Extracting prog: 2m7.37547004s
Minimizing prog: 37m41.555473384s
Simplifying prog options: 0s
Extracting C: 1m17.706950035s
Simplifying C: 7m2.048895207s


extracting reproducer from 37 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sendmsg$nl_route-openat$tun-socket$nl_generic-ioctl$AUTOFS_DEV_IOCTL_FAIL-socket$kcm
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000000000000000c6f80a2e", @ANYRESOCT, @ANYBLOB="0c000200000005890022c13bc20000270000080025000100000008001b00080000000a000100bbbbbbbbbb3b00000a002245ac000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004095)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0xe, 0x7}}, './file0\x00'})
socket$kcm(0x10, 0x2, 0x0)

program crashed: WARNING in split_huge_page_to_list
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sendmsg$nl_route-openat$tun-socket$nl_generic-ioctl$AUTOFS_DEV_IOCTL_FAIL
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000000000000000c6f80a2e", @ANYRESOCT, @ANYBLOB="0c000200000005890022c13bc20000270000080025000100000008001b00080000000a000100bbbbbbbbbb3b00000a002245ac000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004095)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0xe, 0x7}}, './file0\x00'})

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sendmsg$nl_route-openat$tun-socket$nl_generic
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000000000000000c6f80a2e", @ANYRESOCT, @ANYBLOB="0c000200000005890022c13bc20000270000080025000100000008001b00080000000a000100bbbbbbbbbb3b00000a002245ac000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004095)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sendmsg$nl_route-openat$tun
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000000000000000c6f80a2e", @ANYRESOCT, @ANYBLOB="0c000200000005890022c13bc20000270000080025000100000008001b00080000000a000100bbbbbbbbbb3b00000a002245ac000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004095)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB-sendmsg$nl_route
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})
sendmsg$nl_route(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="5800000000000000000000c6f80a2e", @ANYRESOCT, @ANYBLOB="0c000200000005890022c13bc20000270000080025000100000008001b00080000000a000100bbbbbbbbbb3b00000a002245ac000000"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20004095)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs-ioctl$USBDEVFS_SUBMITURB
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x5}, 0x9, 0xc, &(0x7f0000000180)="70f98de9f7f3bdee9414a1a41d46fd067d163f611aecb84ee2a7ce8f9bcb15821b1fee40ca91e5175dd1c88c1ea2adc652cf500adb3a71785eb3ae7d64835f4941b1f4a5cdf4532efe6b4843b029e498476a", 0x52, 0x4, 0xc, 0x36, 0x8, 0xffffffff, &(0x7f0000000700)="f616f8abff8f0ce2f57ea0c826d865e4b54925bb6ce86075bc4258200d8931df43a776a990bb070340343f7d7728660e16fffd54bdd82715a06c26b586091a4ceedb1e0af17cd931321e3aac5ab751c39c74d60fb51ae9f95e9110e03cd1312ee3dc5cb7584dfb84f9098abe2f6ac7a00448d2f9dbb09ec2029af87c819fd7a4912b7c004184d66d1468092d6b22290787b3278842ccc01734dc90ad6a98adcbe665", [{0x0, 0x0, 0x7f}, {0x6, 0xffffffff, 0x1}, {0xa0b, 0x6, 0x6}, {0x8, 0x7, 0x7}, {0xfffffffc, 0x3, 0x7}, {0x104, 0x2, 0x1000000}, {0x5, 0x80000000, 0x7}, {0x2, 0x4}, {0x9, 0x1000}, {0x9, 0x1, 0x6}, {0x0, 0xfa0, 0x3}, {0xaa7b, 0x2, 0x1000}, {0x5, 0xb174, 0x9}, {0x7, 0x3ff, 0x8}, {0xfd0, 0x100}, {0x5, 0xa58b, 0x1}, {0x9f4f, 0x7d, 0x7}, {0x8, 0x8ade}, {0x10000, 0x10, 0x204}, {0x584, 0xabfa, 0xfc4}, {0x7fffffff, 0x8, 0x5}, {0x0, 0x3, 0x7}, {0x101, 0x6fec, 0x8}, {0x9, 0x5, 0xd83}, {0x3, 0x2, 0x8}, {0x6, 0x5, 0x10}, {0x8, 0x400, 0xfff}, {0x3, 0x5, 0x80000001}, {0x0, 0x7}, {0x5, 0x3, 0x9}, {0x7ff, 0x80000001, 0x8}, {0x6, 0x4, 0x1}, {0x4, 0x9, 0x383}, {0xe0f, 0x0, 0x1000}, {0x81, 0x3a0, 0x2}, {0x5, 0x3, 0x8f}, {0x0, 0xfe, 0x3}, {0xe, 0x16f64ef5, 0x6}, {0xd3, 0x1, 0x10001}, {0xe37, 0xfff, 0x8}, {0x6, 0x2, 0x3}, {0x4, 0x40, 0x1}, {0x1000, 0xf4}, {0xe, 0x8001}, {0x9, 0x9, 0x6}, {0x0, 0x7, 0xfffffffb}, {0x6, 0x5, 0x8be}, {0xfffffd0d, 0x1cd6, 0x8}, {0x6, 0x3}, {0xff, 0x2, 0xf3df}, {0xffff, 0xf, 0xe}, {0x1, 0x12, 0xf}, {0x2, 0x6, 0x7f}, {0x9, 0x9, 0x6}]})

