Extracting prog: 2m49.965036687s
Minimizing prog: 24m55.977858327s
Simplifying prog options: 5m6.395979581s
Extracting C: 2m17.52352035s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(0xffffffffffffffff, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$eJzs3b9ra1UcAPDvbdIk6pAMTiJ4QQen0nZ1SZEWipmUDOqgxbYgTRBaKPgDYydXF0f/AkFw859wcXAXXB+87XUo3MdN7n1J+5K85vWlfT8+n6Wn557vOd9zemjpkO/98u3+0X4ah2c//BeNRhIr7WjHeRKtWInST3FJ+5cAAF5k51kW97ORReKSiGgsLy0AYIkW/vv/59JTAgCW7JNPP/toq9PZ/jhNG7HT//m0m/9nn38dPd86jK+jFwexHs24iMgeGbV3siwbVNNcK97rD067eWT/i7+L+bfuRQzjN6IZrWHX5fjdzvZGOjIRP8jzeL1Yv53Hb0Yz3pyy/m5ne3NKfHRr8f67E/mvRTP++Sq+iV7sD5MYx/+4kaYfZr8++P7zPL08PhmcduvDcWNZ5ZZ/NAAAAAAAAAAAAAAAAAAAAAAAvMTWito59RjW78m7ivo7lYv8m9VIS63L9XlG8Uk50ZX6QIMsfivr66ynaZoVA8fx1XirGtW72TUAAAAAAAAAAAAAAAAAAAA8X06+/e5or9c7OL5Zo5inrAZQfqz/aSdsT/S8E1kzYvbg+nitlaI5Z+aolGOSiLlp5Ju46bFcs/HarJx//2PRCRtPHrM673yeTaO8XUd7yfQzrEfZ0ygvyV+TY2pxzbVqsx5lC12/2tRHzWmDK/OuTe2NYWMwZ61I5iX2wf+jkyt6kqu7qA1PdWr4atGYCL9yNxa6z4//rkhU6wAAAAAAAAAAAAAAAAAAgKUaf+h3ysOzGUH/7o5e8l9fcnIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvG7/9foDEogq8xuBbHJ3e8RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BDwMAAP//CD5mIg==")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
validation run: crashed=true
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
validation run: crashed=true
reproducing took 37m48.329903475s
repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff800000000026
KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137]
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff800000000026] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4434 Comm: kworker/0:21 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events l2cap_info_timeout
pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __lock_acquire+0xe0/0x6544 kernel/locking/lockdep.c:4919
lr : lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
sp : ffff8000213e75e0
x29: ffff8000213e77f0 x28: dfff800000000000 x27: 0000000000000000
x26: ffff800010c14df8 x25: 1ffff00002a180b0 x24: 0000000000000000
x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000
x20: 0000000000000130 x19: 0000000000000000 x18: ffff800011abbcc0
x17: ffff8000181f9000 x16: ffff8000082d25ac x15: ffff800017cda000
x14: ffff0000d5efddd8 x13: ffff0000d5efde78 x12: 0000000000ff0100
x11: ff0080000a894400 x10: ffff70000427cedc x9 : ffff8000150c0584
x8 : 0000000000000026 x7 : ffff800010c14df8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000130
Call trace:
 __lock_acquire+0xe0/0x6544 kernel/locking/lockdep.c:4919
 lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
 lock_sock_nested+0x70/0x130 net/core/sock.c:3493
 lock_sock include/net/sock.h:1792 [inline]
 l2cap_sock_ready_cb+0x4c/0x130 net/bluetooth/l2cap_sock.c:1697
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1410 [inline]
 l2cap_conn_start+0x594/0xb38 net/bluetooth/l2cap_core.c:1669
 l2cap_info_timeout+0x68/0xb8 net/bluetooth/l2cap_core.c:1836
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: b0067488 b9482108 340001c8 d343fe88 (387c6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	b0067488 	adrp	x8, 0xce91000
   4:	b9482108 	ldr	w8, [x8, #2080]
   8:	340001c8 	cbz	w8, 0x40
   c:	d343fe88 	lsr	x8, x20, #3
* 10:	387c6908 	ldrb	w8, [x8, x28] <-- trapping instruction

final repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff800000000026
KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137]
Mem abort info:
  ESR = 0x0000000096000006
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x06: level 2 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000006
  CM = 0, WnR = 0
[dfff800000000026] address between user and kernel address ranges
Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP
Modules linked in:
CPU: 0 PID: 4434 Comm: kworker/0:21 Not tainted syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
Workqueue: events l2cap_info_timeout
pstate: 824000c5 (Nzcv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
pc : __lock_acquire+0xe0/0x6544 kernel/locking/lockdep.c:4919
lr : lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
sp : ffff8000213e75e0
x29: ffff8000213e77f0 x28: dfff800000000000 x27: 0000000000000000
x26: ffff800010c14df8 x25: 1ffff00002a180b0 x24: 0000000000000000
x23: 0000000000000000 x22: 0000000000000000 x21: 0000000000000000
x20: 0000000000000130 x19: 0000000000000000 x18: ffff800011abbcc0
x17: ffff8000181f9000 x16: ffff8000082d25ac x15: ffff800017cda000
x14: ffff0000d5efddd8 x13: ffff0000d5efde78 x12: 0000000000ff0100
x11: ff0080000a894400 x10: ffff70000427cedc x9 : ffff8000150c0584
x8 : 0000000000000026 x7 : ffff800010c14df8 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000130
Call trace:
 __lock_acquire+0xe0/0x6544 kernel/locking/lockdep.c:4919
 lock_acquire+0x20c/0x644 kernel/locking/lockdep.c:5662
 lock_sock_nested+0x70/0x130 net/core/sock.c:3493
 lock_sock include/net/sock.h:1792 [inline]
 l2cap_sock_ready_cb+0x4c/0x130 net/bluetooth/l2cap_sock.c:1697
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1410 [inline]
 l2cap_conn_start+0x594/0xb38 net/bluetooth/l2cap_core.c:1669
 l2cap_info_timeout+0x68/0xb8 net/bluetooth/l2cap_core.c:1836
 process_one_work+0x7f4/0x13a8 kernel/workqueue.c:2292
 worker_thread+0x8c8/0xfbc kernel/workqueue.c:2439
 kthread+0x250/0x2d8 kernel/kthread.c:376
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850
Code: b0067488 b9482108 340001c8 d343fe88 (387c6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	b0067488 	adrp	x8, 0xce91000
   4:	b9482108 	ldr	w8, [x8, #2080]
   8:	340001c8 	cbz	w8, 0x40
   c:	d343fe88 	lsr	x8, x20, #3
* 10:	387c6908 	ldrb	w8, [x8, x28] <-- trapping instruction