KASAN: slab-use-after-free Read in hci_cmd_work

==================================================================
BUG: KASAN: slab-use-after-free in hci_cmd_work+0x5d0/0x7b0 net/bluetooth/hci_core.c:4174
Read of size 2 at addr ffff888075654678 by task kworker/u9:1/5149

CPU: 0 UID: 0 PID: 5149 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
Workqueue: hci0 hci_cmd_work
Call Trace:
 <TASK>
 dump_stack_lvl+0x189/0x250 lib/dump_stack.c:120
 print_address_description mm/kasan/report.c:378 [inline]
 print_report+0xca/0x240 mm/kasan/report.c:482
 kasan_report+0x118/0x150 mm/kasan/report.c:595
 hci_cmd_work+0x5d0/0x7b0 net/bluetooth/hci_core.c:4174
 process_one_work+0x93a/0x15e0 kernel/workqueue.c:3261
 process_scheduled_works kernel/workqueue.c:3344 [inline]
 worker_thread+0x9b0/0xee0 kernel/workqueue.c:3425
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
 </TASK>

Allocated by task 5837:
 kasan_save_stack mm/kasan/common.c:56 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:77
 unpoison_slab_object mm/kasan/common.c:339 [inline]
 __kasan_slab_alloc+0x6c/0x80 mm/kasan/common.c:365
 kasan_slab_alloc include/linux/kasan.h:252 [inline]
 slab_post_alloc_hook mm/slub.c:4948 [inline]
 slab_alloc_node mm/slub.c:5258 [inline]
 kmem_cache_alloc_node_noprof+0x43c/0x710 mm/slub.c:5310
 __alloc_skb+0x112/0x2d0 net/core/skbuff.c:664
 alloc_skb include/linux/skbuff.h:1383 [inline]
 bt_skb_alloc include/net/bluetooth/bluetooth.h:510 [inline]
 hci_cmd_sync_alloc+0x3d/0x3b0 net/bluetooth/hci_sync.c:58
 hci_cmd_sync_add net/bluetooth/hci_sync.c:99 [inline]
 __hci_cmd_sync_sk+0x1a7/0xc70 net/bluetooth/hci_sync.c:168
 __hci_cmd_sync_status_sk net/bluetooth/hci_sync.c:263 [inline]
 __hci_cmd_sync_status net/bluetooth/hci_sync.c:287 [inline]
 hci_cmd_sync_status+0x4d/0x150 net/bluetooth/hci_sync.c:298
 hci_dev_cmd+0x431/0x7d0 net/bluetooth/hci_core.c:735
 sock_do_ioctl+0xdc/0x300 net/socket.c:1258
 sock_ioctl+0x576/0x790 net/socket.c:1379
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Freed by task 5839:
 kasan_save_stack mm/kasan/common.c:56 [inline]
 kasan_save_track+0x3e/0x80 mm/kasan/common.c:77
 kasan_save_free_info+0x46/0x50 mm/kasan/generic.c:584
 poison_slab_object mm/kasan/common.c:252 [inline]
 __kasan_slab_free+0x5c/0x80 mm/kasan/common.c:284
 kasan_slab_free include/linux/kasan.h:234 [inline]
 slab_free_hook mm/slub.c:2540 [inline]
 slab_free mm/slub.c:6663 [inline]
 kmem_cache_free+0x197/0x640 mm/slub.c:6774
 kfree_skb_reason include/linux/skbuff.h:1322 [inline]
 kfree_skb include/linux/skbuff.h:1331 [inline]
 vhci_read+0x49a/0x5b0 drivers/bluetooth/hci_vhci.c:593
 vfs_read+0x200/0xa30 fs/read_write.c:570
 ksys_read+0x145/0x250 fs/read_write.c:715
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

The buggy address belongs to the object at ffff888075654640
 which belongs to the cache skbuff_head_cache of size 240
The buggy address is located 56 bytes inside of
 freed 240-byte region [ffff888075654640, ffff888075654730)