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route-syz_open_dev$usbfs
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x402301)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF-socket$nl_route
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
socket$nl_route(0x10, 0x3, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT-ioctl$TUNSETIFF
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m-ioctl$vim2m_VIDIOC_S_FMT
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000002c0)={0x1, @raw_data="a73fb05f3771f0834e56313688b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun-syz_open_dev$vim2m
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f00000004c0), 0x53a0, 0x2)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD-openat$tun
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY-bpf$BPF_PROG_WITH_BTFID_LOAD
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x5, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="660a0000000000007910a80000000000180000000002000000000000070000019500000000000000bac184"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD-setsockopt$ALG_SET_KEY
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD-bpf$BPF_BTF_LOAD
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise-bpf$PROG_LOAD
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-preadv
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

program did not crash
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-openat$hwrng-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-sched_setaffinity-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-sched_setscheduler-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000600)=0x6)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-prlimit64-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-process_vm_writev-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{0x0}], 0x1, 0x0)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-ioctl$UFFDIO_REGISTER-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-userfaultfd-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
userfaultfd(0x80001)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-mremap-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-madvise-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program did not crash
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-openat$ubi_ctrl-mremap-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program did not crash
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-truncate-madvise-mremap-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
truncate(&(0x7f0000000040)='./file2\x00', 0x1c9e)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-madvise-mremap-madvise
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a0702839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
testing program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
detailed listing:
executing program 0:
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000693000/0x2000)=nil, 0x2000, 0x64)

program crashed: WARNING in split_huge_page_to_list
extracting C reproducer
testing compiled C program (duration=53.154625713s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
simplifying C reproducer
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
testing compiled C program (duration=53.154625713s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise-mremap-madvise
program crashed: WARNING in split_huge_page_to_list
reproducing took 48m8.686819346s
repro crashed as (corrupted=false):
raw: 05ffc00000010801 0000000000000000 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000
page dumped because: VM_WARN_ON_ONCE_PAGE(is_hzp)
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4018 at mm/huge_memory.c:2624 split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
Modules linked in:
CPU: 1 PID: 4018 Comm: syz-executor294 Not tainted 5.15.173-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
lr : split_huge_page_to_list+0x890/0x2d88 mm/huge_memory.c:2624
sp : ffff80001ff17460
x29: ffff80001ff17610 x28: 1fffff80006e9000 x27: 0000000000000000
x26: 0000000000000000 x25: ffff80001ff17580 x24: ffff0001fec70d80
x23: dfff800000000000 x22: 05ffc00000010801 x21: fffffc0003748000
x20: ffff800016fbd000 x19: 00000000fffffff0 x18: ffff80001ff16860
x17: 0000000000000000 x16: ffff800011b4c108 x15: 000000000000b62b
x14: 0000000096546986 x13: 18f4df38587b0a4f x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : d004716f2b476700
x8 : 0000000000000001 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80001783bd08 x4 : 0000000000000000 x3 : ffff80000aa0ed5c
x2 : ffff0001b4198d10 x1 : 0000000100000000 x0 : 0000000000000031
Call trace:
 split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
 split_huge_page include/linux/huge_mm.h:192 [inline]
 try_to_split_thp_page+0xf0/0x1d4 mm/memory-failure.c:1454
 memory_failure+0x714/0x1f00 mm/memory-failure.c:1821
 madvise_inject_error mm/madvise.c:973 [inline]
 do_madvise+0x514/0x2c70 mm/madvise.c:1166
 __do_sys_madvise mm/madvise.c:1233 [inline]
 __se_sys_madvise mm/madvise.c:1231 [inline]
 __arm64_sys_madvise+0xa4/0xc0 mm/madvise.c:1231
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 13346
hardirqs last  enabled at (13345): [<ffff800011c0fa6c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1338 [inline]
hardirqs last  enabled at (13345): [<ffff800011c0fa6c>] __schedule+0x1024/0x1e48 kernel/sched/core.c:6379
hardirqs last disabled at (13346): [<ffff800011b47794>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (13330): [<ffff8000081b691c>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (13330): [<ffff8000081b691c>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (13325): [<ffff8000081b6fb4>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 3981b8f5122a7959 ]---
Memory Failure: 0x11d293: thp split failed
Memory failure: 0x11d293: recovery action for unsplit thp: Ignored

