Extracting prog: 6h57m3.055031773s
Minimizing prog: 55m32.281025019s
Simplifying prog options: 0s
Extracting C: 36.476653338s
Simplifying C: 14m21.691213089s


24 programs, timeouts [6m0s]
extracting reproducer from 24 programs
testing a last program of every proc
single: executing 4 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-syz_open_procfs$namespace-syz_genetlink_get_family_id$auto_nl80211-socket$nl_generic-sendmsg$auto_NL80211_CMD_TRIGGER_SCAN-sendmsg$auto_NL80211_CMD_ADD_TX_TS-mbind$auto-clone$auto-mmap$auto-madvise$auto-mmap$auto-syz_open_procfs$namespace-syz_genetlink_get_family_id$auto_nl80211-socket$nl_generic-sendmsg$auto_NL80211_CMD_TRIGGER_SCAN-sendmsg$auto_NL80211_CMD_ADD_TX_TS-mbind$auto-clone$auto-mmap$auto-madvise$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mmap$auto-madvise$auto-madvise$auto-socket-close_range$auto-madvise$auto-mremap$auto
detailed listing:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-socketpair$auto-socket-getsockopt$auto
detailed listing:
executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socketpair$auto(0x0, 0x9, 0xb4, &(0x7f0000000040)=0x6)
socket(0x2b, 0x1, 0x1)
getsockopt$auto(0x4, 0x11e, 0x7, 0xfffffffffffffffc, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$auto
detailed listing:
executing program 0:
bpf$auto(0x0, 0x0, 0xaf1)

program did not crash
single: failed to extract reproducer
bisect: bisecting 24 programs with base timeout 6m0s
testing program (duration=6m6s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [11, 24, 2, 12, 4, 1, 3, 2, 4, 14, 6, 1, 4, 2, 3, 2, 6, 7, 1, 14, 16, 9, 1, 20]
detailed listing:
executing program 1:
stat$auto(&(0x7f0000000140)='..\x00\x00', 0x0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0xa)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
nanosleep$auto(0x0, 0x0)
mmap$auto(0xb, 0x1000, 0x3ff, 0x19, 0x4, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2b, 0x1, 0x1)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
newfstatat$auto(0x800, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x6, 0x75, 0x1, 0xa, 0x5, 0x1000, 0x0, 0x0, 0x80000000, 0x7, 0xfffffffffffffac0, 0x8, 0x6, 0x0, 0x10000, 0x5, 0x1, [0x6, 0x3, 0xfee1]}, 0x7)
getsockopt$auto(0x4, 0x6000000000000, 0x80, 0xfffffffffffffffd, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x2, 0x5, 0x0)
open(&(0x7f0000000000)='./file1\x00', 0x12677d, 0x37e5c9853cd1b83b)
close_range$auto(0x7, 0xfffffffffffffff8, 0x200000002)
fsync$auto(0x3)
setsockopt$auto(0x4, 0x0, 0x20, 0xfffffffffffffffe, 0x0)
r1 = socket(0x2, 0x5, 0x0)
r2 = socket(0x1, 0x2, 0x0)
clone$auto(0x0, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r3 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff)
syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
sendmsg$auto_NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x200}, @NL80211_ATTR_MBSSID_CONFIG={0x9, 0x132, "f576f900c6"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000050}, 0x4004080)
r4 = syz_genetlink_get_family_id$auto_NCSI(&(0x7f0000000100), r1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r5=>0x0})
sendmsg$auto_NCSI_CMD_SET_INTERFACE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fedb00000000020000020100", @ANYRES32=r5, @ANYBLOB="08000800910f0000"], 0x24}}, 0x20008001)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
semctl$auto(0x1ff, 0x2, 0x13, 0x1)
io_uring_setup$auto(0x40000002c55, 0x0)
mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
ioctl$NS_GET_PARENT(r2, 0x5450, 0x0)
sendmsg$auto_TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00a402be6f0b8b8d55b318b5f1c80c909bf27663e18232177f460c3505e3a76837bd53808bc7c9d6b5885ac12a209dba9f44295c1c30c36d5ef427a74411e84a7ed0d58fe3eb00ebea2844484623dfd12a7e331812909f356b98c1a96277582e94aebbbe5f69ba9fa0f75c47da675285c75f920afad6869d8636e5f0b00b7272e39586fe0cdab9bf43f46f569b832cf992bb1e7d2a919f20f5b8d368516202b300000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000000)
executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c80)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x2ee9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x6}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "4f1980af25430d91ee91098bd96e"}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "b5c906c091278c0feca673f297d6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80000)
executing program 1:
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
