ae59752aeb19fd57967d148e94acbcf6337cfe0fb7c966da91f50d2128aa4de7e8f47b910506019d6efefe92401a8e927f6b0117ebdda792ca685c09c8ba0452bf0db78125bdd8e5f17aeb076ee9468295853a179695d8c70fabf9ded02304a9298780c7b78819304e2f55f2909642b7025aff4ce1e40dc0bbfa3212fcfd48214e0302b1b1438de31d35875dfe152a36b136a4e8c6cb3363f987a705c8923a08ea5ca8e326e8e1cd2e4054247be56018b36a4230345d54364b288d19ff98fbec0e3b2ec08677ea47493b8fafd05d4daf5366bdfee45aba2929e78f1a58465b624030bb39b7d26b325adf6f6a29eb1bca8c8c664f2d2f19be9b2f72be9b53ea38b0381c48796b7640bd4b0f5f39eb80264e040d27f41f123d3ec6ce646d2d690e56b7c2b3db99795c3d227aef16f47bbdb2d5fb7d751bd00158818c970706799461e86d9df4780716118ed735f33d1c8dd5410db298708d8166edebeca2bcea73f5bae540f7572df11b1530cbf144a1340a6504317aac657be7c5720862507fd0a769076f4a58a76c9681ab5069f8cd60597150af76333d7a9133981563e193b74dfcbb8154254e77589190bc157f75bb1d8055de542194df5f78a0966394a47b39c5d5bcfd7b2d8f5920fd4be080308df696ece1326528f14e9ecd9d59f5c850b2ebeb8beea188e1cba4e4acfd12e25d6cd519ed26e09e581a7a3556e94c321dcd8275a2b2408d800a3bcd07c631e9b82edb5da2cde67d45e7bcdb75b27909aff8194f6cdb61fe92ed0f190d89e9008ee900149ecb360cd273dc3e4a3c3bc93636b986c178550a8915daf381e18448526d85fe27720cfc1ac4b43f81ad85e1cbe64a6cf8cb95c723ff7b7b80995fb21ef0f3ca9c0a5e31bfe6283658763e2b8a2886f60a377b4ad37ae657b222f0e3ff3ca980f24cf1eb71d4f38a740a6d4b8d6e11f3756d4f182ef57c3b06fea963293c871352172ded5e23527061df19289f439e480d676d51e30fb46a302ca54ca7d53812b6a10b3ce98a8b32fa4928a27e90f8489e25bf494626d6fccbb2832b7a8656d3b2572104826973aaac3f371accba14b940d608aecc996f9fb03c4965e6870fb3aa000677d9a89754cca0c21ef7f45d9be419b82ec781776cabd3ff295c16b51734c7958a287a7c297153e44c40bfa43acb70376867b2e2466735580656c29d08b3f09214a5b987998ed4cbbdf88b89ce7793e94cba65d414796c2dac30cff4716018ddd206e9cee0e9ae026d08d5b2a6a53683ba6fe261174d4df1fbdd5f24036c25087ca355067e5fb99b8444e7a946746b5407fdffab287db126fa20ce7bc38be6fbd17f1ce069ddc2e91d59e421c70ba9451e0873531d62a5814d330447d0c3bacce839a882bdcc81ac75f310dda85c0f4877d36b35db9bf21689fcf0e1a8bed16339da7abeeb5fac463a797642d828d8a5995d13f92fbf2bb4f3384d10f30d626be80d4539060245e0c59eab5dccb0252e96d0f9a6e3354dd14f158ee03fcd4a41a97c654e14c5a19b50db48024106d54f7756cc5e2927843541b815d89261ac0e8f82e1e7392fb46775d3d83740bbf47d121ee1868e60c0bd84ebd3e92c9c5e112e34764049c7f276dda4491f604dc11770c01503db69d2ae915709ea5172db42552e4b20ab548917273297e6e57cc12f91917e48875fe302edf2cae5d1b980676eccb23f2dd50392f2e16b3a748e20ad1ed0fa9861023c75070e4caebed169db040531aaac93a1d00c75b9fa51083e05a0621f0035dfbd64abb29c90d0f54efbba4bc6f5a9e5093ea4f70de456160eea922e57b5c5e908107076008994ef55c603bdaf845a0fd8535337d6961e5a7ab34ef7c2b06a33a891889ad7bd146ebc6217215c2ba02c5ef04fe00ed67e648d9488d0536219c648cd15d7321bb49828dad1e0c9770a695e9f02fcccce1969695adb28f181987578194dfde38ce240c26b57bbb536532f22deb578496fcd45548cd8b0abe3ec1cc71cd3f35a615327e24c3fea3d3f742f4d1fee50fc44b6c1a943a907119287e1ac8f6deacfa09ad50fd5d54b1917d75c2ba1fa787b985d64a3cd21d4a0c6b89903b0c2c1d5dd9a8c6cf3b4089fda810f05aa7eddc1f354f455244ae66749f7f9849cae6b99bd677710bba8f5699d5fef7b41a9935be3053b4955f8baf7ee735a0c035e7273d06f3c11df69ae0fc09288d326695498c7953e3574cf7710cde600912687587ea659d82662edf77a7f7debdf1e849878801924b63335825637c79343e7ec40c1b69550c7c66e028e3ec1c60d83468b190a438c3ec237e5daf936361d52d7500cbfdb7bd451682162f783dd563eb8f95bb03d086f593c5062986ba10072f34359883c1887fd093efec0a88db817f81bf59b67287759a30c486766f9658fd704298ea562d039c68bef4ac13b49226246220f5c8f5222f3b7d1a777971aaf8dce61a834bb75d1019814ea8dab0fe1550ce0362a5ca4dcb4ca0b7b4354be960187c712663036ab529606139d8111accf46527f3a28a7a24d273df0fd43f1683473782c9d85a2b822aaf924c477edfee5caade85f90ea2fb0644670c2cffdda34b6035799fe19397a0022bc6087d19d9b4053d0ae98ddc6c50df8af5f3a4f8bd020294876671f707ffb78ff1dd0d1e7dff92418cca43a59f5c5b75428cad67dfa4615aefa9952427fe76a34090f8a7189ade62a1a562f22492bd1cc2a2b6eded990b76f1ef96a867a987c03c5c9915053021ad8eccaac0fcd5ca01887f15aceee2a36aa349002493a6c8353d0c598678ba4d242f80ebdac61b80c88c03a55971f45d204501efaaadda9ed25d79a76cf28d63d2fed88484e81ad7c010654c8e2d4af6d345d0da8e3c6f10980aa9173ace6fdcc7dd40f73e0b364288ef44a107e979ee7ec5449fd7ded663e154d28e4ece1af0cd6914052c48cc370b2bec828afc0bba74774cb839e384f3ec880c87a7bb7f6a9574bef226420e14a1ab6e5247f0935fdba48bf5486bc2eab579eda7cf91e2b042e83c0bd172a77eaec5a29d4305952ca9455dd83a30704864addfbf140d2920eaaec2f0d21ba8fb450359a3511c908543f0340b91d1ac3aa4eb70a49f3765111d194d42da009d0d0439608b17d9115b8b028b3901b125c9b62de9475a05908357a3772523a2f1466ba8aed186fb79764aebecc6026cdc3b0906516780d907bf60f0cbf7737fa404258c6d70d6a13825e7a487586518c806d258ebe6cc0feca4bd45cd5664bf00f58707a10204bb00f8c71dfa5493a6ca2afeac93e6c73c5b9ae437ba76bf134bf0eb6ac67d871ba435740910712545da1adfe5ecea97dbba1f1d1a319a7376844cb821c3e5e7b037e090f87829a75fa26f5e79bc892f3c65bb438e2ef61a1adfa1fa89b8f43b06c9758a1b32678e0c1249bae644728bafa063b2a243f0d34074e75481adad626f6d5eaa8a805698722dc4c15d80637d1521cd903d8e1077e2a12720a8907961a13a0998739b345ad9c82d0ed1467ef9077b52d8554630d86e1cab0c42db5116fe76fb62f138ab5d12299496fca145fa21d9ec27e04eeefaa519f90dbbbd4f4519e47eb14097746f1d0764307225727606c2e5a4a44f48553ae2d98f417e98d5aea34747f645f1ea1b8736328361277acef835284809d52abf2782b6f241ed58cb997befe617651499b21e4e55122370047f87345c9da559401da"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-sendmsg$IPSET_CMD_DESTROY
