Extracting prog: 3m5.979959457s
Minimizing prog: 18m26.263280547s
Simplifying prog options: 0s
Extracting C: 50.712159793s
Simplifying C: 26m32.74904663s


extracting reproducer from 30 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX-sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x2004c8a1}, 0x8000)

program crashed: WARNING: ODEBUG bug in corrupted
single: successfully extracted reproducer
found reproducer with 9 syscalls
minimizing guilty program
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x14, 0x3, 0x2000004)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
simplifying C reproducer
testing compiled C program (duration=47.496860473s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program did not crash
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program did not crash
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program did not crash
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in lane_ioctl
a never seen crash title: WARNING: ODEBUG bug in lane_ioctl, ignore
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING in __cancel_work
a never seen crash title: WARNING in __cancel_work, ignore
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in lane_ioctl
a never seen crash title: WARNING: ODEBUG bug in lane_ioctl, ignore
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in corrupted
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in lane_ioctl
a never seen crash title: WARNING: ODEBUG bug in lane_ioctl, ignore
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:false Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING: ODEBUG bug in lane_ioctl
a never seen crash title: WARNING: ODEBUG bug in lane_ioctl, ignore
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING in __cancel_work
a never seen crash title: WARNING in __cancel_work, ignore
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program did not crash
validation run: crashed=false
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
validation run: crashed=true
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
validation run: crashed=true
testing program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
detailed listing:
executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x14, 0x3, 0x2000004)
ioctl$sock_SIOCGIFINDEX(r1, 0x61d0, 0x0)

program crashed: WARNING: ODEBUG bug in corrupted
validation run: crashed=true
reproducing took 56m27.298861108s
repro crashed as (corrupted=true):
------------[ cut here ]------------
ODEBUG: init active (active state 0) object: ffff888036f8cf38 object type: timer_list hint: lec_arp_check_expire+0x0/0xc90 net/atm/lec.c:-1
WARNING: lib/debugobjects.c:632 at debug_print_object lib/debugobjects.c:629 [inline], CPU#1: syz.3.71/6386
WARNING: lib/debugobjects.c:632 at __debug_object_init+0x2b1/0x4e0 lib/debugobjects.c:780, CPU#1: syz.3.71/6386
Modules linked in:
CPU: 1 UID: 0 PID: 6386 Comm: syz.3.71 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:debug_print_object lib/debugobjects.c:629 [inline]
RIP: 0010:__debug_object_init+0x30f/0x4e0 lib/debugobjects.c:780
Code: 3c 38 00 74 08 4c 89 ef e8 5e 73 77 fd 4d 8b 4d 00 4c 89 f7 48 c7 c6 c0 f7 27 8c 4c 89 e2 8b 4c 24 08 4c 8b 04 24 ff 74 24 10 <67> 48 0f b9 3a 48 83 c4 08 ff 05 ae 90 78 0b 83 fd 03 75 3f 4c 8b
RSP: 0018:ffffc900039a78f8 EFLAGS: 00010246
RAX: 1ffffffff179e854 RBX: ffff888036f8cf38 RCX: 0000000000000000
RDX: ffffffff8c27fbc0 RSI: ffffffff8c27f7c0 RDI: ffffffff903cdfd0
RBP: 0000000000000003 R08: ffff888036f8cf38 R09: ffffffff8bcf5600
R10: dffffc0000000000 R11: ffffffff81b1dac0 R12: ffffffff8c27fbc0
----------------
Code disassembly (best guess):
   0:	3c 38                	cmp    $0x38,%al
   2:	00 74 08 4c          	add    %dh,0x4c(%rax,%rcx,1)
   6:	89 ef                	mov    %ebp,%edi
   8:	e8 5e 73 77 fd       	call   0xfd77736b
   d:	4d 8b 4d 00          	mov    0x0(%r13),%r9
  11:	4c 89 f7             	mov    %r14,%rdi
  14:	48 c7 c6 c0 f7 27 8c 	mov    $0xffffffff8c27f7c0,%rsi
  1b:	4c 89 e2             	mov    %r12,%rdx
  1e:	8b 4c 24 08          	mov    0x8(%rsp),%ecx
  22:	4c 8b 04 24          	mov    (%rsp),%r8
  26:	ff 74 24 10          	push   0x10(%rsp)
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	48 83 c4 08          	add    $0x8,%rsp
  33:	ff 05 ae 90 78 0b    	incl   0xb7890ae(%rip)        # 0xb7890e7
  39:	83 fd 03             	cmp    $0x3,%ebp
  3c:	75 3f                	jne    0x7d
  3e:	4c                   	rex.WR
  3f:	8b                   	.byte 0x8b