The buggy address belongs to the physical page:
page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75654
flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
page_type: f5(slab)
raw: 00fff00000000000 ffff888140acba00 dead000000000122 0000000000000000
raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
page dumped because: kasan: bad access detected
page_owner tracks the page as allocated
page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 53, tgid 53 (kworker/u9:0), ts 82111012133, free_ts 81706319901
 set_page_owner include/linux/page_owner.h:32 [inline]
 post_alloc_hook+0x240/0x2a0 mm/page_alloc.c:1851
 prep_new_page mm/page_alloc.c:1859 [inline]
 get_page_from_freelist+0x2365/0x2440 mm/page_alloc.c:3920
 __alloc_frozen_pages_noprof+0x181/0x370 mm/page_alloc.c:5215
 alloc_pages_mpol+0x232/0x4a0 mm/mempolicy.c:2486
 alloc_slab_page mm/slub.c:3075 [inline]
 allocate_slab+0x86/0x3b0 mm/slub.c:3248
 new_slab mm/slub.c:3302 [inline]
 ___slab_alloc+0xf56/0x1990 mm/slub.c:4651
 __slab_alloc+0x65/0x100 mm/slub.c:4774
 __slab_alloc_node mm/slub.c:4850 [inline]
 slab_alloc_node mm/slub.c:5246 [inline]
 kmem_cache_alloc_noprof+0x40f/0x700 mm/slub.c:5265
 skb_clone+0x212/0x3a0 net/core/skbuff.c:2069
 hci_event_packet+0x3f4/0x1260 net/bluetooth/hci_event.c:7693
 hci_rx_work+0x45d/0xfc0 net/bluetooth/hci_core.c:4099
 process_one_work+0x93a/0x15e0 kernel/workqueue.c:3261
 process_scheduled_works kernel/workqueue.c:3344 [inline]
 worker_thread+0x9b0/0xee0 kernel/workqueue.c:3425
 kthread+0x711/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x599/0xb30 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:246
page last free pid 5824 tgid 5824 stack trace:
 reset_page_owner include/linux/page_owner.h:25 [inline]
 free_pages_prepare mm/page_alloc.c:1395 [inline]
 __free_frozen_pages+0xbc8/0xd30 mm/page_alloc.c:2948
 vfree+0x25a/0x400 mm/vmalloc.c:3466
 kcov_put kernel/kcov.c:439 [inline]
 kcov_close+0x28/0x50 kernel/kcov.c:535
 __fput+0x44c/0xa70 fs/file_table.c:468
 fput_close_sync+0x113/0x220 fs/file_table.c:573
 __do_sys_close fs/open.c:1584 [inline]
 __se_sys_close fs/open.c:1569 [inline]
 __x64_sys_close+0x7f/0x110 fs/open.c:1569
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0xfa/0xfa0 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f

Memory state around the buggy address:
 ffff888075654500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888075654580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
>ffff888075654600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
                                                                ^
 ffff888075654680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
 ffff888075654700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
==================================================================


Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
2025/11/17 14:53:25 ignoring optional flag "type"="gce"
2025/11/17 14:53:25 parsed 1 programs
[   81.747689][ T5829] cgroup: Unknown subsys name 'net'
[   81.863679][ T5829] cgroup: Unknown subsys name 'cpuset'
[   81.875069][ T5829] cgroup: Unknown subsys name 'rlimit'
2025/11/17 14:53:25 executed programs: 0
[   82.065204][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   82.073872][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   82.082294][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   82.091797][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   82.102487][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   82.113481][ T5149] ==================================================================
[   82.122443][ T5149] BUG: KASAN: slab-use-after-free in hci_cmd_work+0x5d0/0x7b0
[   82.130963][ T5149] Read of size 2 at addr ffff888075654678 by task kworker/u9:1/5149
[   82.139298][ T5149] 
[   82.141645][ T5149] CPU: 0 UID: 0 PID: 5149 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   82.141661][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   82.141670][ T5149] Workqueue: hci0 hci_cmd_work
[   82.141699][ T5149] Call Trace:
[   82.141707][ T5149]  <TASK>
[   82.141714][ T5149]  dump_stack_lvl+0x189/0x250
[   82.141734][ T5149]  ? __virt_addr_valid+0x1c8/0x5c0
[   82.141747][ T5149]  ? rcu_is_watching+0x15/0xb0
[   82.141759][ T5149]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.141775][ T5149]  ? rcu_is_watching+0x15/0xb0
[   82.141786][ T5149]  ? lock_release+0x4b/0x3d0
[   82.141801][ T5149]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[   82.141817][ T5149]  ? __virt_addr_valid+0x1c8/0x5c0
[   82.141829][ T5149]  ? __virt_addr_valid+0x4a5/0x5c0
[   82.141841][ T5149]  print_report+0xca/0x240
[   82.141857][ T5149]  ? hci_cmd_work+0x5d0/0x7b0
[   82.141873][ T5149]  kasan_report+0x118/0x150
[   82.141892][ T5149]  ? hci_cmd_work+0x5d0/0x7b0
[   82.141927][ T5149]  hci_cmd_work+0x5d0/0x7b0
[   82.141945][ T5149]  ? process_one_work+0x868/0x15e0
[   82.141960][ T5149]  process_one_work+0x93a/0x15e0
[   82.141974][ T5149]  ? __lock_acquire+0xab9/0xd20
[   82.141995][ T5149]  ? __pfx_process_one_work+0x10/0x10
[   82.142012][ T5149]  ? assign_work+0x3a1/0x410
[   82.142027][ T5149]  worker_thread+0x9b0/0xee0
[   82.142055][ T5149]  kthread+0x711/0x8a0
[   82.142068][ T5149]  ? __pfx_worker_thread+0x10/0x10
[   82.142083][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.142094][ T5149]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.142108][ T5149]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.142124][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.142135][ T5149]  ret_from_fork+0x599/0xb30
[   82.142151][ T5149]  ? __pfx_ret_from_fork+0x10/0x10
[   82.142169][ T5149]  ? __switch_to_asm+0x39/0x70
[   82.142180][ T5149]  ? __switch_to_asm+0x33/0x70
[   82.142191][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.142203][ T5149]  ret_from_fork_asm+0x1a/0x30
[   82.142220][ T5149]  </TASK>
[   82.142224][ T5149] 
[   82.343355][ T5149] Allocated by task 5837:
[   82.347840][ T5149]  kasan_save_track+0x3e/0x80
[   82.352594][ T5149]  __kasan_slab_alloc+0x6c/0x80
[   82.357534][ T5149]  kmem_cache_alloc_node_noprof+0x43c/0x710
[   82.363586][ T5149]  __alloc_skb+0x112/0x2d0
[   82.367997][ T5149]  hci_cmd_sync_alloc+0x3d/0x3b0
[   82.373006][ T5149]  __hci_cmd_sync_sk+0x1a7/0xc70
[   82.378048][ T5149]  hci_cmd_sync_status+0x4d/0x150
[   82.383168][ T5149]  hci_dev_cmd+0x431/0x7d0
[   82.387605][ T5149]  sock_do_ioctl+0xdc/0x300
[   82.392109][ T5149]  sock_ioctl+0x576/0x790
[   82.396635][ T5149]  __se_sys_ioctl+0xfc/0x170
[   82.401406][ T5149]  do_syscall_64+0xfa/0xfa0
[   82.405990][ T5149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.412218][ T5149] 
[   82.414524][ T5149] Freed by task 5839:
[   82.418668][ T5149]  kasan_save_track+0x3e/0x80
[   82.423695][ T5149]  kasan_save_free_info+0x46/0x50
[   82.428888][ T5149]  __kasan_slab_free+0x5c/0x80
[   82.433736][ T5149]  kmem_cache_free+0x197/0x640
[   82.438660][ T5149]  vhci_read+0x49a/0x5b0
[   82.443171][ T5149]  vfs_read+0x200/0xa30
[   82.447345][ T5149]  ksys_read+0x145/0x250
[   82.451784][ T5149]  do_syscall_64+0xfa/0xfa0
[   82.456479][ T5149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.462549][ T5149] 
[   82.464859][ T5149] The buggy address belongs to the object at ffff888075654640
[   82.464859][ T5149]  which belongs to the cache skbuff_head_cache of size 240
[   82.480302][ T5149] The buggy address is located 56 bytes inside of
[   82.480302][ T5149]  freed 240-byte region [ffff888075654640, ffff888075654730)
[   82.494611][ T5149] 
[   82.496934][ T5149] The buggy address belongs to the physical page:
[   82.503529][ T5149] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75654
[   82.512663][ T5149] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[   82.520305][ T5149] page_type: f5(slab)
[   82.524472][ T5149] raw: 00fff00000000000 ffff888140acba00 dead000000000122 0000000000000000
[   82.533497][ T5149] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000
[   82.542148][ T5149] page dumped because: kasan: bad access detected
[   82.548783][ T5149] page_owner tracks the page as allocated
[   82.554522][ T5149] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 53, tgid 53 (kworker/u9:0), ts 82111012133, free_ts 81706319901
[   82.573800][ T5149]  post_alloc_hook+0x240/0x2a0
[   82.578729][ T5149]  get_page_from_freelist+0x2365/0x2440
[   82.584396][ T5149]  __alloc_frozen_pages_noprof+0x181/0x370
[   82.590724][ T5149]  alloc_pages_mpol+0x232/0x4a0
[   82.597421][ T5149]  allocate_slab+0x86/0x3b0
[   82.602013][ T5149]  ___slab_alloc+0xf56/0x1990
[   82.607226][ T5149]  __slab_alloc+0x65/0x100
[   82.611773][ T5149]  kmem_cache_alloc_noprof+0x40f/0x700
[   82.617310][ T5149]  skb_clone+0x212/0x3a0
[   82.621722][ T5149]  hci_event_packet+0x3f4/0x1260
[   82.626751][ T5149]  hci_rx_work+0x45d/0xfc0
[   82.631185][ T5149]  process_one_work+0x93a/0x15e0
[   82.636309][ T5149]  worker_thread+0x9b0/0xee0
[   82.640889][ T5149]  kthread+0x711/0x8a0
[   82.645030][ T5149]  ret_from_fork+0x599/0xb30
[   82.649908][ T5149]  ret_from_fork_asm+0x1a/0x30
[   82.654832][ T5149] page last free pid 5824 tgid 5824 stack trace:
[   82.661315][ T5149]  __free_frozen_pages+0xbc8/0xd30
[   82.666586][ T5149]  vfree+0x25a/0x400
[   82.670634][ T5149]  kcov_close+0x28/0x50
[   82.674945][ T5149]  __fput+0x44c/0xa70
[   82.678917][ T5149]  fput_close_sync+0x113/0x220
[   82.684039][ T5149]  __x64_sys_close+0x7f/0x110
[   82.688817][ T5149]  do_syscall_64+0xfa/0xfa0
[   82.693448][ T5149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   82.699707][ T5149] 
[   82.702623][ T5149] Memory state around the buggy address:
[   82.708502][ T5149]  ffff888075654500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.716634][ T5149]  ffff888075654580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc
[   82.724773][ T5149] >ffff888075654600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   82.733433][ T5149]                                                                 ^
[   82.742206][ T5149]  ffff888075654680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   82.750604][ T5149]  ffff888075654700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc
[   82.758992][ T5149] ==================================================================
[   82.767983][ T5149] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   82.775729][ T5149] CPU: 0 UID: 0 PID: 5149 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) 
[   82.785875][ T5149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   82.796240][ T5149] Workqueue: hci0 hci_cmd_work
[   82.801128][ T5149] Call Trace:
[   82.804501][ T5149]  <TASK>
[   82.807679][ T5149]  dump_stack_lvl+0x99/0x250
[   82.812521][ T5149]  ? __asan_memcpy+0x40/0x70
[   82.817358][ T5149]  ? __pfx_dump_stack_lvl+0x10/0x10
[   82.822718][ T5149]  ? __pfx__printk+0x10/0x10
[   82.827294][ T5149]  vpanic+0x237/0x6d0
[   82.831360][ T5149]  ? __pfx_vpanic+0x10/0x10
[   82.836357][ T5149]  ? preempt_schedule+0xae/0xc0
[   82.841746][ T5149]  ? __pfx_preempt_schedule+0x10/0x10
[   82.847119][ T5149]  panic+0xb9/0xc0
[   82.851359][ T5149]  ? __pfx_panic+0x10/0x10
[   82.855883][ T5149]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   82.861892][ T5149]  ? is_module_address+0x17/0xf0
[   82.866938][ T5149]  ? hci_cmd_work+0x5d0/0x7b0
[   82.871707][ T5149]  check_panic_on_warn+0x89/0xb0
[   82.877166][ T5149]  ? hci_cmd_work+0x5d0/0x7b0
[   82.882331][ T5149]  end_report+0x6f/0x160
[   82.886739][ T5149]  kasan_report+0x129/0x150
[   82.891231][ T5149]  ? hci_cmd_work+0x5d0/0x7b0
[   82.896089][ T5149]  hci_cmd_work+0x5d0/0x7b0
[   82.900821][ T5149]  ? process_one_work+0x868/0x15e0
[   82.906290][ T5149]  process_one_work+0x93a/0x15e0
[   82.911871][ T5149]  ? __lock_acquire+0xab9/0xd20
[   82.917255][ T5149]  ? __pfx_process_one_work+0x10/0x10
[   82.922960][ T5149]  ? assign_work+0x3a1/0x410
[   82.927663][ T5149]  worker_thread+0x9b0/0xee0
[   82.932645][ T5149]  kthread+0x711/0x8a0
[   82.937779][ T5149]  ? __pfx_worker_thread+0x10/0x10
[   82.943687][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.948557][ T5149]  ? _raw_spin_unlock_irq+0x23/0x50
[   82.954167][ T5149]  ? lockdep_hardirqs_on+0x9c/0x150
[   82.959729][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.965014][ T5149]  ret_from_fork+0x599/0xb30
[   82.970481][ T5149]  ? __pfx_ret_from_fork+0x10/0x10
[   82.976490][ T5149]  ? __switch_to_asm+0x39/0x70
[   82.981613][ T5149]  ? __switch_to_asm+0x33/0x70
[   82.986770][ T5149]  ? __pfx_kthread+0x10/0x10
[   82.991819][ T5149]  ret_from_fork_asm+0x1a/0x30
[   82.996779][ T5149]  </TASK>
[   83.000511][ T5149] Kernel Offset: disabled
[   83.005322][ T5149] Rebooting in 86400 seconds..