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="ee635f9f6fb917548b72cb651999a19715d1330827ea18076817c0a59e6bde2a8e2870dc9d7c01c3c4cc64184c037082c2529520fda7b7122c9282d92f252c2e28697bc93468f12cb335692c8c0f1cfb5c9275195950796d9b500d4c61cd5798c7db7577ef9ca4c6e4c774c7cf057b04e0139e5c49e4b90bfb7fa2dc0a3c34a880e11dcc93b4d037d07968dbf33afa1a4f76aac8e2f057229257cfe890316a10e24723861c9dec549e403e88c8dfd493556bc4908107e5fd1fd5bf52a4ebc7438262ab170eb8711751c456589387a139ad08bbaff0f29e4255e1f2d3e34479116b4b7962b4db765fafb283eb5bda96ae0fa72b7cbe31d44c01d384f4c715e0a22d9a0540768c41e777678b63b9ddf1df726a192ccfa2860a6cc8fa89ac611210cd7206e3c547ec785544ff53c18ecedbe818aeeb2a68268c93805f5de6efff5a78e38dbb9548d74f442aa1ed1dc9c07c4f4b0964b67820fd6f08dadca4e920b98679ac26d6c1257ec9ab8303b3977330ad7f3d740d5511c4338021d54518bd163d87ac8c54ea48e3892cd42b0fedf41b8683993f1f583737bf9aba8f7b265f6494d48dba5bcc576f2ddf4335e2fa33d3d589f878d6873bcc28eb413efed89cad03cfd53f6bece9f264b65810ad14a35003199ee06e60e31a624834a35744805fef4855de379183d36375aee6e40bb5ac25e4d5884a76ccf7efb2f3e56ecdb5f668ed434f1f98990768eb7b09e3be2048db59db6a7bbc4c741130b752f529e189ed704997aa28da27f736578143e78f8c74b11282f05159c8f7e7fbd323892b4fbdc364bc6652a75cc6dc2b920a7bb971c0941c05e2c3a941a6ecd20d66e313afe0aeea781ecdcdab703a6ef4764581368bb981d411eec88e958a50226e91c101591e5bdaf10f19d59097986dd9b59b8069d2a8a9340cfc75760b0503513b1c1d84014dcda71085ea6c29c7479e9722bcf60aede70bd539f3c03a2ba4023993faae4a00e7147b4d1f949db2104379dd7dc0a12c1e2424f7e4720792624de2bc233221e531943e98b393cb2327dd515ecfd5991038ce8fb3152a335d3f174e1b98f4486bf22636cb6b372e3abcc543610a612d7ec4570596b8dc273d1ff5ab02a3ab8770e922edd49d3968894ad997638e91a8203a8a496a2f09ea093bc5bdf9fad8ee14c65d67b0087a7ad356adb9383bf6e84023ed3a9fa82f4bd0f2a8eb1ee60cc5d4939224aa21a8314f8bea58c28519f9dbb91ba4d839736ac41a5588554ea8919c471bfd671dd295dd12b03d6caa1a07098643189cac56eff57f5dd90f1464f68d3df10b5b41a017f823cc11b76b688d660445c80ef4f247066b31be51a835a231c3a83153039e433ede3b756a407aebbf0e3d263f809fb672f82901901a046c2e80086d0881104633a25041fd42a7cb60048acc75584e4e5a9e4e3db6f3a462546c0425fee0f56d6840394b21f022ecc042796103f456786c399461f065da376ce9b140f8fa6f3537eb3399fb06bc4967de4a050736e66d0be08e59f652d7e78758cb0d1ccea4b7d1ed477b691edfad775e3c2a5ea0bb6e5f422362b0a128393860bc87410793aa55b3b1c934f93fe7305050de98bc51608345b5cce1b0f6639185e2f5cbd06fcbec0702e415caffbb138d9874c65e05ce68019cdc8d2a6e7fc36fd8ea746289828200fa164bd0a881fc70019b4d012d72245f06e0c09819530584d213737e2f613b7cb0b2f4dc62b77642b270c0e98def66ad70fd77c35ed5c5b01d57fcd01838234cadc481faedad15628d05e27e8c164a84dd6c5f8244f59808150fb6e2811596f93670faacfe91495f423e19be1b20116b7acd46d03b23d4d5bdc78197910988b0b272deb1060655910da9256a02029784cef0bc2e27a27bfc1de2b99b020995e932ed29cbece81f55e77f23460102f6e93b63135e674b9f9d95079595cef52b2486856d12cea6fe8f6552401e2fd1ca4b5eb46ddf80b0d0523e247cd225daaa5ddc185a7358179e1bcf4d25d5ba7907b1c5fbdfeeb8138171f4497d41d9d92416bad4178412aea3b1a97892a4ae59752aeb19fd57967d148e94acbcf6337cfe0fb7c966da91f50d2128aa4de7e8f47b910506019d6efefe92401a8e927f6b0117ebdda792ca685c09c8ba0452bf0db78125bdd8e5f17aeb076ee9468295853a179695d8c70fabf9ded02304a9298780c7b78819304e2f55f2909642b7025aff4ce1e40dc0bbfa3212fcfd48214e0302b1b1438de31d35875dfe152a36b136a4e8c6cb3363f987a705c8923a08ea5ca8e326e8e1cd2e4054247be56018b36a4230345d54364b288d19ff98fbec0e3b2ec08677ea47493b8fafd05d4daf5366bdfee45aba2929e78f1a58465b624030bb39b7d26b325adf6f6a29eb1bca8c8c664f2d2f19be9b2f72be9b53ea38b0381c48796b7640bd4b0f5f39eb80264e040d27f41f123d3ec6ce646d2d690e56b7c2b3db99795c3d227aef16f47bbdb2d5fb7d751bd00158818c970706799461e86d9df4780716118ed735f33d1c8dd5410db298708d8166edebeca2bcea73f5bae540f7572df11b1530cbf144a1340a6504317aac657be7c5720862507fd0a769076f4a58a76c9681ab5069f8cd60597150af76333d7a9133981563e193b74dfcbb8154254e77589190bc157f75bb1d8055de542194df5f78a0966394a47b39c5d5bcfd7b2d8f5920fd4be080308df696ece1326528f14e9ecd9d59f5c850b2ebeb8beea188e1cba4e4acfd12e25d6cd519ed26e09e581a7a3556e94c321dcd8275a2b2408d800a3bcd07c631e9b82edb5da2cde67d45e7bcdb75b27909aff8194f6cdb61fe92ed0f190d89e9008ee900149ecb360cd273dc3e4a3c3bc93636b986c178550a8915daf381e18448526d85fe27720cfc1ac4b43f81ad85e1cbe64a6cf8cb95c723ff7b7b80995fb21ef0f3ca9c0a5e31bfe6283658763e2b8a2886f60a377b4ad37ae657b222f0e3ff3ca980f24cf1eb71d4f38a740a6d4b8d6e11f3756d4f182ef57c3b06fea963293c871352172ded5e23527061df19289f439e480d676d51e30fb46a302ca54ca7d53812b6a10b3ce98a8b32fa4928a27e90f8489e25bf494626d6fccbb2832b7a8656d3b2572104826973aaac3f371accba14b940d608aecc996f9fb03c4965e6870fb3aa000677d9a89754cca0c21ef7f45d9be419b82ec781776cabd3ff295c16b51734c7958a287a7c297153e44c40bfa43acb70376867b2e2466735580656c29d08b3f09214a5b987998ed4cbbdf88b89ce7793e94cba65d414796c2dac30cff4716018ddd206e9cee0e9ae026d08d5b2a6a53683ba6fe261174d4df1fbdd5f24036c25087ca355067e5fb99b8444e7a946746b5407fdffab287db126fa20ce7bc38be6fbd17f1ce069ddc2e91d59e421c70ba9451e0873531d62a5814d330447d0c3bacce839a882bdcc81ac75f310dda85c0f4877d36b35db9bf21689fcf0e1a8bed16339da7abeeb5fac463a797642d828d8a5995d13f92fbf2bb4f3384d10f30d626be80d4539060245e0c59eab5dccb0252e96d0f9a6e3354dd14f158ee03fcd4a41a97c654e14c5a19b50db48024106d54f7756cc5e2927843541b815d89261ac0e8f82e1e7392fb46775d3