Extracting prog: 50m15.508735858s
Minimizing prog: 2h41m34.162821259s
Simplifying prog options: 0s
Extracting C: 3m19.484689645s
Simplifying C: 20m26.924575786s


extracting reproducer from 74 programs
testing a last program of every proc
single: executing 24 programs separately with timeout 6m0s
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$MAP_CREATE
detailed listing:
executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000008008288"], 0x50)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-syz_usb_connect-socket$inet6_tcp-setsockopt$inet6_int-bind$inet6-listen-syz_init_net_socket$nl_rdma-sendmsg$netlink
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xffffffff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fcntl$dupfd-openat$uhid-socket$nl_route-sendmsg$nl_route-setsockopt$inet_int-bind$l2tp-socket$inet_mptcp-bind$inet-syz_emit_ethernet-write$UHID_DESTROY-write$UHID_INPUT-fsconfig$FSCONFIG_SET_STRING-bpf$PROG_LOAD-socket-prlimit64-bpf$MAP_CREATE_RINGBUF-sendmsg$DEVLINK_CMD_RATE_GET-write-openat$cgroup_ro-bpf$MAP_CREATE-bpf$BPF_LINK_CREATE_XDP-socket$nl_route-syz_open_dev$tty20-poll-ioctl$TCSETSW2-ioctl$TIOCSTI-sendmsg$nl_route_sched-socket$nl_generic-syz_genetlink_get_family_id$batadv
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2001e600f2ffff07001b0000001000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414aa030590781206183f25000000006700000089000064040000000000020018630100000003"], 0x0)
write$UHID_DESTROY(r2, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000011c0)={0x8, {"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", 0xfffffffffffffcb7}}, 0x1006)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480051ff", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf254a0000000f00a8007365636f6e646e616d650000080003000100000008000100706369001100020030"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0)
write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000190a000000020000ffffff7f10010000", @ANYRES32=r7, @ANYBLOB="f301eda498f30200"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
poll(&(0x7f0000000100)=[{r9, 0xa0}], 0x1, 0xffffffff)
ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000000)={0x1, 0x401, 0xfd, 0xb103, 0x1, "c74192f3b7e8720700000000004010ee0800", 0x2, 0xcd3dc55})
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x1b4, 0x24, 0x400, 0x2, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0xfff2}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x17c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xff, 0x2, 0x13, 0x1f, 0x15, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x100, 0x3, 0x93, 0x1b, 0x18, 0x14, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff0001, 0x0, 0x3, 0x1c, 0x12, 0x13, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x32d6, 0x5, 0xd, 0xc, 0xe, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x57, 0xfffffff8, 0x1, 0x1b, 0xb, 0x1b, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r10)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): bpf$PROG_LOAD-syz_usb_connect-socket$inet6_tcp-setsockopt$inet6_int-bind$inet6-listen-syz_init_net_socket$nl_rdma-sendmsg$netlink-socket$netlink-syz_open_dev$I2C-ioctl$I2C_RDWR
detailed listing:
executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r0, 0x4)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)={0x114, 0x30, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0xffffffff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767fc734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$netlink(0x10, 0x3, 0x4)
r2 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x1000, 0x3801, 0x0, 0x0}, {0x2, 0x801, 0x7, &(0x7f0000000200)="3368dac2458329"}], 0x2})

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): fsopen-fcntl$dupfd-openat$uhid-socket$nl_route-sendmsg$nl_route-setsockopt$inet_int-bind$l2tp-socket$inet_mptcp-bind$inet-syz_emit_ethernet-write$UHID_DESTROY-write$UHID_INPUT-fsconfig$FSCONFIG_SET_STRING-bpf$PROG_LOAD-socket-prlimit64-bpf$MAP_CREATE_RINGBUF-sendmsg$DEVLINK_CMD_RATE_GET-write-openat$cgroup_ro-bpf$MAP_CREATE-bpf$BPF_LINK_CREATE_XDP-socket$nl_route-syz_open_dev$tty20-poll-ioctl$TCSETSW2-ioctl$TIOCSTI-sendmsg$nl_route_sched-socket$nl_generic-syz_genetlink_get_family_id$batadv