io_uring_setup$auto(0x6, 0x0)
io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0x3f, 0x0, 0xf2)
socket$nl_generic(0x10, 0x3, 0x10)
fspick$auto(0x80000001, &(0x7f0000000000)='{%^\\}$#:{\x00', 0xa)
fspick$auto(0xf6, &(0x7f0000000040)='-\x00', 0x7f)
socket(0x2, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
socket(0x2, 0x5, 0x0)
sendmmsg$auto(0x6, &(0x7f0000000400)={{0x0, 0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x1, &(0x7f0000000300), 0x10, 0x8000000}, 0xed7138c}, 0x6, 0x0)
setsockopt$auto(0x6, 0x3ff, 0x8, &(0x7f0000000080)='*\\\x88.{/-@[#,*\x00', 0x3)
mmap$auto(0xc, 0xfffffffffffff012, 0x1, 0x15, 0x4, 0xb63)
executing program 1:
timerfd_create$auto(0x9, 0x0)
ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0)
mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4)
clock_adjtime$auto(0x0, &(0x7f0000001000)={0x98, 0x200, 0x6, 0x7fff, 0x101, 0x6, 0x1, 0x10000, 0x3, {0x8}, 0xc, 0x8, 0x3, 0xc, 0x4, 0xd, 0x1, 0x80000003, 0x101, 0x8})
executing program 1:
bpf$auto(0x0, 0x0, 0xaf1)
executing program 2:
r0 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000004e00), 0xffffffffffffffff)
sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x1000)
executing program 2:
r0 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), 0xffffffffffffffff)
sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000c80)={0x58, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x2ee9}, @OVS_PACKET_ATTR_MRU={0x6, 0x9, 0x6}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "4f1980af25430d91ee91098bd96e"}, @OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "b5c906c091278c0feca673f297d6"}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80000)
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0x15b4, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0x1004, 0x1, "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"}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x9, 0x1c, "04bd3d58ac"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x7f}, @HWSIM_ATTR_FRAME={0x574, 0x3, "240d930f097aa1fa0bca91bc2d65a9c250e434bb698cb727c68c4b26002907f0b0dc49701475dd67cfb5405d7b73087848de306eddccd7e2671cea5b306feef4e12f69bf89cd7a2094d0fd13cbcefea65902453885b8b13e77322eb0b948883ae0825b7ff35a6932e2ac1bfa41ac1ec3902d14aae68c1b209131c1dcd6edc1a7dd6d2b8be43a9fc23d43e097c1ed620315ff160246de1d48c6bb6e54447c069a3c06ea6b7c0d22f68575912e7d44cb03681127017121b9eb6bd0391135801ee731804fe7cb9dcf22a493c1bc181694b26c33d36b624eefeec1cd19f5125b23be2421a26f425284775271806f650fe8591d5dceb794460c32c9b4632058bd0a3f4326662e2cec034a67b0ee0e3ed1b50ce5333c5f8307fc0466edb5bca3c7404c3fb4263b13a8db688b2b5286816dc845df48f7a263d4828e10ced7f845065d75ea6e396c6c87e293f8e2b69c4d68e84892a64d5158b60ba73f8f9a7abb3f77b53a7bf2786b6f872c8034d0c869a9cf96826d9e28010efe09e251ea7fba3ef58e364e665c7d045ae6b79fb01c95f7a995f33ddb3cc886a738f4d1bbdcf723d9884c7f2236964f5254600717184835129488214a3eb8945c2057460fbfaee51202653f5b263dd2e2b9cd00dbf820f557fe8a65205c0eceeac3823e94833f893aef0738f5416407fb9d0a21507baebd1c34c8e2cfb31d41dbb9f5b589096e1aa781de6f8b4a05297e4ebe4413b8ae7a79b94487eda437e66aa86f2fa206ae869c3000d56483b9af2fce97074f080502e0cf14b4c06bece7f61df7fc5715d774f4118c036f0db2d0fddab9148c1551f1da2cc9035f022a0c08c35500ab480b50ec0d5526b657ccfab11672d04bc8df6501c8996e365b0522974db8cb5ad0f1709a8072ccdeb39ddf75cebf22ae65f3c3b63d6d66bc442855e7c202a1fae08c83ec8ac45dfd640a43a63c08f1e586aaf5ca338a92b7a8ef488dca878eb8d160d06ff317e3a13e9922c73fcd7240506bcda9a32f79e942b259f374eb8edcb2e5e29c356cb5f10496ad91280662d65671a18d4fef1d3a3b1f8150c158797594f8b458593ab24e4cc04038612e86e3074d391d0f920570fc6cbf14e91ef8564938cc62ab3a946eb94207090e3b30ebba1c43380963d441c6d1a99ef19bb0fd616428c105f1b72302be705f498f786bbc24c0ce116e5abb0354be03c78f1c35e4d25b311e5230328cee2e567074440eea1ac05cd24191853a5fc8fe1703278dee8f20b2417cbfaa4a04e08b22790a52dc3ebab579c96a6e4287206e859c961bf46b5038a0aca7d329cb0be8e0a4b83d474875cb7e3111af551b15eae6cba36ca1c522aa04ae7d0b221776740dff5756217a3066f261b50ca24c972ca990b7f2fb8e615cdff296d566470d3faa139bab71aa8f77907248f2b98b3ee585f9c13fce794b29d9ce1154d18a72d6b0c97091beca0b49e17b85f106e01d608fa73d4592ec603b824eee2baecf4e78e1e9faf1773f8fcbed105af17c882ccb8b4dd0b42b4356323f415815a5cecd46a812eb2cab1f815d89e7c06b4144992954fe1981dad7cc41ac81faa5c02cd20cc20ba3d4e35f4b1576a540d46a7258d6c69f164abd70b7f15da7a5153fea8f96951f533092f06ff0c6f53c2a9631fafe831ed0202a5133cb417d3877201385fb279a29ac6ce6467d01a40ca9fd35d4cf3de050014897358221a4e8697b4fcd2b5db6176b4c06c7ea4473e5d81045aec42dd95a28489114b1d9be3f69aa81c265ebcb3f1de5be459ec946aedafebb2ecf414c0d7c37f5961a3bee6facfcfd317bee76de48eac3437eb46c86b9441a173d5d3e8141f28e3afe60c41cc38a28a75c2d02e78eb16095046afc3831de07c3c36370c6acd759dcc437a2025f88291954d1ee242625ccd1a6215d7c9435271e8e9e218880255f78da983c350d2b817cfa58dae220cf13f4dbd4"}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x4}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x5}]}, 0x15b4}, 0x1, 0x0, 0x0, 0x4002}, 0x27a482c02a01215f)