d83740bbf47d121ee1868e60c0bd84ebd3e92c9c5e112e34764049c7f276dda4491f604dc11770c01503db69d2ae915709ea5172db42552e4b20ab548917273297e6e57cc12f91917e48875fe302edf2cae5d1b980676eccb23f2dd50392f2e16b3a748e20ad1ed0fa9861023c75070e4caebed169db040531aaac93a1d00c75b9fa51083e05a0621f0035dfbd64abb29c90d0f54efbba4bc6f5a9e5093ea4f70de456160eea922e57b5c5e908107076008994ef55c603bdaf845a0fd8535337d6961e5a7ab34ef7c2b06a33a891889ad7bd146ebc6217215c2ba02c5ef04fe00ed67e648d9488d0536219c648cd15d7321bb49828dad1e0c9770a695e9f02fcccce1969695adb28f181987578194dfde38ce240c26b57bbb536532f22deb578496fcd45548cd8b0abe3ec1cc71cd3f35a615327e24c3fea3d3f742f4d1fee50fc44b6c1a943a907119287e1ac8f6deacfa09ad50fd5d54b1917d75c2ba1fa787b985d64a3cd21d4a0c6b89903b0c2c1d5dd9a8c6cf3b4089fda810f05aa7eddc1f354f455244ae66749f7f9849cae6b99bd677710bba8f5699d5fef7b41a9935be3053b4955f8baf7ee735a0c035e7273d06f3c11df69ae0fc09288d326695498c7953e3574cf7710cde600912687587ea659d82662edf77a7f7debdf1e849878801924b63335825637c79343e7ec40c1b69550c7c66e028e3ec1c60d83468b190a438c3ec237e5daf936361d52d7500cbfdb7bd451682162f783dd563eb8f95bb03d086f593c5062986ba10072f34359883c1887fd093efec0a88db817f81bf59b67287759a30c486766f9658fd704298ea562d039c68bef4ac13b49226246220f5c8f5222f3b7d1a777971aaf8dce61a834bb75d1019814ea8dab0fe1550ce0362a5ca4dcb4ca0b7b4354be960187c712663036ab529606139d8111accf46527f3a28a7a24d273df0fd43f1683473782c9d85a2b822aaf924c477edfee5caade85f90ea2fb0644670c2cffdda34b6035799fe19397a0022bc6087d19d9b4053d0ae98ddc6c50df8af5f3a4f8bd020294876671f707ffb78ff1dd0d1e7dff92418cca43a59f5c5b75428cad67dfa4615aefa9952427fe76a34090f8a7189ade62a1a562f22492bd1cc2a2b6eded990b76f1ef96a867a987c03c5c9915053021ad8eccaac0fcd5ca01887f15aceee2a36aa349002493a6c8353d0c598678ba4d242f80ebdac61b80c88c03a55971f45d204501efaaadda9ed25d79a76cf28d63d2fed88484e81ad7c010654c8e2d4af6d345d0da8e3c6f10980aa9173ace6fdcc7dd40f73e0b364288ef44a107e979ee7ec5449fd7ded663e154d28e4ece1af0cd6914052c48cc370b2bec828afc0bba74774cb839e384f3ec880c87a7bb7f6a9574bef226420e14a1ab6e5247f0935fdba48bf5486bc2eab579eda7cf91e2b042e83c0bd172a77eaec5a29d4305952ca9455dd83a30704864addfbf140d2920eaaec2f0d21ba8fb450359a3511c908543f0340b91d1ac3aa4eb70a49f3765111d194d42da009d0d0439608b17d9115b8b028b3901b125c9b62de9475a05908357a3772523a2f1466ba8aed186fb79764aebecc6026cdc3b0906516780d907bf60f0cbf7737fa404258c6d70d6a13825e7a487586518c806d258ebe6cc0feca4bd45cd5664bf00f58707a10204bb00f8c71dfa5493a6ca2afeac93e6c73c5b9ae437ba76bf134bf0eb6ac67d871ba435740910712545da1adfe5ecea97dbba1f1d1a319a7376844cb821c3e5e7b037e090f87829a75fa26f5e79bc892f3c65bb438e2ef61a1adfa1fa89b8f43b06c9758a1b32678e0c1249bae644728bafa063b2a243f0d34074e75481adad626f6d5eaa8a805698722dc4c15d80637d1521cd903d8e1077e2a12720a8907961a13a0998739b345ad9c82d0ed1467ef9077b52d8554630d86e1cab0c42db5116fe76fb62f138ab5d12299496fca145fa21d9ec27e04eeefaa519f90dbbbd4f4519e47eb14097746f1d0764307225727606c2e5a4a44f48553ae2d98f417e98d5aea34747f645f1ea1b8736328361277acef835284809d52abf2782b6f241ed58cb997befe617651499b21e4e55122370047f87345c9da559401da"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-socket$nl_netfilter-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-sendmsg$IPSET_CMD_ADD-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-sendmsg$IPSET_CMD_CREATE-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="ee635f9f6fb917548b72cb651999a19715d1330827ea18076817c0a59e6bde2a8e2870dc9d7c01c3c4cc64184c037082c2529520fda7b7122c9282d92f252c2e28697bc93468f12cb335692c8c0f1cfb5c9275195950796d9b500d4c61cd5798c7db7577ef9ca4c6e4c774c7cf057b04e0139e5c49e4b90bfb7fa2dc0a3c34a880e11dcc93b4d037d07968dbf33afa1a4f76aac8e2f057229257cfe890316a10e24723861c9dec549e403e88c8dfd493556bc4908107e5fd1fd5bf52a4ebc7438262ab170eb8711751c456589387a139ad08bbaff0f29e4255e1f2d3e34479116b4b7962b4db765fafb283eb5bda96ae0fa72b7cbe31d44c01d384f4c715e0a22d9a0540768c41e777678b63b9ddf1df726a192ccfa2860a6cc8fa89ac611210cd7206e3c547ec785544ff53c18ecedbe818aeeb2a68268c93805f5de6efff5a78e38dbb9548d74f442aa1ed1dc9c07c4f4b0964b67820fd6f08dadca4e920b98679ac26d6c1257ec9ab8303b3977330ad7f3d740d5511c4338021d54518bd163d87ac8c54ea48e3892cd42b0fedf41b8683993f1f583737bf9aba8f7b265f6494d48dba5bcc576f2ddf4335e2fa33d3d589f878d6873bcc28eb413efed89cad03cfd53f6bece9f264b65810ad14a35003199ee06e60e31a624834a35744805fef4855de379183d36375aee6e40bb5ac25e4d5884a76ccf7efb2f3e56ecdb5f668ed434f1f98990768eb7b09e3be2048db59db6a7bbc4c741130b752f529e189ed704997aa28da27f736578143e78f8c74b11282f05159c8f7e7fbd323892b4fbdc364bc6652a75cc6dc2b920a7bb971c0941c05e2c3a941a6ecd20d66e313afe0aeea781ecdcdab703a6ef4764581368bb981d411eec88e958a50226e91c101591e5bdaf10f19d59097986dd9b59b8069d2a8a9340cfc75760b0503513b1c1d84014dcda71085ea6c29c7479e9722bcf60aede70bd539f3c03a2ba4023993faae4a00e7147b4d1f949db2104379dd7dc0a12c1e2424f7e4720792624de2bc233221e531943e98b393cb2327dd515ecfd5991038ce8fb3152a335d3f174e1b98f4486bf22636cb6b372e3abcc543610a612d7ec4570596b8dc273d1ff5ab02a3ab8770e922edd49d3968894ad997638e91a8203a8a496a2f09ea093bc5bdf9fad8ee14c65d67b0087a7ad356adb9383bf6e84023ed3a9fa82f4bd0f2a8eb1ee60cc5d4939224aa21a8314f8bea58c28519f9dbb91ba4d839736ac41a5588554ea8919c471bfd671dd295dd12b03d6caa1a07098643189cac56eff57f5dd90f1464f68d3df10b5b41a017f823cc11b76b688d660445c80ef4f247066b31be51a835a231c3a83153039e433ede3b756a407aebbf0e3d263f809fb672f