detailed listing:
executing program 0:
r0 = fsopen(&(0x7f0000000700)='bpf\x00', 0x1)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010829bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2e2001e600f2ffff07001b0000001000"], 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x40014)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0)
bind$l2tp(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @empty, 0x3}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800451000380080000000019078ac1e0001ac1414aa030590781206183f25000000006700000089000064040000000000020018630100000003"], 0x0)
write$UHID_DESTROY(r2, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000011c0)={0x8, {"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", 0xfffffffffffffcb7}}, 0x1006)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000480)='mode\x00E5\xf6\xc5\xce\xce\xf7\xcd\x94;\xa4\xcb\xc1\a\xccx\xdc\x00\xb6', &(0x7f0000000140)='7', 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480051ff", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf254a0000000f00a8007365636f6e646e616d650000080003000100000008000100706369001100020030"], 0x48}, 0x1, 0x0, 0x0, 0x4500}, 0x240001d0)
write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000190a000000020000ffffff7f10010000", @ANYRES32=r7, @ANYBLOB="f301eda498f30200"/26, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000000000000300"/28], 0x50)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_open_dev$tty20(0xc, 0x4, 0x1)
poll(&(0x7f0000000100)=[{r9, 0xa0}], 0x1, 0xffffffff)
ioctl$TCSETSW2(r9, 0x402c542c, &(0x7f0000000000)={0x1, 0x401, 0xfd, 0xb103, 0x1, "c74192f3b7e8720700000000004010ee0800", 0x2, 0xcd3dc55})
ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x1b4, 0x24, 0x400, 0x2, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0xfff2}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x17c, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x6, 0xff, 0x2, 0x13, 0x1f, 0x15, 0x6}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x100, 0x3, 0x93, 0x1b, 0x18, 0x14, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xffff0001, 0x0, 0x3, 0x1c, 0x12, 0x13, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x3, 0x32d6, 0x5, 0xd, 0xc, 0xe, 0x1}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x57, 0xfffffff8, 0x1, 0x1b, 0xb, 0x1b, 0x3}}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r10)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socketpair$unix-splice-socket$unix-sendmsg$L2TP_CMD_NOOP-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-ioctl$VIDIOC_G_FMT-syz_open_dev$MSR-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmsg-setsockopt$inet_int-read$msr-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_route-syz_open_dev$vbi-set_mempolicy-ioctl$VIDIOC_S_INPUT
detailed listing:
executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"})
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200, &(0x7f0000000280))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)
r6 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): pipe-socketpair$unix-splice-socket$unix-sendmsg$L2TP_CMD_NOOP-socket$nl_generic-prlimit64-sched_setscheduler-sched_setaffinity-prctl$PR_SCHED_CORE-ioctl$VIDIOC_G_FMT-syz_open_dev$MSR-socket$alg-bind$alg-setsockopt$ALG_SET_KEY-accept4-sendmmsg$alg-recvmsg-setsockopt$inet_int-read$msr-prctl$PR_SET_SYSCALL_USER_DISPATCH_ON-socket$nl_route-sendmsg$nl_route_sched-sendmsg$nl_route-syz_open_dev$vbi-set_mempolicy-ioctl$VIDIOC_S_INPUT
detailed listing:
executing program 0:
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0xf3a, 0x0)
socket$unix(0x1, 0x1, 0x0)
sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x6, @raw_data="a5ca3354ab28de31bd93c26bd64d7bf250bcece4a58b1106d332fa7e1bb0444726d117b633124532524331259eaa03f9940b0a32d107a477724ff80b36b42487579f363b8e5610a08d8a0a12d1ada6944600a37331d008f81a320c3a85daf423dff45be2f01ebd9aae667ed95076ff9e27abf9327382593d33543d09e008931ce64fcb93f9092f36a7d01153df0323d10b5131f0e012d6f6bb7da8a72daaccc16ef2580ee1b9205a4291527255a77c32da0de9cb1e870be47419492ade788ccd03de171beda98f00"})