executing program 2:
mmap$auto(0x0, 0x2000d, 0x0, 0xeb1, 0xb56c, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0xfd, 0x5, 0x4)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
setrlimit$auto(0x1000000007, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
socket(0x29, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
getpeername$auto(0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
copy_file_range$auto(0x6, &(0x7f0000000080)=0x1, 0x0, &(0x7f00000000c0)=0x7, 0x100000000000, 0x9)
bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0)
executing program 2:
madvise$auto(0x0, 0x23, 0x18)
tkill$auto(0x1, 0x7)
tkill$auto(0x0, 0xf)
waitid$auto(0x7f, 0x8009, &(0x7f0000000000)={@_si_pad}, 0x4, 0x0)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
read$auto(0xfffffffd, &(0x7f0000000080)='%\x00', 0x40)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socketpair$auto(0x0, 0x9, 0xb4, &(0x7f0000000040)=0x6)
socket(0x2b, 0x1, 0x1)
getsockopt$auto(0x4, 0x11e, 0x7, 0xfffffffffffffffc, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
cachestat$auto(0x0, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000040), r0)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd96b1fddb9edd0500"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) (fail_nth: 1)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
cachestat$auto(0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
bisect: bisecting 24 programs
bisect: split chunks (needed=false): <24>
bisect: split chunk #0 of len 24 into 3 parts
bisect: testing without sub-chunk 1/3
testing program (duration=6m4s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 14, 6, 1, 4, 2, 3, 2, 6, 7, 1, 14, 16, 9, 1, 20]
detailed listing:
executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000640), r0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x18, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000040)={&(0x7f0000000880)={0x15b4, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@HWSIM_ATTR_ADDR_RECEIVER={0x1004, 0x1, "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"}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_PMSR_RESULT={0x9, 0x1c, "04bd3d58ac"}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x7f}, @HWSIM_ATTR_FRAME={0x574, 0x3, "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"}, @HWSIM_ATTR_FLAGS={0x8, 0x4, 0x4}, @HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x5}]}, 0x15b4}, 0x1, 0x0, 0x0, 0x4002}, 0x27a482c02a01215f)
executing program 2:
mmap$auto(0x0, 0x2000d, 0x0, 0xeb1, 0xb56c, 0x8000)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0xfd, 0x5, 0x4)
mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000)
setrlimit$auto(0x1000000007, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
socket(0x29, 0x2, 0x0)
socket(0x15, 0x5, 0x0)
getpeername$auto(0x3, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x801, 0x100)
copy_file_range$auto(0x6, &(0x7f0000000080)=0x1, 0x0, &(0x7f00000000c0)=0x7, 0x100000000000, 0x9)
bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0)
executing program 2:
madvise$auto(0x0, 0x23, 0x18)
tkill$auto(0x1, 0x7)
tkill$auto(0x0, 0xf)
waitid$auto(0x7f, 0x8009, &(0x7f0000000000)={@_si_pad}, 0x4, 0x0)
ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f)
read$auto(0xfffffffd, &(0x7f0000000080)='%\x00', 0x40)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
socketpair$auto(0x0, 0x9, 0xb4, &(0x7f0000000040)=0x6)
socket(0x2b, 0x1, 0x1)
getsockopt$auto(0x4, 0x11e, 0x7, 0xfffffffffffffffc, 0x0)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
cachestat$auto(0x0, 0x0, 0x0, 0x0)
executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_IOAM6(&(0x7f0000000040), r0)
sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd96b1fddb9edd0500"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40) (fail_nth: 1)