82901901a046c2e80086d0881104633a25041fd42a7cb60048acc75584e4e5a9e4e3db6f3a462546c0425fee0f56d6840394b21f022ecc042796103f456786c399461f065da376ce9b140f8fa6f3537eb3399fb06bc4967de4a050736e66d0be08e59f652d7e78758cb0d1ccea4b7d1ed477b691edfad775e3c2a5ea0bb6e5f422362b0a128393860bc87410793aa55b3b1c934f93fe7305050de98bc51608345b5cce1b0f6639185e2f5cbd06fcbec0702e415caffbb138d9874c65e05ce68019cdc8d2a6e7fc36fd8ea746289828200fa164bd0a881fc70019b4d012d72245f06e0c09819530584d213737e2f613b7cb0b2f4dc62b77642b270c0e98def66ad70fd77c35ed5c5b01d57fcd01838234cadc481faedad15628d05e27e8c164a84dd6c5f8244f59808150fb6e2811596f93670faacfe91495f423e19be1b20116b7acd46d03b23d4d5bdc78197910988b0b272deb1060655910da9256a02029784cef0bc2e27a27bfc1de2b99b020995e932ed29cbece81f55e77f23460102f6e93b63135e674b9f9d95079595cef52b2486856d12cea6fe8f6552401e2fd1ca4b5eb46ddf80b0d0523e247cd225daaa5ddc185a7358179e1bcf4d25d5ba7907b1c5fbdfeeb8138171f4497d41d9d92416bad4178412aea3b1a97892a4ae59752aeb19fd57967d148e94acbcf6337cfe0fb7c966da91f50d2128aa4de7e8f47b910506019d6efefe92401a8e927f6b0117ebdda792ca685c09c8ba0452bf0db78125bdd8e5f17aeb076ee9468295853a179695d8c70fabf9ded02304a9298780c7b78819304e2f55f2909642b7025aff4ce1e40dc0bbfa3212fcfd48214e0302b1b1438de31d35875dfe152a36b136a4e8c6cb3363f987a705c8923a08ea5ca8e326e8e1cd2e4054247be56018b36a4230345d54364b288d19ff98fbec0e3b2ec08677ea47493b8fafd05d4daf5366bdfee45aba2929e78f1a58465b624030bb39b7d26b325adf6f6a29eb1bca8c8c664f2d2f19be9b2f72be9b53ea38b0381c48796b7640bd4b0f5f39eb80264e040d27f41f123d3ec6ce646d2d690e56b7c2b3db99795c3d227aef16f47bbdb2d5fb7d751bd00158818c970706799461e86d9df4780716118ed735f33d1c8dd5410db298708d8166edebeca2bcea73f5bae540f7572df11b1530cbf144a1340a6504317aac657be7c5720862507fd0a769076f4a58a76c9681ab5069f8cd60597150af76333d7a9133981563e193b74dfcbb8154254e77589190bc157f75bb1d8055de542194df5f78a0966394a47b39c5d5bcfd7b2d8f5920fd4be080308df696ece1326528f14e9ecd9d59f5c850b2ebeb8beea188e1cba4e4acfd12e25d6cd519ed26e09e581a7a3556e94c321dcd8275a2b2408d800a3bcd07c631e9b82edb5da2cde67d45e7bcdb75b27909aff8194f6cdb61fe92ed0f190d89e9008ee900149ecb360cd273dc3e4a3c3bc93636b986c178550a8915daf381e18448526d85fe27720cfc1ac4b43f81ad85e1cbe64a6cf8cb95c723ff7b7b80995fb21ef0f3ca9c0a5e31bfe6283658763e2b8a2886f60a377b4ad37ae657b222f0e3ff3ca980f24cf1eb71d4f38a740a6d4b8d6e11f3756d4f182ef57c3b06fea963293c871352172ded5e23527061df19289f439e480d676d51e30fb46a302ca54ca7d53812b6a10b3ce98a8b32fa4928a27e90f8489e25bf494626d6fccbb2832b7a8656d3b2572104826973aaac3f371accba14b940d608aecc996f9fb03c4965e6870fb3aa000677d9a89754cca0c21ef7f45d9be419b82ec781776cabd3ff295c16b51734c7958a287a7c297153e44c40bfa43acb70376867b2e2466735580656c29d08b3f09214a5b987998ed4cbbdf88b89ce7793e94cba65d414796c2dac30cff4716018ddd206e9cee0e9ae026d08d5b2a6a53683ba6fe261174d4df1fbdd5f24036c25087ca355067e5fb99b8444e7a946746b5407fdffab287db126fa20ce7bc38be6fbd17f1ce069ddc2e91d59e421c70ba9451e0873531d62a5814d330447d0c3bacce839a882bdcc81ac75f310dda85c0f4877d36b35db9bf21689fcf0e1a8bed16339da7abeeb5fac463a797642d828d8a5995d13f92fbf2bb4f3384d10f30d626be80d4539060245e0c59eab5dccb0252e96d0f9a6e3354dd14f158ee03fcd4a41a97c654e14c5a19b50db48024106d54f7756cc5e2927843541b815d89261ac0e8f82e1e7392fb46775d3d83740bbf47d121ee1868e60c0bd84ebd3e92c9c5e112e34764049c7f276dda4491f604dc11770c01503db69d2ae915709ea5172db42552e4b20ab548917273297e6e57cc12f91917e48875fe302edf2cae5d1b980676eccb23f2dd50392f2e16b3a748e20ad1ed0fa9861023c75070e4caebed169db040531aaac93a1d00c75b9fa51083e05a0621f0035dfbd64abb29c90d0f54efbba4bc6f5a9e5093ea4f70de456160eea922e57b5c5e908107076008994ef55c603bdaf845a0fd8535337d6961e5a7ab34ef7c2b06a33a891889ad7bd146ebc6217215c2ba02c5ef04fe00ed67e648d9488d0536219c648cd15d7321bb49828dad1e0c9770a695e9f02fcccce1969695adb28f181987578194dfde38ce240c26b57bbb536532f22deb578496fcd45548cd8b0abe3ec1cc71cd3f35a615327e24c3fea3d3f742f4d1fee50fc44b6c1a943a907119287e1ac8f6deacfa09ad50fd5d54b1917d75c2ba1fa787b985d64a3cd21d4a0c6b89903b0c2c1d5dd9a8c6cf3b4089fda810f05aa7eddc1f354f455244ae66749f7f9849cae6b99bd677710bba8f5699d5fef7b41a9935be3053b4955f8baf7ee735a0c035e7273d06f3c11df69ae0fc09288d326695498c7953e3574cf7710cde600912687587ea659d82662edf77a7f7debdf1e849878801924b63335825637c79343e7ec40c1b69550c7c66e028e3ec1c60d83468b190a438c3ec237e5daf936361d52d7500cbfdb7bd451682162f783dd563eb8f95bb03d086f593c5062986ba10072f34359883c1887fd093efec0a88db817f81bf59b67287759a30c486766f9658fd704298ea562d039c68bef4ac13b49226246220f5c8f5222f3b7d1a777971aaf8dce61a834bb75d1019814ea8dab0fe1550ce0362a5ca4dcb4ca0b7b4354be960187c712663036ab529606139d8111accf46527f3a28a7a24d273df0fd43f1683473782c9d85a2b822aaf924c477edfee5caade85f90ea2fb0644670c2cffdda34b6035799fe19397a0022bc6087d19d9b4053d0ae98ddc6c50df8af5f3a4f8bd020294876671f707ffb78ff1dd0d1e7dff92418cca43a59f5c5b75428cad67dfa4615aefa9952427fe76a34090f8a7189ade62a1a562f22492bd1cc2a2b6eded990b76f1ef96a867a987c03c5c9915053021ad8eccaac0fcd5ca01887f15aceee2a36aa349002493a6c8353d0c598678ba4d242f80ebdac61b80c88c03a55971f45d204501efaaadda9ed25d79a76cf28d63d2fed88484e81ad7c010654c8e2d4af6d345d0da8e3c6f10980aa9173ace6fdcc7dd40f73e0b364288ef44a107e979ee7ec5449fd7ded663e154d28e4ece1af0cd6914052c48cc370b2bec828afc0bba74774cb839e384f3ec880c87a7bb7f6a9574bef226420e14a1ab6e5247f0935fdba48bf5486bc2eab579eda7cf91e2b042e83c0bd172a77eaec5a29d4305952ca9455dd83a