Extracting prog: 2m17.828836223s Minimizing prog: 17m11.664276588s Simplifying prog options: 0s Extracting C: 44.690329898s Simplifying C: 19m40.297540206s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program crashed: WARNING in __cfg80211_bss_update single: successfully extracted reproducer found reproducer with 3 syscalls minimizing guilty program testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(0x0, &(0x7f0000000540)=@mgmt_frame=@beacon={{{}, {}, @broadcast}, 0x0, @default, 0x245, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @void}, 0x40) program did not crash testing program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame detailed listing: executing program 0: syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000640000000006"], 0x4e7) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000d40)=ANY=[@ANYBLOB="500000000802110000010802110000005050505050500000000000000000000064000000000601"], 0x4e7) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m9.20037472s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update simplifying C reproducer testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program did not crash testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program did not crash testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:true Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:true UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update testing compiled C program (duration=1m9.20037472s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_80211_inject_frame-syz_80211_inject_frame-syz_80211_inject_frame program crashed: WARNING in __cfg80211_bss_update reproducing took 39m54.480998495s repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __list_del_entry_valid include/linux/list.h:124 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __list_del_entry include/linux/list.h:215 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 list_del include/linux/list.h:229 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.14.0-rc4-syzkaller-g017f704fbfb1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses include/linux/list.h:124 [inline] pc : __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 lr : __cfg80211_bss_update+0x13c8/0x1b1c net/wireless/scan.c:2018 sp : ffff800097e16d80 x29: ffff800097e16e40 x28: 0000000000000000 x27: 1fffe000185ce402 x26: ffff0000c2e72000 x25: dfff800000000000 x24: 0000000000000001 x23: ffff0000dd250000 x22: ffff0000c2e72010 x21: ffff0000ccd62810 x20: ffff0000c2e72010 x19: ffff0000ccd62800 x18: ffff800097e166e0 x17: 000000000000e6d3 x16: ffff80008069ea6c x15: 0000000000000001 x14: 1fffe0001ad4d490 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001ad4d491 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c2e72410 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000ccd628c8 x4 : ffff800097e16fc8 x3 : ffff80008ae1a58c x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff0000c2e72010 Call trace: __list_del_entry_valid include/linux/list.h:124 [inline] (P) __list_del_entry include/linux/list.h:215 [inline] (P) list_del include/linux/list.h:229 [inline] (P) cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] (P) __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0xa90/0x1a0c net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x2dc/0x4650 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x300/0x6fc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x700/0x9d0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x478/0x8c8 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5246 [inline] ieee80211_rx_list+0x24e8/0x2f78 net/mac80211/rx.c:5483 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5506 ieee80211_rx include/net/mac80211.h:5172 [inline] ieee80211_handle_queued_frames+0xec/0x180 net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x320/0x3fc kernel/softirq.c:811 tasklet_action+0x68/0x8c kernel/softirq.c:837 handle_softirqs+0x320/0xd34 kernel/softirq.c:561 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 smpboot_thread_fn+0x4b0/0x90c kernel/smpboot.c:164 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 516481 hardirqs last enabled at (516480): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (516480): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (516481): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (516464): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (516464): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (516469): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1775 cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1775 __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G W 6.14.0-rc4-syzkaller-g017f704fbfb1 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] pc : __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 lr : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] lr : __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 sp : ffff800097e16d80 x29: ffff800097e16e40 x28: 0000000000000000 x27: ffff0000dd2501a0 x26: ffff0000c2e72400 x25: dfff800000000000 x24: 0000000000000002 x23: ffff0000dd250000 x22: ffff0000c662401d x21: ffff0000ccd62810 x20: 1fffe000185ce492 x19: ffff0000ccd62800 x18: ffff800097e166e0 x17: 000000000000e6d3 x16: ffff80008069e9e8 x15: 0000000000000001 x14: 1fffe000185ce410 x13: 0000000000000000 x12: 0000000000000000 x11: ffff6000185ce411 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c1b90000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000ccd628c8 x4 : ffff800097e16fc8 x3 : ffff80008ae1a58c x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000006 Call trace: cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] (P) __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0xa90/0x1a0c net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x2dc/0x4650 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x300/0x6fc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x700/0x9d0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x478/0x8c8 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5246 [inline] ieee80211_rx_list+0x24e8/0x2f78 net/mac80211/rx.c:5483 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5506 ieee80211_rx include/net/mac80211.h:5172 [inline] ieee80211_handle_queued_frames+0xec/0x180 net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x320/0x3fc kernel/softirq.c:811 tasklet_action+0x68/0x8c kernel/softirq.c:837 handle_softirqs+0x320/0xd34 kernel/softirq.c:561 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 smpboot_thread_fn+0x4b0/0x90c kernel/smpboot.c:164 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 516489 hardirqs last enabled at (516488): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (516488): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (516489): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (516464): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (516464): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (516469): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 ---[ end trace 0000000000000000 ]--- final repro crashed as (corrupted=false): ------------[ cut here ]------------ WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __list_del_entry_valid include/linux/list.h:124 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __list_del_entry include/linux/list.h:215 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 list_del include/linux/list.h:229 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1777 __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.14.0-rc4-syzkaller-g017f704fbfb1 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 20400005 (nzCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses include/linux/list.h:124 [inline] pc : __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 lr : __cfg80211_bss_update+0x13c8/0x1b1c net/wireless/scan.c:2018 sp : ffff800097e16d80 x29: ffff800097e16e40 x28: 0000000000000000 x27: 1fffe000185ce402 x26: ffff0000c2e72000 x25: dfff800000000000 x24: 0000000000000001 x23: ffff0000dd250000 x22: ffff0000c2e72010 x21: ffff0000ccd62810 x20: ffff0000c2e72010 x19: ffff0000ccd62800 x18: ffff800097e166e0 x17: 000000000000e6d3 x16: ffff80008069ea6c x15: 0000000000000001 x14: 1fffe0001ad4d490 x13: 0000000000000000 x12: 0000000000000000 x11: ffff60001ad4d491 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c2e72410 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000ccd628c8 x4 : ffff800097e16fc8 x3 : ffff80008ae1a58c x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff0000c2e72010 Call trace: __list_del_entry_valid include/linux/list.h:124 [inline] (P) __list_del_entry include/linux/list.h:215 [inline] (P) list_del include/linux/list.h:229 [inline] (P) cfg80211_combine_bsses net/wireless/scan.c:1778 [inline] (P) __cfg80211_bss_update+0x15fc/0x1b1c net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0xa90/0x1a0c net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x2dc/0x4650 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x300/0x6fc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x700/0x9d0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x478/0x8c8 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5246 [inline] ieee80211_rx_list+0x24e8/0x2f78 net/mac80211/rx.c:5483 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5506 ieee80211_rx include/net/mac80211.h:5172 [inline] ieee80211_handle_queued_frames+0xec/0x180 net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x320/0x3fc kernel/softirq.c:811 tasklet_action+0x68/0x8c kernel/softirq.c:837 handle_softirqs+0x320/0xd34 kernel/softirq.c:561 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 smpboot_thread_fn+0x4b0/0x90c kernel/smpboot.c:164 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 516481 hardirqs last enabled at (516480): [] __raw_spin_unlock_irqrestore include/linux/spinlock_api_smp.h:151 [inline] hardirqs last enabled at (516480): [] _raw_spin_unlock_irqrestore+0x38/0x98 kernel/locking/spinlock.c:194 hardirqs last disabled at (516481): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (516464): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (516464): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (516469): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 ---[ end trace 0000000000000000 ]--- ------------[ cut here ]------------ WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1775 cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] WARNING: CPU: 1 PID: 24 at net/wireless/scan.c:1775 __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 Modules linked in: CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Tainted: G W 6.14.0-rc4-syzkaller-g017f704fbfb1 #0 Tainted: [W]=WARN Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 pstate: 40400005 (nZcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] pc : __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 lr : cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] lr : __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 sp : ffff800097e16d80 x29: ffff800097e16e40 x28: 0000000000000000 x27: ffff0000dd2501a0 x26: ffff0000c2e72400 x25: dfff800000000000 x24: 0000000000000002 x23: ffff0000dd250000 x22: ffff0000c662401d x21: ffff0000ccd62810 x20: 1fffe000185ce492 x19: ffff0000ccd62800 x18: ffff800097e166e0 x17: 000000000000e6d3 x16: ffff80008069e9e8 x15: 0000000000000001 x14: 1fffe000185ce410 x13: 0000000000000000 x12: 0000000000000000 x11: ffff6000185ce411 x10: 0000000000ff0100 x9 : 0000000000000000 x8 : ffff0000c1b90000 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffff0000ccd628c8 x4 : ffff800097e16fc8 x3 : ffff80008ae1a58c x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000006 Call trace: cfg80211_combine_bsses net/wireless/scan.c:1775 [inline] (P) __cfg80211_bss_update+0x15ec/0x1b1c net/wireless/scan.c:2018 (P) cfg80211_inform_single_bss_data+0xa90/0x1a0c net/wireless/scan.c:2363 cfg80211_inform_bss_data+0x2dc/0x4650 net/wireless/scan.c:3222 cfg80211_inform_bss_frame_data+0x300/0x6fc net/wireless/scan.c:3317 ieee80211_bss_info_update+0x700/0x9d0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x478/0x8c8 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5246 [inline] ieee80211_rx_list+0x24e8/0x2f78 net/mac80211/rx.c:5483 ieee80211_rx_napi+0x164/0x34c net/mac80211/rx.c:5506 ieee80211_rx include/net/mac80211.h:5172 [inline] ieee80211_handle_queued_frames+0xec/0x180 net/mac80211/main.c:441 ieee80211_tasklet_handler+0x20/0x30 net/mac80211/main.c:460 tasklet_action_common+0x320/0x3fc kernel/softirq.c:811 tasklet_action+0x68/0x8c kernel/softirq.c:837 handle_softirqs+0x320/0xd34 kernel/softirq.c:561 run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 smpboot_thread_fn+0x4b0/0x90c kernel/smpboot.c:164 kthread+0x65c/0x7b0 kernel/kthread.c:464 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862 irq event stamp: 516489 hardirqs last enabled at (516488): [] __exit_to_kernel_mode arch/arm64/kernel/entry-common.c:85 [inline] hardirqs last enabled at (516488): [] exit_to_kernel_mode+0xdc/0x10c arch/arm64/kernel/entry-common.c:95 hardirqs last disabled at (516489): [] el1_dbg+0x24/0x80 arch/arm64/kernel/entry-common.c:488 softirqs last enabled at (516464): [] softirq_handle_end kernel/softirq.c:407 [inline] softirqs last enabled at (516464): [] handle_softirqs+0xb44/0xd34 kernel/softirq.c:589 softirqs last disabled at (516469): [] run_ksoftirqd+0x70/0xc0 kernel/softirq.c:950 ---[ end trace 0000000000000000 ]---