executing program 3:
mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000)
cachestat$auto(0x0, 0x0, 0x0, 0x0) (fail_nth: 2)
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/3
testing program (duration=6m2s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 1, 14, 16, 9, 1, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
bisect: the chunk can be dropped
bisect: testing without sub-chunk 3/3
bisect: split chunks (needed=true): <8>
bisect: split chunk #0 of len 8 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [16, 9, 1, 20]
detailed listing:
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 1, 14]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)

program did not crash
bisect: split chunks (needed=true): <4>, <4>
bisect: split chunk #0 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [1, 14, 16, 9, 1, 20]
detailed listing:
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 16, 9, 1, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket(0x28, 0x1, 0x0)
setsockopt$auto(0x3, 0x4, 0x7, 0xffffffffffffffff, 0x3)
ioperm$auto(0x7, 0x6, 0x4000000000002)
futimesat$auto(0x8, &(0x7f0000000040)='\x00', &(0x7f0000000080)={0x5, 0x1ff})
mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000)
socket(0x2, 0x1, 0x0)
mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000)
prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000)
setsockopt$auto(0x4, 0x3, 0x1ff, 0xfffffffffffffffe, 0x1)
open(&(0x7f00000000c0)='./file0\x00', 0x8c40, 0x1)
timerfd_create$auto(0x1, 0x0)
setuid$auto(0x7)
timerfd_gettime$auto(0x4, 0xfffffffffffffffc)
setxattr$auto(0x0, &(0x7f0000000000)='{f\x00\x90\x82\xfb\xed\n\xfe\x8b\xae+\xd4\xbc\x9e\xb48_^\xe6\x8d7\x9c\xa0\x938\x0e\xe3F\xd6\xca\xbc\x02\xbb$\x82\xa8\xd0\x011\xd1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x40000000)
executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000200), 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), r0)
sigaltstack$auto(&(0x7f0000000040)={0x0, 0x1}, 0x0)
sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r2, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x1}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x5}, @OVS_METER_ATTR_STATS={0x14, 0x3, {0x9, 0x1}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004054)
mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000)
mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000)
msgctl$auto(0xca80, 0x7fffffffffffffff, 0xfffffffffffffffe)
sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b0010000", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d"], 0x1b0}, 0x1, 0x0, 0x0, 0x40890}, 0x40000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: split chunk #1 of len 4 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 1, 14, 1, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunks (needed=true): <2>, <2>, <2>
bisect: split chunk #0 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [7, 1, 14, 1, 20]
detailed listing:
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 1, 14, 1, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 0:
bpf$auto(0xd, &(0x7f0000000080)=@iter_create={0x1, 0x2}, 0x2)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: split chunk #1 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 14, 1, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
bisect: the chunk can be dropped
bisect: testing without sub-chunk 2/2
bisect: no need to test this chunk, it's definitely needed
bisect: split chunk #2 of len 2 into 2 parts
bisect: testing without sub-chunk 1/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 14, 20]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
bisect: testing without sub-chunk 2/2
testing program (duration=6m1s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [6, 7, 14, 1]
detailed listing:
executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)

program did not crash
bisect: split chunks (needed=true): <1>, <1>, <1>, <1>, <1>
bisect: split chunk #0 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #1 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #2 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #3 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: split chunk #4 of len 1 into 2 parts
bisect: no way to further split the chunk
bisect: 5 programs left: 

executing program 3:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