30704864addfbf140d2920eaaec2f0d21ba8fb450359a3511c908543f0340b91d1ac3aa4eb70a49f3765111d194d42da009d0d0439608b17d9115b8b028b3901b125c9b62de9475a05908357a3772523a2f1466ba8aed186fb79764aebecc6026cdc3b0906516780d907bf60f0cbf7737fa404258c6d70d6a13825e7a487586518c806d258ebe6cc0feca4bd45cd5664bf00f58707a10204bb00f8c71dfa5493a6ca2afeac93e6c73c5b9ae437ba76bf134bf0eb6ac67d871ba435740910712545da1adfe5ecea97dbba1f1d1a319a7376844cb821c3e5e7b037e090f87829a75fa26f5e79bc892f3c65bb438e2ef61a1adfa1fa89b8f43b06c9758a1b32678e0c1249bae644728bafa063b2a243f0d34074e75481adad626f6d5eaa8a805698722dc4c15d80637d1521cd903d8e1077e2a12720a8907961a13a0998739b345ad9c82d0ed1467ef9077b52d8554630d86e1cab0c42db5116fe76fb62f138ab5d12299496fca145fa21d9ec27e04eeefaa519f90dbbbd4f4519e47eb14097746f1d0764307225727606c2e5a4a44f48553ae2d98f417e98d5aea34747f645f1ea1b8736328361277acef835284809d52abf2782b6f241ed58cb997befe617651499b21e4e55122370047f87345c9da559401da"}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-socket$nl_netfilter-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="ee635f9f6fb917548b72cb651999a19715d1330827ea18076817c0a59e6bde2a8e2870dc9d7c01c3c4cc64184c037082c2529520fda7b7122c9282d92f252c2e28697bc93468f12cb335692c8c0f1cfb5c9275195950796d9b500d4c61cd5798c7db7577ef9ca4c6e4c774c7cf057b04e0139e5c49e4b90bfb7fa2dc0a3c34a880e11dcc93b4d037d07968dbf33afa1a4f76aac8e2f057229257cfe890316a10e24723861c9dec549e403e88c8dfd493556bc4908107e5fd1fd5bf52a4ebc7438262ab170eb8711751c456589387a139ad08bbaff0f29e4255e1f2d3e34479116b4b7962b4db765fafb283eb5bda96ae0fa72b7cbe31d44c01d384f4c715e0a22d9a0540768c41e777678b63b9ddf1df726a192ccfa2860a6cc8fa89ac611210cd7206e3c547ec785544ff53c18ecedbe818aeeb2a68268c93805f5de6efff5a78e38dbb9548d74f442aa1ed1dc9c07c4f4b0964b67820fd6f08dadca4e920b98679ac26d6c1257ec9ab8303b3977330ad7f3d740d5511c4338021d54518bd163d87ac8c54ea48e3892cd42b0fedf41b8683993f1f583737bf9aba8f7b265f6494d48dba5bcc576f2ddf4335e2fa33d3d589f878d6873bcc28eb413efed89cad03cfd53f6bece9f264b65810ad14a35003199ee06e60e31a624834a35744805fef4855de379183d36375aee6e40bb5ac25e4d5884a76ccf7efb2f3e56ecdb5f668ed434f1f98990768eb7b09e3be2048db59db6a7bbc4c741130b752f529e189ed704997aa28da27f736578143e78f8c74b11282f05159c8f7e7fbd323892b4fbdc364bc6652a75cc6dc2b920a7bb971c0941c05e2c3a941a6ecd20d66e313afe0aeea781ecdcdab703a6ef4764581368bb981d411eec88e958a50226e91c101591e5bdaf10f19d59097986dd9b59b8069d2a8a9340cfc75760b0503513b1c1d84014dcda71085ea6c29c7479e9722bcf60aede70bd539f3c03a2ba4023993faae4a00e7147b4d1f949db2104379dd7dc0a12c1e2424f7e4720792624de2bc233221e531943e98b393cb2327dd515ecfd5991038ce8fb3152a335d3f174e1b98f4486bf22636cb6b372e3abcc543610a612d7ec4570596b8dc273d1ff5ab02a3ab8770e922edd49d3968894ad997638e91a8203a8a496a2f09ea093bc5bdf9fad8ee14c65d67b0087a7ad356adb9383bf6e84023ed3a9fa82f4bd0f2a8eb1ee60cc5d4939224aa21a8314f8bea58c28519f9dbb91ba4d839736ac41a5588554ea8919c471bfd671dd295dd12b03d6caa1a07098643189cac56eff57f5dd90f1464f68d3df10b5b41a017f823cc11b76b688d660445c80ef4f247066b31be51a835a231c3a83153039e433ede3b756a407aebbf0e3d263f809fb672f82901901a046c2e80086d0881104633a25041fd42a7cb60048acc75584e4e5a9e4e3db6f3a462546c0425fee0f56d6840394b21f022ecc042796103f456786c399461f065da376ce9b140f8fa6f3537eb3399fb06bc4967de4a050736e66d0be08e59f652d7e78758cb0d1ccea4b7d1ed477b691edfad775e3c2a5ea0bb6e5f422362b0a128393860bc87410793aa55b3b1c934f93fe7305050de98bc51608345b5cce1b0f6639185e2f5cbd06fcbec0702e415caffbb138d9874c65e05ce68019cdc8d2a6e7fc36fd8ea746289828200fa164bd0a881fc70019b4d012d72245f06e0c09819530584d213737e2f613b7cb0b2f4dc62b77642b270c0e98def66ad70fd77c35ed5c5b01d57fcd01838234cadc481faedad15628d05e27e8c164a84dd6c5f8244f59808150fb6e2811596f93670faacfe91495f423e19be1b20116b7acd46d03b23d4d5bdc78197910988b0b272deb1060655910da9256a02029784cef0bc2e27a27bfc1de2b99b020995e932ed29cbece81f55e77f23460102f6e93b63135e674b9f9d95079595cef52b2486856d12cea6fe8f6552401e2fd1ca4b5eb46ddf80b0d0523e247cd225daaa5ddc185a7358179e1bcf4d25d5ba7907b1c5fbdfeeb8138171f4497d41d9d92416bad4178412aea3b1a97892a4ae59752aeb19fd57967d148e94acbcf6337cfe0fb7c966da91f50d2128aa4de7e8f47b910506019d6efefe92401a8e927f6b0117ebdda792ca685c09c8ba0452bf0db78125bdd8e5f17aeb076ee9468295853a179695d8c70fabf9ded02304a9298780c7b78819304e2f55f2909642b7025aff4ce1e40dc0bbfa3212fcfd48214e0302b1b1438de31d35875dfe152a36b136a4e8c6cb3363f987a705c8923a08ea5ca8e326e8e1cd2e4054247be56018b36a4230345d54364b288d19ff98fbec0e3b2ec08677ea47493b8fafd05d4daf5366bdfee45aba2929e78f1a58465b624030bb39b7d26b325adf6f6a29eb1bca8c8c664f2d2f19be9b2f72be9b53ea38b0381c48796b7640bd4b0f5f39eb80264e040d27f41f123d3ec6ce646d2d690e56b7c2b3db99795c3d227aef16f47bbdb2d5fb7d751bd00158818c970706799461e86d9df4780716118ed735f33d1c8dd5410db298708d8166edebeca2bcea73f5bae540f7572df11b1530cbf144a1340a6504317aac657be7c5720862507fd0a769076f4a58a76c9681ab5069f8cd60597150af76333d7a9133981563e193b74dfcbb8154254e77589190bc157f75bb1d8055de542194df5f78a0966394a47b39c5d5bcfd7b2d8f5920fd4be080308df696ece1326528f14e9ecd9d59f5c850b2ebeb8beea188e1cba4e4acfd12e25d6cd519ed26e09e581a7a3556e94c321dcd8275a2b2408d800a3bcd07c631e9b82edb5da2cde67d45e7bcdb75b27909aff8194f6cdb61fe92ed0f190d89e9008ee900149ecb360cd273dc3e4a3c3bc93636b986c178550a8915daf381e18448526d85fe27720cfc1ac4b43f81ad85e1cbe64a6cf8cb95c723ff7b7b80995fb21ef0f3ca9c0a5e31bfe6283658763e2b8a2886f60a377b