final repro crashed as (corrupted=false):
raw: 05ffc00000010801 0000000000000000 dead000000000122 0000000000000000
raw: 0000000000000000 0000000000000000 00000002ffffffff 0000000000000000
page dumped because: VM_WARN_ON_ONCE_PAGE(is_hzp)
------------[ cut here ]------------
WARNING: CPU: 1 PID: 4018 at mm/huge_memory.c:2624 split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
Modules linked in:
CPU: 1 PID: 4018 Comm: syz-executor294 Not tainted 5.15.173-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
lr : split_huge_page_to_list+0x890/0x2d88 mm/huge_memory.c:2624
sp : ffff80001ff17460
x29: ffff80001ff17610 x28: 1fffff80006e9000 x27: 0000000000000000
x26: 0000000000000000 x25: ffff80001ff17580 x24: ffff0001fec70d80
x23: dfff800000000000 x22: 05ffc00000010801 x21: fffffc0003748000
x20: ffff800016fbd000 x19: 00000000fffffff0 x18: ffff80001ff16860
x17: 0000000000000000 x16: ffff800011b4c108 x15: 000000000000b62b
x14: 0000000096546986 x13: 18f4df38587b0a4f x12: 0000000000000001
x11: 0000000000000000 x10: 0000000000000000 x9 : d004716f2b476700
x8 : 0000000000000001 x7 : 0000000000000000 x6 : 0000000000000000
x5 : ffff80001783bd08 x4 : 0000000000000000 x3 : ffff80000aa0ed5c
x2 : ffff0001b4198d10 x1 : 0000000100000000 x0 : 0000000000000031
Call trace:
 split_huge_page_to_list+0x89c/0x2d88 mm/huge_memory.c:2624
 split_huge_page include/linux/huge_mm.h:192 [inline]
 try_to_split_thp_page+0xf0/0x1d4 mm/memory-failure.c:1454
 memory_failure+0x714/0x1f00 mm/memory-failure.c:1821
 madvise_inject_error mm/madvise.c:973 [inline]
 do_madvise+0x514/0x2c70 mm/madvise.c:1166
 __do_sys_madvise mm/madvise.c:1233 [inline]
 __se_sys_madvise mm/madvise.c:1231 [inline]
 __arm64_sys_madvise+0xa4/0xc0 mm/madvise.c:1231
 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline]
 invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52
 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142
 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181
 el0_svc+0x7c/0x1f0 arch/arm64/kernel/entry-common.c:608
 el0t_64_sync_handler+0x84/0xe4 arch/arm64/kernel/entry-common.c:626
 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584
irq event stamp: 13346
hardirqs last  enabled at (13345): [<ffff800011c0fa6c>] raw_spin_rq_unlock_irq kernel/sched/sched.h:1338 [inline]
hardirqs last  enabled at (13345): [<ffff800011c0fa6c>] __schedule+0x1024/0x1e48 kernel/sched/core.c:6379
hardirqs last disabled at (13346): [<ffff800011b47794>] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:396
softirqs last  enabled at (13330): [<ffff8000081b691c>] softirq_handle_end kernel/softirq.c:401 [inline]
softirqs last  enabled at (13330): [<ffff8000081b691c>] handle_softirqs+0xb88/0xdbc kernel/softirq.c:586
softirqs last disabled at (13325): [<ffff8000081b6fb4>] __do_softirq kernel/softirq.c:592 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] do_softirq_own_stack include/asm-generic/softirq_stack.h:10 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] invoke_softirq kernel/softirq.c:439 [inline]
softirqs last disabled at (13325): [<ffff8000081b6fb4>] __irq_exit_rcu+0x268/0x4d8 kernel/softirq.c:641
---[ end trace 3981b8f5122a7959 ]---
Memory Failure: 0x11d293: thp split failed
Memory failure: 0x11d293: recovery action for unsplit thp: Ignored