Extracting prog: 3m16.211734776s
Minimizing prog: 26m46.22630048s
Simplifying prog options: 5m20.639292009s
Extracting C: 2m22.937635198s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$eJzs3b9ra1UcAPDvbdIk6pAMTiJ4QQen0nZ1SZEWipmUDOqgxbYgTRBaKPgDYydXF0f/AkFw859wcXAXXB+87XUo3MdN7n1J+5K85vWlfT8+n6Wn557vOd9zemjpkO/98u3+0X4ah2c//BeNRhIr7WjHeRKtWInST3FJ+5cAAF5k51kW97ORReKSiGgsLy0AYIkW/vv/59JTAgCW7JNPP/toq9PZ/jhNG7HT//m0m/9nn38dPd86jK+jFwexHs24iMgeGbV3siwbVNNcK97rD067eWT/i7+L+bfuRQzjN6IZrWHX5fjdzvZGOjIRP8jzeL1Yv53Hb0Yz3pyy/m5ne3NKfHRr8f67E/mvRTP++Sq+iV7sD5MYx/+4kaYfZr8++P7zPL08PhmcduvDcWNZ5ZZ/NAAAAAAAAAAAAAAAAAAAAAAAvMTWito59RjW78m7ivo7lYv8m9VIS63L9XlG8Uk50ZX6QIMsfivr66ynaZoVA8fx1XirGtW72TUAAAAAAAAAAAAAAAAAAAA8X06+/e5or9c7OL5Zo5inrAZQfqz/aSdsT/S8E1kzYvbg+nitlaI5Z+aolGOSiLlp5Ju46bFcs/HarJx//2PRCRtPHrM673yeTaO8XUd7yfQzrEfZ0ygvyV+TY2pxzbVqsx5lC12/2tRHzWmDK/OuTe2NYWMwZ61I5iX2wf+jkyt6kqu7qA1PdWr4atGYCL9yNxa6z4//rkhU6wAAAAAAAAAAAAAAAAAAgKUaf+h3ysOzGUH/7o5e8l9fcnIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvG7/9foDEogq8xuBbHJ3e8RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BDwMAAP//CD5mIg==")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$eJzs3b9ra1UcAPDvbdIk6pAMTiJ4QQen0nZ1SZEWipmUDOqgxbYgTRBaKPgDYydXF0f/AkFw859wcXAXXB+87XUo3MdN7n1J+5K85vWlfT8+n6Wn557vOd9zemjpkO/98u3+0X4ah2c//BeNRhIr7WjHeRKtWInST3FJ+5cAAF5k51kW97ORReKSiGgsLy0AYIkW/vv/59JTAgCW7JNPP/toq9PZ/jhNG7HT//m0m/9nn38dPd86jK+jFwexHs24iMgeGbV3siwbVNNcK97rD067eWT/i7+L+bfuRQzjN6IZrWHX5fjdzvZGOjIRP8jzeL1Yv53Hb0Yz3pyy/m5ne3NKfHRr8f67E/mvRTP++Sq+iV7sD5MYx/+4kaYfZr8++P7zPL08PhmcduvDcWNZ5ZZ/NAAAAAAAAAAAAAAAAAAAAAAAvMTWito59RjW78m7ivo7lYv8m9VIS63L9XlG8Uk50ZX6QIMsfivr66ynaZoVA8fx1XirGtW72TUAAAAAAAAAAAAAAAAAAAA8X06+/e5or9c7OL5Zo5inrAZQfqz/aSdsT/S8E1kzYvbg+nitlaI5Z+aolGOSiLlp5Ju46bFcs/HarJx//2PRCRtPHrM673yeTaO8XUd7yfQzrEfZ0ygvyV+TY2pxzbVqsx5lC12/2tRHzWmDK/OuTe2NYWMwZ61I5iX2wf+jkyt6kqu7qA1PdWr4atGYCL9yNxa6z4//rkhU6wAAAAAAAAAAAAAAAAAAgKUaf+h3ysOzGUH/7o5e8l9fcnIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvG7/9foDEogq8xuBbHJ3e8RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BDwMAAP//CD5mIg==")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(0xffffffffffffffff, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$eJzs3b9ra1UcAPDvbdIk6pAMTiJ4QQen0nZ1SZEWipmUDOqgxbYgTRBaKPgDYydXF0f/AkFw859wcXAXXB+87XUo3MdN7n1J+5K85vWlfT8+n6Wn557vOd9zemjpkO/98u3+0X4ah2c//BeNRhIr7WjHeRKtWInST3FJ+5cAAF5k51kW97ORReKSiGgsLy0AYIkW/vv/59JTAgCW7JNPP/toq9PZ/jhNG7HT//m0m/9nn38dPd86jK+jFwexHs24iMgeGbV3siwbVNNcK97rD067eWT/i7+L+bfuRQzjN6IZrWHX5fjdzvZGOjIRP8jzeL1Yv53Hb0Yz3pyy/m5ne3NKfHRr8f67E/mvRTP++Sq+iV7sD5MYx/+4kaYfZr8++P7zPL08PhmcduvDcWNZ5ZZ/NAAAAAAAAAAAAAAAAAAAAAAAvMTWito59RjW78m7ivo7lYv8m9VIS63L9XlG8Uk50ZX6QIMsfivr66ynaZoVA8fx1XirGtW72TUAAAAAAAAAAAAAAAAAAAA8X06+/e5or9c7OL5Zo5inrAZQfqz/aSdsT/S8E1kzYvbg+nitlaI5Z+aolGOSiLlp5Ju46bFcs/HarJx//2PRCRtPHrM673yeTaO8XUd7yfQzrEfZ0ygvyV+TY2pxzbVqsx5lC12/2tRHzWmDK/OuTe2NYWMwZ61I5iX2wf+jkyt6kqu7qA1PdWr4atGYCL9yNxa6z4//rkhU6wAAAAAAAAAAAAAAAAAAgKUaf+h3ysOzGUH/7o5e8l9fcnIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvG7/9foDEogq8xuBbHJ3e8RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BDwMAAP//CD5mIg==")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$eJzs3b9ra1UcAPDvbdIk6pAMTiJ4QQen0nZ1SZEWipmUDOqgxbYgTRBaKPgDYydXF0f/AkFw859wcXAXXB+87XUo3MdN7n1J+5K85vWlfT8+n6Wn557vOd9zemjpkO/98u3+0X4ah2c//BeNRhIr7WjHeRKtWInST3FJ+5cAAF5k51kW97ORReKSiGgsLy0AYIkW/vv/59JTAgCW7JNPP/toq9PZ/jhNG7HT//m0m/9nn38dPd86jK+jFwexHs24iMgeGbV3siwbVNNcK97rD067eWT/i7+L+bfuRQzjN6IZrWHX5fjdzvZGOjIRP8jzeL1Yv53Hb0Yz3pyy/m5ne3NKfHRr8f67E/mvRTP++Sq+iV7sD5MYx/+4kaYfZr8++P7zPL08PhmcduvDcWNZ5ZZ/NAAAAAAAAAAAAAAAAAAAAAAAvMTWito59RjW78m7ivo7lYv8m9VIS63L9XlG8Uk50ZX6QIMsfivr66ynaZoVA8fx1XirGtW72TUAAAAAAAAAAAAAAAAAAAA8X06+/e5or9c7OL5Zo5inrAZQfqz/aSdsT/S8E1kzYvbg+nitlaI5Z+aolGOSiLlp5Ju46bFcs/HarJx//2PRCRtPHrM673yeTaO8XUd7yfQzrEfZ0ygvyV+TY2pxzbVqsx5lC12/2tRHzWmDK/OuTe2NYWMwZ61I5iX2wf+jkyt6kqu7qA1PdWr4atGYCL9yNxa6z4//rkhU6wAAAAAAAAAAAAAAAAAAgKUaf+h3ysOzGUH/7o5e8l9fcnIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEvG7/9foDEogq8xuBbHJ3e8RQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4BDwMAAP//CD5mIg==")