4ad37ae657b222f0e3ff3ca980f24cf1eb71d4f38a740a6d4b8d6e11f3756d4f182ef57c3b06fea963293c871352172ded5e23527061df19289f439e480d676d51e30fb46a302ca54ca7d53812b6a10b3ce98a8b32fa4928a27e90f8489e25bf494626d6fccbb2832b7a8656d3b2572104826973aaac3f371accba14b940d608aecc996f9fb03c4965e6870fb3aa000677d9a89754cca0c21ef7f45d9be419b82ec781776cabd3ff295c16b51734c7958a287a7c297153e44c40bfa43acb70376867b2e2466735580656c29d08b3f09214a5b987998ed4cbbdf88b89ce7793e94cba65d414796c2dac30cff4716018ddd206e9cee0e9ae026d08d5b2a6a53683ba6fe261174d4df1fbdd5f24036c25087ca355067e5fb99b8444e7a946746b5407fdffab287db126fa20ce7bc38be6fbd17f1ce069ddc2e91d59e421c70ba9451e0873531d62a5814d330447d0c3bacce839a882bdcc81ac75f310dda85c0f4877d36b35db9bf21689fcf0e1a8bed16339da7abeeb5fac463a797642d828d8a5995d13f92fbf2bb4f3384d10f30d626be80d4539060245e0c59eab5dccb0252e96d0f9a6e3354dd14f158ee03fcd4a41a97c654e14c5a19b50db48024106d54f7756cc5e2927843541b815d89261ac0e8f82e1e7392fb46775d3d83740bbf47d121ee1868e60c0bd84ebd3e92c9c5e112e34764049c7f276dda4491f604dc11770c01503db69d2ae915709ea5172db42552e4b20ab548917273297e6e57cc12f91917e48875fe302edf2cae5d1b980676eccb23f2dd50392f2e16b3a748e20ad1ed0fa9861023c75070e4caebed169db040531aaac93a1d00c75b9fa51083e05a0621f0035dfbd64abb29c90d0f54efbba4bc6f5a9e5093ea4f70de456160eea922e57b5c5e908107076008994ef55c603bdaf845a0fd8535337d6961e5a7ab34ef7c2b06a33a891889ad7bd146ebc6217215c2ba02c5ef04fe00ed67e648d9488d0536219c648cd15d7321bb49828dad1e0c9770a695e9f02fcccce1969695adb28f181987578194dfde38ce240c26b57bbb536532f22deb578496fcd45548cd8b0abe3ec1cc71cd3f35a615327e24c3fea3d3f742f4d1fee50fc44b6c1a943a907119287e1ac8f6deacfa09ad50fd5d54b1917d75c2ba1fa787b985d64a3cd21d4a0c6b89903b0c2c1d5dd9a8c6cf3b4089fda810f05aa7eddc1f354f455244ae66749f7f9849cae6b99bd677710bba8f5699d5fef7b41a9935be3053b4955f8baf7ee735a0c035e7273d06f3c11df69ae0fc09288d326695498c7953e3574cf7710cde600912687587ea659d82662edf77a7f7debdf1e849878801924b63335825637c79343e7ec40c1b69550c7c66e028e3ec1c60d83468b190a438c3ec237e5daf936361d52d7500cbfdb7bd451682162f783dd563eb8f95bb03d086f593c5062986ba10072f34359883c1887fd093efec0a88db817f81bf59b67287759a30c486766f9658fd704298ea562d039c68bef4ac13b49226246220f5c8f5222f3b7d1a777971aaf8dce61a834bb75d1019814ea8dab0fe1550ce0362a5ca4dcb4ca0b7b4354be960187c712663036ab529606139d8111accf46527f3a28a7a24d273df0fd43f1683473782c9d85a2b822aaf924c477edfee5caade85f90ea2fb0644670c2cffdda34b6035799fe19397a0022bc6087d19d9b4053d0ae98ddc6c50df8af5f3a4f8bd020294876671f707ffb78ff1dd0d1e7dff92418cca43a59f5c5b75428cad67dfa4615aefa9952427fe76a34090f8a7189ade62a1a562f22492bd1cc2a2b6eded990b76f1ef96a867a987c03c5c9915053021ad8eccaac0fcd5ca01887f15aceee2a36aa349002493a6c8353d0c598678ba4d242f80ebdac61b80c88c03a55971f45d204501efaaadda9ed25d79a76cf28d63d2fed88484e81ad7c010654c8e2d4af6d345d0da8e3c6f10980aa9173ace6fdcc7dd40f73e0b364288ef44a107e979ee7ec5449fd7ded663e154d28e4ece1af0cd6914052c48cc370b2bec828afc0bba74774cb839e384f3ec880c87a7bb7f6a9574bef226420e14a1ab6e5247f0935fdba48bf5486bc2eab579eda7cf91e2b042e83c0bd172a77eaec5a29d4305952ca9455dd83a30704864addfbf140d2920eaaec2f0d21ba8fb450359a3511c908543f0340b91d1ac3aa4eb70a49f3765111d194d42da009d0d0439608b17d9115b8b028b3901b125c9b62de9475a05908357a3772523a2f1466ba8aed186fb79764aebecc6026cdc3b0906516780d907bf60f0cbf7737fa404258c6d70d6a13825e7a487586518c806d258ebe6cc0feca4bd45cd5664bf00f58707a10204bb00f8c71dfa5493a6ca2afeac93e6c73c5b9ae437ba76bf134bf0eb6ac67d871ba435740910712545da1adfe5ecea97dbba1f1d1a319a7376844cb821c3e5e7b037e090f87829a75fa26f5e79bc892f3c65bb438e2ef61a1adfa1fa89b8f43b06c9758a1b32678e0c1249bae644728bafa063b2a243f0d34074e75481adad626f6d5eaa8a805698722dc4c15d80637d1521cd903d8e1077e2a12720a8907961a13a0998739b345ad9c82d0ed1467ef9077b52d8554630d86e1cab0c42db5116fe76fb62f138ab5d12299496fca145fa21d9ec27e04eeefaa519f90dbbbd4f4519e47eb14097746f1d0764307225727606c2e5a4a44f48553ae2d98f417e98d5aea34747f645f1ea1b8736328361277acef835284809d52abf2782b6f241ed58cb997befe617651499b21e4e55122370047f87345c9da559401da"}})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-socket$nl_netfilter-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-mq_notify-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mq_notify(r1, &(0x7f0000001380)={0x0, 0x34, 0x4, @thr={&(0x7f0000000100)="7a64e39f7c0d8b11dc7e92b7d3cfc89d80e1db4c0e7a283e353949ab33ad95c971661c3878272d616956a7a76c", &(0x7f0000000380)="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"}})
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-fcntl$lock-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-open-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, 0x0, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program did not crash
testing program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(0x0, 0x0, 0x2)

program did not crash
extracting C reproducer
testing compiled C program (duration=45.425009517s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
simplifying C reproducer
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KFENCE: use-after-free read in dvb_device_open
a never seen crash title: KFENCE: use-after-free read in dvb_device_open, ignore
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program did not crash
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:true UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing compiled C program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
