Extracting prog: 18m11.941156537s
Minimizing prog: 1h16m32.275921809s
Simplifying prog options: 17m42.274898185s
Extracting C: 5m9.198598419s
Simplifying C: 0s


extracting reproducer from 70 programs
testing a last program of every proc
single: executing 20 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): gettid-openat$udambuf-socket$pppl2tp-socket-ioctl$sock_SIOCGIFINDEX-bpf$PROG_LOAD_XDP-bpf$PROG_LOAD_XDP-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-socket$nl_route-openat$cgroup_ro-write$cgroup_subtree-fsopen-fsconfig$FSCONFIG_CMD_RECONFIGURE-mmap-bpf$PROG_LOAD_XDP-mmap-syz_open_dev$dri-ioctl$DRM_IOCTL_MODE_ADDFB-ioctl$UDMABUF_CREATE-socket$nl_route-sendmsg$nl_route-socket$packet-ioctl$ifreq_SIOCGIFINDEX_batadv_hard-sendmsg$nl_route_sched-timer_create-timer_create-timer_settime-timer_settime-futex-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER
detailed listing:
executing program 0:
r0 = gettid()
r1 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', <r3=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffef9, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000ffff00000000001d3aaeddbf11d2f8000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e)
r6 = fsopen(&(0x7f0000000080)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000730102000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x1000000)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r7, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20})
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x100000000, 0x1000})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000df5030000000400000000000000", @ANYBLOB="00000000195000001c0012800c0001006d6163766c616e000c0002800800010008000000140035006d6163766c616e30"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048040}, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc))
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r11=>0x0)
timer_settime(r11, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0)
timer_settime(r11, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x77359400}}, 0x0)
futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$nl_netfilter-bpf$PROG_LOAD_XDP-sendmsg$IPCTNL_MSG_CT_NEW-sendmsg$IPCTNL_MSG_CT_NEW
detailed listing:
executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a0f8ff4100000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x96, &(0x7f0000000240)=""/150, 0x40f00, 0xa}, 0x94)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020800034000000002240001801400018008000100e000000108000200e00000010c0002800500010000000000040016404400108008000140fffff800080002400000000108000140ffff1fc508000140000006870800014000000004080003"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-syz_open_procfs-statx-ioctl$AUTOFS_DEV_IOCTL_VERSION-ioctl$UDMABUF_CREATE-recvmmsg
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
statx(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x4000, 0x2000})
recvmmsg(r2, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/2, 0x2}, {&(0x7f00000000c0)=""/25, 0x19}], 0x2}, 0x80000001}], 0x1, 0x0, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
single: successfully extracted reproducer
found reproducer with 13 syscalls
minimizing guilty program
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-syz_open_procfs-statx-ioctl$AUTOFS_DEV_IOCTL_VERSION-ioctl$UDMABUF_CREATE
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
statx(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r4=>r1}, './file0\x00'})
ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000080)={r4, 0x0, 0x4000, 0x2000})

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-syz_open_procfs-statx-ioctl$AUTOFS_DEV_IOCTL_VERSION
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
statx(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x200, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-syz_open_procfs-statx
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')
statx(r3, &(0x7f0000000340)='./file1\x00', 0x0, 0x200, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-syz_open_procfs
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net\x00')

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f00000034c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="f34843", 0xfe86}], 0x1, 0x0, 0x0, 0x40400c0}], 0x1, 0x2404d801)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY-accept4
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
accept4(r0, 0x0, 0x0, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg-setsockopt$ALG_SET_KEY
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2-bind$alg
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r1, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci-pwritev2
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
socket$alg(0x26, 0x5, 0x0)
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
pwritev2(r0, &(0x7f00000002c0)=[{&(0x7f0000000140)="b5c6", 0x2}, {0x0}], 0x2, 0x7ff, 0x6, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg-openat$nci
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
socket$alg(0x26, 0x5, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-socket$alg
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
socket$alg(0x26, 0x5, 0x0)