syzkaller build log:
go env (err=<nil>)
AR='ar'
CC='gcc'
CGO_CFLAGS='-O2 -g'
CGO_CPPFLAGS=''
CGO_CXXFLAGS='-O2 -g'
CGO_ENABLED='1'
CGO_FFLAGS='-O2 -g'
CGO_LDFLAGS='-O2 -g'
CXX='g++'
GCCGO='gccgo'
GO111MODULE='auto'
GOAMD64='v1'
GOARCH='amd64'
GOAUTH='netrc'
GOBIN=''
GOCACHE='/syzkaller/.cache/go-build'
GOCACHEPROG=''
GODEBUG=''
GOENV='/syzkaller/.config/go/env'
GOEXE=''
GOEXPERIMENT=''
GOFIPS140='off'
GOFLAGS=''
GOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build3856684081=/tmp/go-build -gno-record-gcc-switches'
GOHOSTARCH='amd64'
GOHOSTOS='linux'
GOINSECURE=''
GOMOD='/syzkaller/jobs-2/linux/gopath/src/github.com/google/syzkaller/go.mod'
GOMODCACHE='/syzkaller/jobs-2/linux/gopath/pkg/mod'
GONOPROXY=''
GONOSUMDB=''
GOOS='linux'
GOPATH='/syzkaller/jobs-2/linux/gopath'
GOPRIVATE=''
GOPROXY='https://proxy.golang.org,direct'
GOROOT='/usr/local/go'
GOSUMDB='sum.golang.org'
GOTELEMETRY='local'
GOTELEMETRYDIR='/syzkaller/.config/go/telemetry'
GOTMPDIR=''
GOTOOLCHAIN='auto'
GOTOOLDIR='/usr/local/go/pkg/tool/linux_amd64'
GOVCS=''
GOVERSION='go1.24.4'
GOWORK=''
PKG_CONFIG='pkg-config'