report is corrupted, running repro again
testing compiled C program (duration=47.496860473s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:true BinfmtMisc:false CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:true Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_generic-syz_init_net_socket$bt_hci-close-syz_open_procfs$namespace-mmap-socket$nl_route-socket-ioctl$sock_SIOCGIFINDEX
program crashed: WARNING in __cancel_work
final repro crashed as (corrupted=false):
------------[ cut here ]------------
!work_pending(work)
WARNING: kernel/workqueue.c:791 at set_work_data kernel/workqueue.c:791 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline], CPU#1: syz-executor325/6152
WARNING: kernel/workqueue.c:791 at __cancel_work+0x1c1/0x230 kernel/workqueue.c:4438, CPU#1: syz-executor325/6152
Modules linked in:
CPU: 1 UID: 0 PID: 6152 Comm: syz-executor325 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
RIP: 0010:set_work_data kernel/workqueue.c:791 [inline]
RIP: 0010:set_work_pool_and_clear_pending kernel/workqueue.c:819 [inline]
RIP: 0010:__cancel_work+0x1c1/0x230 kernel/workqueue.c:4438
Code: 02 00 00 75 2d e8 3f d9 37 00 48 85 db 75 32 e8 35 d9 37 00 eb 31 e8 2e d9 37 00 90 0f 0b 90 e9 c1 fe ff ff e8 20 d9 37 00 90 <0f> 0b 90 e9 44 ff ff ff e8 12 d9 37 00 e8 4d 80 25 0a 48 85 db 74
RSP: 0018:ffffc900041d7bf0 EFLAGS: 00010093
RAX: ffffffff818d84d0 RBX: 001fffffffc00000 RCX: ffff888025888000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: 0000000000000000 R08: ffff888060550ef7 R09: 1ffff1100c0aa1de
R10: dffffc0000000000 R11: ffffed100c0aa1df R12: dffffc0000000000
R13: 1ffff1100c0aa1de R14: ffff888060550ef0 R15: 0000000000000040
FS:  000055556973c4c0(0000) GS:ffff888125345000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007f4246496fe8 CR3: 0000000078480000 CR4: 00000000003526f0
Call Trace:
 <TASK>
 __cancel_work_sync+0x1f/0x110 kernel/workqueue.c:4448
 lec_arp_destroy net/atm/lec.c:1501 [inline]
 lec_atm_close+0x171/0x9e0 net/atm/lec.c:497
 vcc_destroy_socket net/atm/common.c:181 [inline]
 vcc_release+0x10f/0x580 net/atm/common.c:205
 svc_release+0x6c/0xd0 net/atm/svc.c:95
 __sock_release net/socket.c:722 [inline]
 sock_close+0xc3/0x240 net/socket.c:1514
 __fput+0x44f/0xa60 fs/file_table.c:510
 fput_close_sync+0x11f/0x240 fs/file_table.c:615
 __do_sys_close fs/open.c:1507 [inline]
 __se_sys_close fs/open.c:1492 [inline]
 __x64_sys_close+0x7e/0x110 fs/open.c:1492
 do_syscall_x64 arch/x86/entry/syscall_64.c:63 [inline]
 do_syscall_64+0x15f/0xf80 arch/x86/entry/syscall_64.c:94
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7f522259443e
Code: 08 0f 85 45 ed ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 90 41 57 41 56 4d 89 c6 41 55 4d 89 cd 41 54 55 53 48 83 ec 08
RSP: 002b:00007ffebd31c7a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000003
RAX: ffffffffffffffda RBX: 000055556973c4c0 RCX: 00007f522259443e
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005
RBP: 000000000001ecef R08: 0000000000000000 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5222618b6c
R13: 00007ffebd31c850 R14: 00007ffebd31c8c0 R15: 00007f52225504c0
 </TASK>