program crashed: KASAN: slab-use-after-free Read in dvb_device_open
testing program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
testing program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
testing program (duration=45.425009517s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:false Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): timer_create-fcntl$lock-mprotect-timer_settime-mmap-syz_open_dev$dvb_frontend
detailed listing:
executing program 0:
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)

program crashed: KASAN: slab-use-after-free Read in dvb_device_open
validation run: crashed=true
reproducing took 1h35m55.26495364s
repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802ccc9018 by task syz.0.19/5841

CPU: 1 UID: 0 PID: 5841 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6ab/0x14d0 fs/open.c:947
 vfs_open+0x82/0x3f0 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2873/0x4280 fs/namei.c:4859
 do_file_open+0x20e/0x430 fs/namei.c:4888
 do_sys_openat2+0x10f/0x1e0 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd61e55d68e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffcb3645a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000555572808500 RCX: 00007fd61e55d68e
RDX: 0000000000000002 RSI: 00007ffcb3645b40 RDI: ffffffffffffff9c
RBP: 00007ffcb3645b40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007fd61e815fac R14: 00007fd61e815fa0 R15: 00007fd61e815fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2e5/0x6c0 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 dvb_register_device+0x1d6/0x1e20 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x552/0x820 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:438 [inline]
 vidtv_bridge_probe+0x44b/0xa30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:510
 platform_probe+0x106/0x1d0 drivers/base/platform.c:1439
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x20e/0x450 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __driver_attach+0x21f/0x5b0 drivers/base/dd.c:1292
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:763
 driver_register+0x1e2/0x360 drivers/base/driver.c:174
 vidtv_bridge_init+0x52/0x80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:602
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5840:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2705 [inline]
 slab_free mm/slub.c:6405 [inline]
 kfree+0x22b/0x6c0 mm/slub.c:6720
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put.part.0+0x57/0x90 drivers/media/dvb-core/dvbdev.c:629
 dvb_device_put drivers/media/dvb-core/dvbdev.c:628 [inline]
 dvb_device_open+0x2ba/0x3b0 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6ab/0x14d0 fs/open.c:947
 vfs_open+0x82/0x3f0 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2873/0x4280 fs/namei.c:4859
 do_file_open+0x20e/0x430 fs/namei.c:4888
 do_sys_openat2+0x10f/0x1e0 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802ccc9000
 which belongs to the cache kmalloc-256 of size 256
The buggy address is located 24 bytes inside of
 freed 256-byte region [ffff88802ccc9000, ffff88802ccc9100)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ccc8
head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15967092982, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1859
 prep_new_page mm/page_alloc.c:1867 [inline]
 get_page_from_freelist+0xf48/0x3530 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x299/0x2dc0 mm/page_alloc.c:5304
 alloc_slab_page mm/slub.c:3294 [inline]
 allocate_slab mm/slub.c:3408 [inline]
 new_slab+0xa2/0x650 mm/slub.c:3454
 refill_objects+0xe3/0x410 mm/slub.c:7338
 refill_sheaf mm/slub.c:2832 [inline]
 __pcs_replace_empty_main+0x376/0x680 mm/slub.c:4703
 alloc_from_pcs mm/slub.c:4801 [inline]
 slab_alloc_node mm/slub.c:4933 [inline]
 __kmalloc_cache_noprof+0x479/0x6c0 mm/slub.c:5511
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 bus_add_driver+0x92/0x5b0 drivers/base/bus.c:747
 driver_register+0x1e2/0x360 drivers/base/driver.c:174
 i2c_register_driver+0xd9/0x1f0 drivers/i2c/i2c-core-base.c:2045
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802ccc8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802ccc8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802ccc9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802ccc9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802ccc9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================

final repro crashed as (corrupted=false):
==================================================================
BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
Read of size 8 at addr ffff88802ccc9018 by task syz.0.19/5841

CPU: 1 UID: 0 PID: 5841 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
Call Trace:
 <TASK>
 __dump_stack lib/dump_stack.c:94 [inline]
 dump_stack_lvl+0x100/0x190 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0x13d/0x4b0 mm/kasan/report.c:482
 kasan_report+0xdf/0x1c0 mm/kasan/report.c:595
 dvb_device_open+0x33f/0x3b0 drivers/media/dvb-core/dvbdev.c:99
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6ab/0x14d0 fs/open.c:947
 vfs_open+0x82/0x3f0 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2873/0x4280 fs/namei.c:4859