r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000040)=0x4, 0x4)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x200, &(0x7f0000000280))
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtaction={0x64, 0x30, 0x301, 0x0, 0xfffffffd, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x800, 0x3, 0xd, 0x6}, 0x29}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48020}, 0x20000840)
r6 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2)
set_mempolicy(0x2002, &(0x7f0000000080)=0x9, 0x9)
ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f0000000100)=0x3)

program did not crash
testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID-syz_open_procfs-write$cgroup_int-bpf$ITER_CREATE-bpf$PROG_LOAD_XDP-bind$x25
detailed listing:
executing program 0:
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r4, r3, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r5, 0x400455c8, 0x0)
r6 = fsmount(r1, 0x0, 0x2)
fchdir(r6)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r8 = open_tree(r7, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r9, r9)
setpgid(0x0, r9)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', <r10=>0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r12, &(0x7f0000000080)=0x800, 0x12)
r13 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r8}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="18130000", @ANYRES32=r8, @ANYBLOB="0000000000000009000000181100"/28, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000000400000003910200100000006552010004000000180000009c34000000000000f10000007a3b800004000000013a0800fcffffff18000000010000000000000051000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x9, &(0x7f0000000240)=""/9, 0x41000, 0x6d, '\x00', r10, 0x25, r11, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r6, r1, r12, 0x1, 0xffffffffffffffff, r8, r13], &(0x7f0000000540)=[{0x4, 0x3, 0x0, 0x9}, {0x2, 0x5, 0x5, 0x6}, {0x2, 0x2, 0xb, 0x4}, {0x3, 0x4, 0xd, 0x6}, {0x2, 0x1, 0x6, 0x5}, {0x0, 0x5, 0x6, 0xc}], 0x10, 0xf780}, 0x94)
bind$x25(r0, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)

program crashed: WARNING in print_bfs_bug
single: successfully extracted reproducer
found reproducer with 30 syscalls
minimizing guilty program
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID-syz_open_procfs-write$cgroup_int-bpf$ITER_CREATE-bpf$PROG_LOAD_XDP
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', <r9=>0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r11, &(0x7f0000000080)=0x800, 0x12)
r12 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r7}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="18130000", @ANYRES32=r7, @ANYBLOB="0000000000000009000000181100"/28, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000000400000003910200100000006552010004000000180000009c34000000000000f10000007a3b800004000000013a0800fcffffff18000000010000000000000051000000"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x9, &(0x7f0000000240)=""/9, 0x41000, 0x6d, '\x00', r9, 0x25, r10, 0x8, &(0x7f0000000440)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x1, 0xc, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000500)=[r5, r0, r11, 0x1, 0xffffffffffffffff, r7, r12], &(0x7f0000000540)=[{0x4, 0x3, 0x0, 0x9}, {0x2, 0x5, 0x5, 0x6}, {0x2, 0x2, 0xb, 0x4}, {0x3, 0x4, 0xd, 0x6}, {0x2, 0x1, 0x6, 0x5}, {0x0, 0x5, 0x6, 0xc}], 0x10, 0xf780}, 0x94)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID-syz_open_procfs-write$cgroup_int-bpf$ITER_CREATE
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r9, &(0x7f0000000080)=0x800, 0x12)
bpf$ITER_CREATE(0x21, &(0x7f00000004c0)={r7}, 0x8)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID-syz_open_procfs-write$cgroup_int
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')
write$cgroup_int(r9, &(0x7f0000000080)=0x800, 0x12)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID-syz_open_procfs