program did not crash
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$BPF_BTF_LOAD-openat$nci
detailed listing:
executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000007000000050000000100000fff030000100000000400000008000011005f00000061"], 0x0, 0x37, 0x0, 0x9}, 0x28)
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
testing program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=9m4.98101671s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
simplifying guilty program options
testing program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
extracting C reproducer
testing compiled C program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program did not crash
testing program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
validation run: crashed=true
testing program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
validation run: crashed=true
testing program (duration=9m4.98101671s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$nci
detailed listing:
executing program 0:
openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)

program crashed: BUG: MAX_LOCKDEP_KEYS too low!
validation run: crashed=true
reproducing took 2h8m55.563572252s
repro crashed as (corrupted=false):
BUG: MAX_LOCKDEP_KEYS too low!
turning off the locking correctness validator.
CPU: 1 UID: 0 PID: 23077 Comm: syz.2.12273 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 register_lock_class+0x2f0/0x31c kernel/locking/lockdep.c:1332
 __lock_acquire+0xc0/0x2f44 kernel/locking/lockdep.c:5112
 lock_acquire+0x140/0x368 kernel/locking/lockdep.c:5868
 touch_wq_lockdep_map+0xb4/0x15c kernel/workqueue.c:4029
 __flush_workqueue+0x110/0xd9c kernel/workqueue.c:4071
 drain_workqueue+0xa4/0x310 kernel/workqueue.c:4235
 destroy_workqueue+0xb0/0x6f0 kernel/workqueue.c:6053
 nci_unregister_device+0xb0/0x238 net/nfc/nci/core.c:1333
 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:168
 __fput+0x340/0x744 fs/file_table.c:510
 ____fput+0x20/0x30 fs/file_table.c:538
 task_work_run+0x1c4/0x254 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
 exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:88 [inline]
 el0_svc+0x18c/0x260 arch/arm64/kernel/entry-common.c:741
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:759
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594

final repro crashed as (corrupted=false):
BUG: MAX_LOCKDEP_KEYS too low!
turning off the locking correctness validator.
CPU: 1 UID: 0 PID: 23077 Comm: syz.2.12273 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
Call trace:
 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:499 (C)
 __dump_stack+0x30/0x40 lib/dump_stack.c:94
 dump_stack_lvl+0xd8/0x12c lib/dump_stack.c:120
 dump_stack+0x1c/0x28 lib/dump_stack.c:129
 register_lock_class+0x2f0/0x31c kernel/locking/lockdep.c:1332
 __lock_acquire+0xc0/0x2f44 kernel/locking/lockdep.c:5112
 lock_acquire+0x140/0x368 kernel/locking/lockdep.c:5868
 touch_wq_lockdep_map+0xb4/0x15c kernel/workqueue.c:4029
 __flush_workqueue+0x110/0xd9c kernel/workqueue.c:4071
 drain_workqueue+0xa4/0x310 kernel/workqueue.c:4235
 destroy_workqueue+0xb0/0x6f0 kernel/workqueue.c:6053
 nci_unregister_device+0xb0/0x238 net/nfc/nci/core.c:1333
 virtual_ncidev_close+0x5c/0xa0 drivers/nfc/virtual_ncidev.c:168
 __fput+0x340/0x744 fs/file_table.c:510
 ____fput+0x20/0x30 fs/file_table.c:538
 task_work_run+0x1c4/0x254 kernel/task_work.c:233
 resume_user_mode_work include/linux/resume_user_mode.h:50 [inline]
 __exit_to_user_mode_loop kernel/entry/common.c:67 [inline]
 exit_to_user_mode_loop+0x10c/0x17c kernel/entry/common.c:98
 __exit_to_user_mode_prepare include/linux/irq-entry-common.h:207 [inline]
 syscall_exit_to_user_mode_prepare include/linux/irq-entry-common.h:230 [inline]
 arm64_syscall_exit_to_user_mode arch/arm64/kernel/entry-common.c:88 [inline]
 el0_svc+0x18c/0x260 arch/arm64/kernel/entry-common.c:741
 el0t_64_sync_handler+0x48/0x148 arch/arm64/kernel/entry-common.c:759
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:594