Extracting prog: 5m37.441113258s
Minimizing prog: 51m32.845678378s
Simplifying prog options: 12m11.837063948s
Extracting C: 2m15.804340875s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-mmap-socket
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket(0x14, 0x2, 0x101)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-mmap-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in lane_ioctl
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING in __cancel_work
a never seen crash title: WARNING in __cancel_work, ignore
simplifying guilty program options
testing program (duration=6m0s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in lane_ioctl
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
validation run: crashed=true
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r0 = socket(0x14, 0x2, 0x101)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in lane_ioctl
validation run: crashed=true
reproducing took 1h24m57.023051274s
repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: init active (active state 0) object: ffff888075640f38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 net/atm/lec.c:-1
WARNING: lib/debugobjects.c:643 at debug_print_object lib/debugobjects.c:640 [inline], CPU#1: syz.1.594/9043
WARNING: lib/debugobjects.c:643 at __debug_object_init+0x2b1/0x4e0 lib/debugobjects.c:791, CPU#1: syz.1.594/9043
Modules linked in:
CPU: 1 UID: 0 PID: 9043 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:debug_print_object lib/debugobjects.c:640 [inline]
RIP: 0010:__debug_object_init+0x30f/0x4e0 lib/debugobjects.c:791
Code: 3c 38 00 74 08 4c 89 ef e8 6e df 6b fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 96 2a 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 4e 4f 70 0b 83 fd 03 75 3f 4c 8b
RSP: 0018:ffffc9000d4b78f8 EFLAGS: 00010246
RAX: 1ffffffff179e8d0 RBX: ffff888075640f38 RCX: 0000000000000000
RDX: ffffffff8c2a9a40 RSI: ffffffff8c2a9640 RDI: ffffffff903f2130
RBP: 0000000000000003 R08: ffff888075640f38 R09: ffffffff8bcf59e0
R10: dffffc0000000000 R11: ffffffff81b30d40 R12: ffffffff8c2a9a40
R13: ffffffff8bcf4680 R14: ffffffff903f2130 R15: dffffc0000000000
FS:  00007fabdf5cf6c0(0000) GS:ffff8881250f3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbecb24bfe8 CR3: 0000000028152000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 debug_timer_init kernel/time/timer.c:788 [inline]
 debug_init kernel/time/timer.c:836 [inline]
 timer_init_key+0x41/0x2c0 kernel/time/timer.c:880
 lec_arp_init net/atm/lec.c:1274 [inline]
 lecd_attach net/atm/lec.c:781 [inline]
 lane_ioctl+0x1579/0x2220 net/atm/lec.c:1037
 do_vcc_ioctl+0x36d/0x9d0 net/atm/ioctl.c:159
 svc_ioctl+0x1f6/0x7d0 net/atm/svc.c:611
 sock_do_ioctl+0x101/0x320 net/socket.c:1327
 sock_ioctl+0x5c6/0x7f0 net/socket.c:1448
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fabde79c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fabdf5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fabdea15fa0 RCX: 00007fabde79c799
RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004
RBP: 00007fabde832c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fabdea16038 R14: 00007fabdea15fa0 R15: 00007ffe14e1fd38
 </TASK>
----------------
Code disassembly (best guess):
   0:	3c 38                	cmp    $0x38,%al
   2:	00 74 08 4c          	add    %dh,0x4c(%rax,%rcx,1)
   6:	89 ef                	mov    %ebp,%edi
   8:	e8 6e df 6b fd       	call   0xfd6bdf7b
   d:	4d 8b 4d 00          	mov    0x0(%r13),%r9
  11:	4c 89 f7             	mov    %r14,%rdi
  14:	48 c7 c6 40 96 2a 8c 	mov    $0xffffffff8c2a9640,%rsi
  1b:	4c 89 e2             	mov    %r12,%rdx
  1e:	8b 4c 24 08          	mov    0x8(%rsp),%ecx