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00')

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL-bpf$BPF_BTF_GET_FD_BY_ID
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0)=0xffffffffffffffff, 0x4)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat-ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
r7 = open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r8, r8)
setpgid(0x0, r8)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x2, 0x4, 0xfffffffd, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x7800, 0x7801, 0x8, 0x7fffffff}})

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid-lstat
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)
lstat(&(0x7f00000002c0)='./file0\x00', 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid-setpgid
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)
setpgid(0x0, r7)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone-setpgid
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r7, r7)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-rmdir
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
rmdir(&(0x7f0000000000)='./file0\x00')

program did not crash
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-open_tree-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
open_tree(r6, &(0x7f0000000040)='./file0\x00', 0x89901)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-openat2$dir-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x600003, 0x101, 0x9}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-mkdirat-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-fchdir-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
r5 = fsmount(r0, 0x0, 0x2)
fchdir(r5)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-fsmount-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
fsmount(r0, 0x0, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TIOCSETD-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-openat$ptmx-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: lost connection to test machine
suppressed program crash: lost connection to test machine
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-setsockopt$bt_hci_HCI_FILTER-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000200)={0xfffa, [0x80000007, 0xffffffff]}, 0x10)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-bind$bt_hci-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r3, r2, &(0x7f00000000c0)=0x8b, 0x100000500)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-sendfile-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x8b, 0x100000500)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$sysctl-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$procfs-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-syz_init_net_socket$bt_hci-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-fsconfig$FSCONFIG_CMD_CREATE-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-fsconfig$FSCONFIG_SET_FD-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-fsopen-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
fsopen(&(0x7f0000000080)='autofs\x00', 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$x25-openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=7m7.792485336s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
simplifying C reproducer
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: no output from test machine
a never seen crash title: no output from test machine, ignore
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing compiled C program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
program crashed: WARNING in print_bfs_bug
testing program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
validation run: crashed=true
testing program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
validation run: crashed=true
testing program (duration=7m7.792485336s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$ptmx-ioctl$TIOCSETD-ioctl$TCFLSH-syz_clone
detailed listing:
executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