vmsplice$auto(0x1, &(0x7f0000000000)={&(0x7f0000000100), 0x5}, 0x6, 0x8)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)


bisect: trying to concatenate
bisect: concatenate 5 entries
minimizing program #0 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [5, 7, 14, 1, 20]
detailed listing:
executing program 0:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
io_uring_setup$auto(0x1, &(0x7f0000000080)={0x20, 0x8001, 0x9, 0x200, 0x3, 0xd, 0x9, [0x101, 0x1, 0x8], {0x8001, 0x1e87, 0x99, 0x7, 0x2, 0xfffffff8, 0x9, 0x5, 0x95}, {0x6, 0x4, 0x4, 0x6, 0x2, 0x2e47, 0x5, 0x10, 0x3}})
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [4, 7, 14, 1, 20]
detailed listing:
executing program 0:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 14, 1, 20]
detailed listing:
executing program 0:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
listen$auto(0x1, 0x6)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 14, 1, 20]
detailed listing:
executing program 0:
epoll_create1$auto(0x10000)
syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), 0xffffffffffffffff)
setreuid$auto(0x7f, 0x6)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [3, 7, 14, 1, 20]
detailed listing:
executing program 0:
epoll_create1$auto(0x10000)
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 7, 14, 1, 20]
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
minimized 6 calls -> 2 calls
minimizing program #1 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 6, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
close_range$auto(0x2, 0x8000, 0x0)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
socket(0xa, 0x3, 0x6) (async)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 5, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
madvise$auto(0x0, 0xffffffffffff0001, 0x15) (rerun: 32)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 4, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
madvise$auto(0x0, 0xffffffffffff0008, 0x19) (async, rerun: 32)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 3, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 14, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 0:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
minimized 7 calls -> 2 calls
minimizing program #2 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 13, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
mmap$auto(0x0, 0x5, 0x1, 0x40eb2, 0x402, 0x300000000000)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 13, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
pidfd_send_signal$auto(0x2, 0x7, 0x0, 0x1)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 12, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 11, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 11, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
sendfile$auto(0x1, 0x3, 0x0, 0xc01)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 11, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
set_robust_list$auto(&(0x7f0000000180)={{&(0x7f0000000080)={&(0x7f0000000040)}}, 0x3, &(0x7f0000000140)={&(0x7f0000000100)={&(0x7f00000000c0)}}}, 0x5)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 10, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket(0x1, 0x1, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 9, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
fanotify_init$auto(0x5, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 8, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 7, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
r0 = socket(0x30, 0x1, 0xa7)
ioctl$sock_SIOCGIFINDEX(r0, 0x8942, &(0x7f0000000000)={'dvmrp0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 7, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
timer_create$auto(0x9, 0xfffffffffffffffc, 0xffffffffffffffff)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 5, 1, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
fcntl$auto(0x4, 0x4, 0xa553)
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program did not crash
minimized 14 calls -> 6 calls
minimizing program #3 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 20]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)
madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async)

program crashed: WARNING in copy_huge_pmd
minimized 1 calls -> 0 calls
minimizing program #4 before concatenation