  22:	4c 8b 04 24          	mov    (%rsp),%r8
  26:	ff 74 24 10          	push   0x10(%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 4e 4f 70 0b    	incl   0xb704f4e(%rip)        # 0xb704f87
  39:	83 fd 03             	cmp    $0x3,%ebp
  3c:	75 3f                	jne    0x7d
  3e:	4c                   	rex.WR
  3f:	8b                   	.byte 0x8b

final repro crashed as (corrupted=false):
------------[ cut here ]------------
ODEBUG: init active (active state 0) object: ffff888075640f38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 net/atm/lec.c:-1
WARNING: lib/debugobjects.c:643 at debug_print_object lib/debugobjects.c:640 [inline], CPU#1: syz.1.594/9043
WARNING: lib/debugobjects.c:643 at __debug_object_init+0x2b1/0x4e0 lib/debugobjects.c:791, CPU#1: syz.1.594/9043
Modules linked in:
CPU: 1 UID: 0 PID: 9043 Comm: syz.1.594 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
RIP: 0010:debug_print_object lib/debugobjects.c:640 [inline]
RIP: 0010:__debug_object_init+0x30f/0x4e0 lib/debugobjects.c:791
Code: 3c 38 00 74 08 4c 89 ef e8 6e df 6b fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 40 96 2a 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 4e 4f 70 0b 83 fd 03 75 3f 4c 8b
RSP: 0018:ffffc9000d4b78f8 EFLAGS: 00010246
RAX: 1ffffffff179e8d0 RBX: ffff888075640f38 RCX: 0000000000000000
RDX: ffffffff8c2a9a40 RSI: ffffffff8c2a9640 RDI: ffffffff903f2130
RBP: 0000000000000003 R08: ffff888075640f38 R09: ffffffff8bcf59e0
R10: dffffc0000000000 R11: ffffffff81b30d40 R12: ffffffff8c2a9a40
R13: ffffffff8bcf4680 R14: ffffffff903f2130 R15: dffffc0000000000
FS:  00007fabdf5cf6c0(0000) GS:ffff8881250f3000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fbecb24bfe8 CR3: 0000000028152000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 debug_timer_init kernel/time/timer.c:788 [inline]
 debug_init kernel/time/timer.c:836 [inline]
 timer_init_key+0x41/0x2c0 kernel/time/timer.c:880
 lec_arp_init net/atm/lec.c:1274 [inline]
 lecd_attach net/atm/lec.c:781 [inline]
 lane_ioctl+0x1579/0x2220 net/atm/lec.c:1037
 do_vcc_ioctl+0x36d/0x9d0 net/atm/ioctl.c:159
 svc_ioctl+0x1f6/0x7d0 net/atm/svc.c:611
 sock_do_ioctl+0x101/0x320 net/socket.c:1327
 sock_ioctl+0x5c6/0x7f0 net/socket.c:1448
 vfs_ioctl fs/ioctl.c:51 [inline]
 __do_sys_ioctl fs/ioctl.c:597 [inline]
 __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x14d/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fabde79c799
Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fabdf5cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
RAX: ffffffffffffffda RBX: 00007fabdea15fa0 RCX: 00007fabde79c799
RDX: 0000000000000000 RSI: 00000000000061d0 RDI: 0000000000000004
RBP: 00007fabde832c99 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007fabdea16038 R14: 00007fabdea15fa0 R15: 00007ffe14e1fd38
 </TASK>
----------------
Code disassembly (best guess):
   0:	3c 38                	cmp    $0x38,%al
   2:	00 74 08 4c          	add    %dh,0x4c(%rax,%rcx,1)
   6:	89 ef                	mov    %ebp,%edi
   8:	e8 6e df 6b fd       	call   0xfd6bdf7b
   d:	4d 8b 4d 00          	mov    0x0(%r13),%r9
  11:	4c 89 f7             	mov    %r14,%rdi
  14:	48 c7 c6 40 96 2a 8c 	mov    $0xffffffff8c2a9640,%rsi
  1b:	4c 89 e2             	mov    %r12,%rdx
  1e:	8b 4c 24 08          	mov    0x8(%rsp),%ecx
  22:	4c 8b 04 24          	mov    (%rsp),%r8
  26:	ff 74 24 10          	push   0x10(%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 4e 4f 70 0b    	incl   0xb704f4e(%rip)        # 0xb704f87
  39:	83 fd 03             	cmp    $0x3,%ebp
  3c:	75 3f                	jne    0x7d
  3e:	4c                   	rex.WR
  3f:	8b                   	.byte 0x8b