program crashed: WARNING in print_bfs_bug
validation run: crashed=true
reproducing took 4h6m46.513520071s
repro crashed as (corrupted=false):
Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning:
------------[ cut here ]------------
lockdep bfs error:-1
WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x24/0x40 kernel/locking/lockdep.c:2059, CPU#1: kworker/u8:9/1112
Modules linked in:
CPU: 1 UID: 0 PID: 1112 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: events_unbound flush_to_ldisc
RIP: 0010:print_bfs_bug+0x26/0x40 kernel/locking/lockdep.c:2059
Code: 90 90 90 90 55 53 89 fb e8 37 44 35 03 89 c5 e8 20 ff ff ff 85 ed 74 17 83 fb ff 0f 84 e8 6d 3c ff 48 8d 3d fc 93 40 0f 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00
RSP: 0018:ffffc90000a08368 EFLAGS: 00010082
RAX: 000000000000003b RBX: 00000000ffffffff RCX: 0000000000000000
RDX: 000000000000003b RSI: 00000000ffffffff RDI: ffffffff91261ab0
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000506 R11: fffffffffffe53a8 R12: ffffc90000a083e0
R13: ffff888026f3d850 R14: ffffc90000a08420 R15: ffff888026f3ca80
FS:  0000000000000000(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff823ded158 CR3: 0000000075f0f000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 check_irq_usage+0x332/0x810 kernel/locking/lockdep.c:2816
 check_prev_add+0xfe/0xe60 kernel/locking/lockdep.c:3169
 check_prevs_add kernel/locking/lockdep.c:3284 [inline]
 validate_chain kernel/locking/lockdep.c:3908 [inline]
 __lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
 lock_acquire kernel/locking/lockdep.c:5868 [inline]
 lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
 __raw_spin_lock include/linux/spinlock_api_smp.h:158 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:158
 class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline]
 pcpu_alloc+0x1d4/0x350 lib/debugobjects.c:281
 alloc_object lib/debugobjects.c:475 [inline]
 lookup_object_or_alloc.part.0+0xc7/0x4f0 lib/debugobjects.c:702
 lookup_object_or_alloc lib/debugobjects.c:682 [inline]
 debug_object_activate+0x2fd/0x4b0 lib/debugobjects.c:875
 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
 __call_rcu_common.constprop.0+0x35/0x9b0 kernel/rcu/tree.c:3144
 xa_node_free lib/xarray.c:260 [inline]
 xas_delete_node lib/xarray.c:503 [inline]
 update_node lib/xarray.c:767 [inline]
 xas_store+0xccb/0x1a30 lib/xarray.c:852
 __xa_erase+0xb6/0x150 lib/xarray.c:1649
 xa_erase+0x24/0x40 lib/xarray.c:1670
 hsr_forget_seq_block net/hsr/hsr_framereg.c:319 [inline]
 hsr_get_seq_block+0x3f4/0x510 net/hsr/hsr_framereg.c:339
 hsr_check_duplicate.isra.0+0x7f/0x120 net/hsr/hsr_framereg.c:601
 hsr_forward_do net/hsr/hsr_forward.c:550 [inline]
 hsr_forward_skb+0xbb7/0x28d0 net/hsr/hsr_forward.c:743
 send_hsr_supervision_frame+0x696/0xbc0 net/hsr/hsr_device.c:364
 hsr_announce+0x169/0x3e0 net/hsr/hsr_device.c:421
 call_timer_fn+0x19a/0x610 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers+0x757/0xb00 kernel/time/timer.c:2374
 __run_timer_base kernel/time/timer.c:2386 [inline]
 __run_timer_base kernel/time/timer.c:2378 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2395
 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405
 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:console_flush_one_record+0xac3/0xe50 kernel/printk/printk.c:3270
Code: 00 e8 71 25 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf d1 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
RSP: 0018:ffffc900057c7660 EFLAGS: 00000293
RAX: ffffffff8f9ace58 RBX: ffffffff8f9ace00 RCX: ffffffff81e88ac1
RDX: ffff888026f3ca80 RSI: ffffffff81e88acf RDI: ffff888026f3ca80
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000028b5
R13: ffffffff8f9ace58 R14: ffffc900057c76e0 R15: dffffc0000000000
 console_flush_all kernel/printk/printk.c:3343 [inline]
 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
 console_unlock+0x103/0x260 kernel/printk/printk.c:3413
 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
 _printk+0xcf/0x110 kernel/printk/printk.c:2504
 bt_err+0xec/0x122 net/bluetooth/lib.c:293