git status (err=<nil>)
HEAD detached at 62df2017e
nothing to commit, working tree clean


tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
Makefile:32: run command via tools/syz-env for best compatibility, see:
Makefile:33: https://github.com/google/syzkaller/blob/master/docs/contributing.md#using-syz-env
go list -f '{{.Stale}}' ./sys/syz-sysgen | grep -q false || go install ./sys/syz-sysgen
make .descriptions
tput: No value for $TERM and no -T specified
tput: No value for $TERM and no -T specified
bin/syz-sysgen
touch .descriptions
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=62df2017e3b1edd786a4c737bd4ccba2b4581d88 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230428-154058'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-fuzzer github.com/google/syzkaller/syz-fuzzer
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=62df2017e3b1edd786a4c737bd4ccba2b4581d88 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230428-154058'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-execprog github.com/google/syzkaller/tools/syz-execprog
GOOS=linux GOARCH=amd64 go build "-ldflags=-s -w -X github.com/google/syzkaller/prog.GitRevision=62df2017e3b1edd786a4c737bd4ccba2b4581d88 -X 'github.com/google/syzkaller/prog.gitRevisionDate=20230428-154058'" "-tags=syz_target syz_os_linux syz_arch_amd64 " -o ./bin/linux_amd64/syz-stress github.com/google/syzkaller/tools/syz-stress
mkdir -p ./bin/linux_amd64
gcc -o ./bin/linux_amd64/syz-executor executor/executor.cc \
	-m64 -O2 -pthread -Wall -Werror -Wparentheses -Wunused-const-variable -Wframe-larger-than=16384 -Wno-stringop-overflow -Wno-array-bounds -Wno-format-overflow -Wno-unused-but-set-variable -Wno-unused-command-line-argument -static-pie -fpermissive -w -DGOOS_linux=1 -DGOARCH_amd64=1 \
	-DHOSTGOOS_linux=1 -DGIT_REVISION=\"62df2017e3b1edd786a4c737bd4ccba2b4581d88\"