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 19]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 18]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 17]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 17]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 17]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 17]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 16]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 15]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 14]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 14]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 13]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 13]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 13]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 12]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 11]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000002400)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002200)={0x1c, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000094}, 0x40000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 10]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 9]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, r0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 8]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 7]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [2, 2, 6, 0, 6]
detailed listing:
executing program 3:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
executing program 3:
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
executing program 0:
executing program 0:
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
minimized 20 calls -> 7 calls
testing program (duration=9m1.5s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-sendmsg$auto_NL80211_CMD_ADD_TX_TS-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
bisect: concatenation succeeded
found reproducer with 17 syscalls
minimizing guilty program
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-sendmsg$auto_NL80211_CMD_ADD_TX_TS-mbind$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-sendmsg$auto_NL80211_CMD_ADD_TX_TS-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_CONTROL_PORT={0x4}, @NL80211_ATTR_MAC_HINT={0x76, 0xc8, "a1deae0b353364b8a893fff4cb7d6d35e546027c9f893d12c856a2112b9b27017af6f266eac91814b060af082cd23e2c4367e4320c1d3dbe5b790e07a1ffed479d3ad25e4a02086d178d25967004056db2472daa35204c3172ee232c441c8499ce16016b8ac62374ecace861bdfd96e44594"}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x9}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x9c}}, 0x10) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-madvise$auto-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-mmap$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-bpf$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
bpf$auto(0x0, 0x0, 0xaf1)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-pidfd_open$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
pidfd_open$auto(0x1, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-socket$nl_generic-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-close_range$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-socket-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x30, 0x1, 0xa7)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-socket$nl_generic-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-close_range$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
close_range$auto(0x2, 0x8000, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program did not crash
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-setreuid$auto-madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
setreuid$auto(0x7f, 0x6)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): listen$auto-madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
listen$auto(0x1, 0x6)
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) (async)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0) (async)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9) (async)

program crashed: WARNING in copy_huge_pmd
testing program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
detailed listing:
executing program 0:
madvise$auto(0x0, 0x7ffffffffffffffc, 0xc)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
madvise$auto(0x0, 0xffffffffffff0005, 0x19)
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2)
clone$auto(0xf, 0x6, 0xfffffffffffffffd, 0xfffffffffffffffd, 0xc0c9)

program crashed: WARNING in copy_huge_pmd