 h4_recv+0x152/0x1d0 drivers/bluetooth/hci_h4.c:119
 hci_uart_tty_receive+0x254/0x750 drivers/bluetooth/hci_ldisc.c:660
 tty_ldisc_receive_buf+0x15a/0x1a0 drivers/tty/tty_buffer.c:398
 tty_port_default_receive_buf+0x70/0xb0 drivers/tty/tty_port.c:37
 receive_buf drivers/tty/tty_buffer.c:452 [inline]
 flush_to_ldisc+0x26b/0x730 drivers/tty/tty_buffer.c:502
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	90                   	nop
   2:	90                   	nop
   3:	90                   	nop
   4:	55                   	push   %rbp
   5:	53                   	push   %rbx
   6:	89 fb                	mov    %edi,%ebx
   8:	e8 37 44 35 03       	call   0x3354444
   d:	89 c5                	mov    %eax,%ebp
   f:	e8 20 ff ff ff       	call   0xffffff34
  14:	85 ed                	test   %ebp,%ebp
  16:	74 17                	je     0x2f
  18:	83 fb ff             	cmp    $0xffffffff,%ebx
  1b:	0f 84 e8 6d 3c ff    	je     0xff3c6e09
  21:	48 8d 3d fc 93 40 0f 	lea    0xf4093fc(%rip),%rdi        # 0xf409424
  28:	89 de                	mov    %ebx,%esi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	5b                   	pop    %rbx
  30:	5d                   	pop    %rbp
  31:	c3                   	ret
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	66                   	data16
  37:	66                   	data16
  38:	2e                   	cs
  39:	0f                   	.byte 0xf
  3a:	1f                   	(bad)
  3b:	84 00                	test   %al,(%rax)
  3d:	00 00                	add    %al,(%rax)

final repro crashed as (corrupted=false):
Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning:
------------[ cut here ]------------
lockdep bfs error:-1
WARNING: kernel/locking/lockdep.c:2059 at print_bfs_bug+0x24/0x40 kernel/locking/lockdep.c:2059, CPU#1: kworker/u8:9/1112
Modules linked in:
CPU: 1 UID: 0 PID: 1112 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
Workqueue: events_unbound flush_to_ldisc
RIP: 0010:print_bfs_bug+0x26/0x40 kernel/locking/lockdep.c:2059
Code: 90 90 90 90 55 53 89 fb e8 37 44 35 03 89 c5 e8 20 ff ff ff 85 ed 74 17 83 fb ff 0f 84 e8 6d 3c ff 48 8d 3d fc 93 40 0f 89 de <67> 48 0f b9 3a 5b 5d c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00
RSP: 0018:ffffc90000a08368 EFLAGS: 00010082
RAX: 000000000000003b RBX: 00000000ffffffff RCX: 0000000000000000
RDX: 000000000000003b RSI: 00000000ffffffff RDI: ffffffff91261ab0
RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000
R10: 0000000000000506 R11: fffffffffffe53a8 R12: ffffc90000a083e0
R13: ffff888026f3d850 R14: ffffc90000a08420 R15: ffff888026f3ca80
FS:  0000000000000000(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007ff823ded158 CR3: 0000000075f0f000 CR4: 00000000003526f0
Call Trace:
 <IRQ>
 check_irq_usage+0x332/0x810 kernel/locking/lockdep.c:2816
 check_prev_add+0xfe/0xe60 kernel/locking/lockdep.c:3169
 check_prevs_add kernel/locking/lockdep.c:3284 [inline]
 validate_chain kernel/locking/lockdep.c:3908 [inline]
 __lock_acquire+0x136c/0x1a40 kernel/locking/lockdep.c:5237
 lock_acquire kernel/locking/lockdep.c:5868 [inline]
 lock_acquire+0x1b9/0x370 kernel/locking/lockdep.c:5825
 __raw_spin_lock include/linux/spinlock_api_smp.h:158 [inline]
 _raw_spin_lock+0x2e/0x40 kernel/locking/spinlock.c:158
 class_raw_spinlock_constructor include/linux/spinlock.h:535 [inline]
 pcpu_alloc+0x1d4/0x350 lib/debugobjects.c:281
 alloc_object lib/debugobjects.c:475 [inline]
 lookup_object_or_alloc.part.0+0xc7/0x4f0 lib/debugobjects.c:702
 lookup_object_or_alloc lib/debugobjects.c:682 [inline]
 debug_object_activate+0x2fd/0x4b0 lib/debugobjects.c:875
 debug_rcu_head_queue kernel/rcu/rcu.h:236 [inline]
 __call_rcu_common.constprop.0+0x35/0x9b0 kernel/rcu/tree.c:3144
 xa_node_free lib/xarray.c:260 [inline]
 xas_delete_node lib/xarray.c:503 [inline]
 update_node lib/xarray.c:767 [inline]
 xas_store+0xccb/0x1a30 lib/xarray.c:852
 __xa_erase+0xb6/0x150 lib/xarray.c:1649
 xa_erase+0x24/0x40 lib/xarray.c:1670
 hsr_forget_seq_block net/hsr/hsr_framereg.c:319 [inline]