 do_file_open+0x20e/0x430 fs/namei.c:4888
 do_sys_openat2+0x10f/0x1e0 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fd61e55d68e
Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
RSP: 002b:00007ffcb3645a68 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
RAX: ffffffffffffffda RBX: 0000555572808500 RCX: 00007fd61e55d68e
RDX: 0000000000000002 RSI: 00007ffcb3645b40 RDI: ffffffffffffff9c
RBP: 00007ffcb3645b40 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
R13: 00007fd61e815fac R14: 00007fd61e815fa0 R15: 00007fd61e815fa0
 </TASK>

Allocated by task 1:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 poison_kmalloc_redzone mm/kasan/common.c:398 [inline]
 __kasan_kmalloc+0xaa/0xb0 mm/kasan/common.c:415
 kasan_kmalloc include/linux/kasan.h:263 [inline]
 __kmalloc_cache_noprof+0x2e5/0x6c0 mm/slub.c:5515
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 dvb_register_device+0x1d6/0x1e20 drivers/media/dvb-core/dvbdev.c:472
 dvb_register_frontend+0x552/0x820 drivers/media/dvb-core/dvb_frontend.c:3051
 vidtv_bridge_dvb_init drivers/media/test-drivers/vidtv/vidtv_bridge.c:438 [inline]
 vidtv_bridge_probe+0x44b/0xa30 drivers/media/test-drivers/vidtv/vidtv_bridge.c:510
 platform_probe+0x106/0x1d0 drivers/base/platform.c:1439
 call_driver_probe drivers/base/dd.c:628 [inline]
 really_probe+0x241/0xa60 drivers/base/dd.c:706
 __driver_probe_device+0x20e/0x450 drivers/base/dd.c:868
 driver_probe_device+0x4a/0x140 drivers/base/dd.c:898
 __driver_attach+0x21f/0x5b0 drivers/base/dd.c:1292
 bus_for_each_dev+0x13e/0x1d0 drivers/base/bus.c:383
 bus_add_driver+0x305/0x5b0 drivers/base/bus.c:763
 driver_register+0x1e2/0x360 drivers/base/driver.c:174
 vidtv_bridge_init+0x52/0x80 drivers/media/test-drivers/vidtv/vidtv_bridge.c:602
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245

Freed by task 5840:
 kasan_save_stack+0x30/0x50 mm/kasan/common.c:57
 kasan_save_track+0x14/0x30 mm/kasan/common.c:78
 kasan_save_free_info+0x3b/0x70 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:253 [inline]
 __kasan_slab_free+0x5f/0x80 mm/kasan/common.c:285
 kasan_slab_free include/linux/kasan.h:235 [inline]
 slab_free_hook mm/slub.c:2705 [inline]
 slab_free mm/slub.c:6405 [inline]
 kfree+0x22b/0x6c0 mm/slub.c:6720
 dvb_free_device drivers/media/dvb-core/dvbdev.c:616 [inline]
 kref_put include/linux/kref.h:65 [inline]
 dvb_device_put.part.0+0x57/0x90 drivers/media/dvb-core/dvbdev.c:629
 dvb_device_put drivers/media/dvb-core/dvbdev.c:628 [inline]
 dvb_device_open+0x2ba/0x3b0 drivers/media/dvb-core/dvbdev.c:113
 chrdev_open+0x234/0x6a0 fs/char_dev.c:411
 do_dentry_open+0x6ab/0x14d0 fs/open.c:947
 vfs_open+0x82/0x3f0 fs/open.c:1052
 do_open fs/namei.c:4700 [inline]
 path_openat+0x2873/0x4280 fs/namei.c:4859
 do_file_open+0x20e/0x430 fs/namei.c:4888
 do_sys_openat2+0x10f/0x1e0 fs/open.c:1368
 do_sys_open fs/open.c:1374 [inline]
 __do_sys_openat fs/open.c:1390 [inline]
 __se_sys_openat fs/open.c:1385 [inline]
 __x64_sys_openat+0x12d/0x210 fs/open.c:1385
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x115/0x870 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff88802ccc9000
 which belongs to the cache kmalloc-256 of size 256
The buggy address is located 24 bytes inside of
 freed 256-byte region [ffff88802ccc9000, ffff88802ccc9100)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ccc8
head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000040 ffff88813fe02b40 dead000000000100 dead000000000122
head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 15967092982, free_ts 0
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0xfd/0x120 mm/page_alloc.c:1859
 prep_new_page mm/page_alloc.c:1867 [inline]
 get_page_from_freelist+0xf48/0x3530 mm/page_alloc.c:3946
 __alloc_frozen_pages_noprof+0x299/0x2dc0 mm/page_alloc.c:5304
 alloc_slab_page mm/slub.c:3294 [inline]
 allocate_slab mm/slub.c:3408 [inline]
 new_slab+0xa2/0x650 mm/slub.c:3454
 refill_objects+0xe3/0x410 mm/slub.c:7338
 refill_sheaf mm/slub.c:2832 [inline]
 __pcs_replace_empty_main+0x376/0x680 mm/slub.c:4703
 alloc_from_pcs mm/slub.c:4801 [inline]
 slab_alloc_node mm/slub.c:4933 [inline]
 __kmalloc_cache_noprof+0x479/0x6c0 mm/slub.c:5511
 _kmalloc_noprof include/linux/slab.h:969 [inline]
 _kzalloc_noprof include/linux/slab.h:1290 [inline]
 bus_add_driver+0x92/0x5b0 drivers/base/bus.c:747
 driver_register+0x1e2/0x360 drivers/base/driver.c:174
 i2c_register_driver+0xd9/0x1f0 drivers/i2c/i2c-core-base.c:2045
 do_one_initcall+0x11d/0x700 init/main.c:1347
 do_initcall_level init/main.c:1409 [inline]
 do_initcalls init/main.c:1425 [inline]
 do_basic_setup init/main.c:1445 [inline]
 kernel_init_freeable+0x6ea/0x7b0 init/main.c:1658
 kernel_init+0x1f/0x1e0 init/main.c:1548
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
page_owner free stack trace missing

Memory state around the buggy address:
 ffff88802ccc8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
 ffff88802ccc8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
>ffff88802ccc9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
                            ^
 ffff88802ccc9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff88802ccc9100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
==================================================================