extracting C reproducer
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
simplifying C reproducer
testing compiled C program (duration=5m52.413160544s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
testing compiled C program (duration=5m52.413160544s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): madvise$auto-mmap$auto-madvise$auto-syz_open_procfs$namespace-mbind$auto-clone$auto
program crashed: WARNING in copy_huge_pmd
reproducing took 8h7m33.503942472s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5397 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 mm/huge_memory.c:1602
Modules linked in:
CPU: 1 UID: 0 PID: 5397 Comm: syz-executor231 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:copy_huge_pmd+0x16dd/0x2500 mm/huge_memory.c:1602
Code: 01 e9 dd f5 ff ff e8 e2 c3 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 42 c6 9a ff 48 85 db 0f 84 a0 07 00 00 e8 c4 c3 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 b6 c3 9a ff 49 89 ec 31 ff 41 81 e4 ff
RSP: 0018:ffffc90003f07640 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f1661e
RDX: ffff88807ebd8000 RSI: ffffffff81f1662c RDI: 0000000000000007
RBP: ffffea0001dfc800 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02
R13: d7ffe7fff1effe02 R14: 0000000000000200 R15: ffff8880303dfc98
FS:  00007f64eb2316c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f64eb257b30 CR3: 0000000076b02000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 copy_pmd_range mm/memory.c:1245 [inline]
 copy_pud_range mm/memory.c:1292 [inline]
 copy_p4d_range mm/memory.c:1316 [inline]
 copy_page_range+0xa66/0x5a20 mm/memory.c:1414
 dup_mmap kernel/fork.c:750 [inline]
 dup_mm kernel/fork.c:1674 [inline]
 copy_mm+0x134f/0x2550 kernel/fork.c:1723
 copy_process+0x3ab9/0x6f00 kernel/fork.c:2375
 kernel_clone+0xfd/0x960 kernel/fork.c:2787
 __do_sys_clone+0xba/0x100 kernel/fork.c:2930
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f64eb297459
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f64eb231198 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f64eb321318 RCX: 00007f64eb297459
RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 000000000000000f
RBP: 00007f64eb321310 R08: 000000000000c0c9 R09: 0000000000000000
R10: ffffffff81000000 R11: 0000000000000246 R12: 00007f64eb2ee0ac
R13: 000000000000006e R14: 0000000100000004 R15: 0000000100000000
 </TASK>

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 5397 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 mm/huge_memory.c:1602
Modules linked in:
CPU: 1 UID: 0 PID: 5397 Comm: syz-executor231 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
RIP: 0010:copy_huge_pmd+0x16dd/0x2500 mm/huge_memory.c:1602
Code: 01 e9 dd f5 ff ff e8 e2 c3 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 42 c6 9a ff 48 85 db 0f 84 a0 07 00 00 e8 c4 c3 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 b6 c3 9a ff 49 89 ec 31 ff 41 81 e4 ff
RSP: 0018:ffffc90003f07640 EFLAGS: 00010293
RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f1661e
RDX: ffff88807ebd8000 RSI: ffffffff81f1662c RDI: 0000000000000007
RBP: ffffea0001dfc800 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02
R13: d7ffe7fff1effe02 R14: 0000000000000200 R15: ffff8880303dfc98
FS:  00007f64eb2316c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f64eb257b30 CR3: 0000000076b02000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 copy_pmd_range mm/memory.c:1245 [inline]
 copy_pud_range mm/memory.c:1292 [inline]
 copy_p4d_range mm/memory.c:1316 [inline]
 copy_page_range+0xa66/0x5a20 mm/memory.c:1414
 dup_mmap kernel/fork.c:750 [inline]
 dup_mm kernel/fork.c:1674 [inline]
 copy_mm+0x134f/0x2550 kernel/fork.c:1723
 copy_process+0x3ab9/0x6f00 kernel/fork.c:2375
 kernel_clone+0xfd/0x960 kernel/fork.c:2787
 __do_sys_clone+0xba/0x100 kernel/fork.c:2930
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f64eb297459
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 51 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007f64eb231198 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
RAX: ffffffffffffffda RBX: 00007f64eb321318 RCX: 00007f64eb297459
RDX: ffffffff81000000 RSI: 0000000000000006 RDI: 000000000000000f
RBP: 00007f64eb321310 R08: 000000000000c0c9 R09: 0000000000000000
R10: ffffffff81000000 R11: 0000000000000246 R12: 00007f64eb2ee0ac
R13: 000000000000006e R14: 0000000100000004 R15: 0000000100000000
 </TASK>