 hsr_get_seq_block+0x3f4/0x510 net/hsr/hsr_framereg.c:339
 hsr_check_duplicate.isra.0+0x7f/0x120 net/hsr/hsr_framereg.c:601
 hsr_forward_do net/hsr/hsr_forward.c:550 [inline]
 hsr_forward_skb+0xbb7/0x28d0 net/hsr/hsr_forward.c:743
 send_hsr_supervision_frame+0x696/0xbc0 net/hsr/hsr_device.c:364
 hsr_announce+0x169/0x3e0 net/hsr/hsr_device.c:421
 call_timer_fn+0x19a/0x610 kernel/time/timer.c:1748
 expire_timers kernel/time/timer.c:1799 [inline]
 __run_timers+0x757/0xb00 kernel/time/timer.c:2374
 __run_timer_base kernel/time/timer.c:2386 [inline]
 __run_timer_base kernel/time/timer.c:2378 [inline]
 run_timer_base+0x114/0x190 kernel/time/timer.c:2395
 run_timer_softirq+0x1a/0x50 kernel/time/timer.c:2405
 handle_softirqs+0x1ea/0x9b0 kernel/softirq.c:622
 __do_softirq kernel/softirq.c:656 [inline]
 invoke_softirq kernel/softirq.c:496 [inline]
 __irq_exit_rcu+0x162/0x210 kernel/softirq.c:735
 irq_exit_rcu+0x9/0x30 kernel/softirq.c:752
 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1062 [inline]
 sysvec_apic_timer_interrupt+0xa3/0xc0 arch/x86/kernel/apic/apic.c:1062
 </IRQ>
 <TASK>
 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:674
RIP: 0010:console_flush_one_record+0xac3/0xe50 kernel/printk/printk.c:3270
Code: 00 e8 71 25 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 bf d1 21 00 48 85 ed 0f 85 d7 01 00 00 e8 11 d7 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b
RSP: 0018:ffffc900057c7660 EFLAGS: 00000293
RAX: ffffffff8f9ace58 RBX: ffffffff8f9ace00 RCX: ffffffff81e88ac1
RDX: ffff888026f3ca80 RSI: ffffffff81e88acf RDI: ffff888026f3ca80
RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000
R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000028b5
R13: ffffffff8f9ace58 R14: ffffc900057c76e0 R15: dffffc0000000000
 console_flush_all kernel/printk/printk.c:3343 [inline]
 __console_flush_and_unlock kernel/printk/printk.c:3373 [inline]
 console_unlock+0x103/0x260 kernel/printk/printk.c:3413
 vprintk_emit+0x407/0x6b0 kernel/printk/printk.c:2479
 _printk+0xcf/0x110 kernel/printk/printk.c:2504
 bt_err+0xec/0x122 net/bluetooth/lib.c:293
 h4_recv+0x152/0x1d0 drivers/bluetooth/hci_h4.c:119
 hci_uart_tty_receive+0x254/0x750 drivers/bluetooth/hci_ldisc.c:660
 tty_ldisc_receive_buf+0x15a/0x1a0 drivers/tty/tty_buffer.c:398
 tty_port_default_receive_buf+0x70/0xb0 drivers/tty/tty_port.c:37
 receive_buf drivers/tty/tty_buffer.c:452 [inline]
 flush_to_ldisc+0x26b/0x730 drivers/tty/tty_buffer.c:502
 process_one_work+0xa23/0x1940 kernel/workqueue.c:3322
 process_scheduled_works kernel/workqueue.c:3405 [inline]
 worker_thread+0x5ef/0xe50 kernel/workqueue.c:3486
 kthread+0x370/0x450 kernel/kthread.c:436
 ret_from_fork+0x72b/0xd50 arch/x86/kernel/process.c:158
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
----------------
Code disassembly (best guess):
   0:	90                   	nop
   1:	90                   	nop
   2:	90                   	nop
   3:	90                   	nop
   4:	55                   	push   %rbp
   5:	53                   	push   %rbx
   6:	89 fb                	mov    %edi,%ebx
   8:	e8 37 44 35 03       	call   0x3354444
   d:	89 c5                	mov    %eax,%ebp
   f:	e8 20 ff ff ff       	call   0xffffff34
  14:	85 ed                	test   %ebp,%ebp
  16:	74 17                	je     0x2f
  18:	83 fb ff             	cmp    $0xffffffff,%ebx
  1b:	0f 84 e8 6d 3c ff    	je     0xff3c6e09
  21:	48 8d 3d fc 93 40 0f 	lea    0xf4093fc(%rip),%rdi        # 0xf409424
  28:	89 de                	mov    %ebx,%esi
* 2a:	67 48 0f b9 3a       	ud1    (%edx),%rdi <-- trapping instruction
  2f:	5b                   	pop    %rbx
  30:	5d                   	pop    %rbp
  31:	c3                   	ret
  32:	cc                   	int3
  33:	cc                   	int3
  34:	cc                   	int3
  35:	cc                   	int3
  36:	66                   	data16
  37:	66                   	data16
  38:	2e                   	cs
  39:	0f                   	.byte 0xf
  3a:	1f                   	(bad)
  3b:	84 00                	test   %al,(%rax)
  3d:	00 00                	add    %al,(%rax)