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r0, 0x0)
accept4$bt_l2cap(r0, 0x0, 0x0, 0x0)

program did not crash
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
program did not crash
simplifying guilty program options
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program crashed: BUG: unable to handle kernel paging request in lock_sock_nested
extracting C reproducer
testing compiled C program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
program did not crash
testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$vfat-mknodat$null-openat$fuse-mount$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-accept4$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000007c0)={[{@numtail}, {@fat=@check_strict}, {@fat=@umask={'umask', 0x3d, 0xbc18}}, {@uni_xlate}, {@uni_xlateno}, {@fat=@fmask={'fmask', 0x3d, 0x20}}, {@utf8no}, {@numtail}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlate}, {@fat=@time_offset={'time_offset', 0x3d, 0x1fb}}, {@fat=@debug}, {@uni_xlateno}, {@shortname_win95}]}, 0x6, 0x2ad, &(0x7f00000008c0)="$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")
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3}, 0xe)
listen(r1, 0x0)
accept4$bt_l2cap(r1, 0x0, 0x0, 0x0)

program did not crash
reproducing took 37m18.388768381s
repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff80000000004b
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[dfff80000000004b] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6625 Comm: kworker/1:6 Not tainted 6.13.0-rc2-syzkaller-g2e7aff49b5da #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events l2cap_info_timeout
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __lock_acquire+0xfc/0x7904 kernel/locking/lockdep.c:5089
lr : lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849
sp : ffff80009ff873e0
x29: ffff80009ff876a0 x28: ffff80008a879960 x27: 0000000000000000
x26: ffff0001b362f500 x25: 0000000000000000 x24: 0000000000000000
x23: 0000000000000000 x22: 1ffff00011f300ca x21: 0000000000000258
x20: 0000000000000001 x19: 0000000000000000 x18: ffff80009ff87220
x17: 0000000000021cbe x16: ffff80008326d6e4 x15: 0000000000000001
x14: 1fffe00019c76c21 x13: dfff800000000000 x12: ffff700013ff0ea4
x11: ffff8000804648c0 x10: ffff80008f980650 x9 : 00000000000000f3
x8 : 000000000000004b x7 : ffff80008a879960 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000258
Call trace:
 __lock_acquire+0xfc/0x7904 kernel/locking/lockdep.c:5089 (P)
 lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849 (L)
 lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849
 lock_sock_nested+0x5c/0x11c net/core/sock.c:3622
 lock_sock include/net/sock.h:1617 [inline]
 l2cap_sock_ready_cb+0x4c/0x130 net/bluetooth/l2cap_sock.c:1660
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1256 [inline]
 l2cap_conn_start+0x6f4/0xe70 net/bluetooth/l2cap_core.c:1506
 l2cap_info_timeout+0x68/0xb8 net/bluetooth/l2cap_core.c:1668
 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x97c/0xeec kernel/workqueue.c:3391
 kthread+0x288/0x310 kernel/kthread.c:389
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862
Code: 9007a8e8 b9465108 340090a8 d343fea8 (386d6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	9007a8e8 	adrp	x8, 0xf51c000
   4:	b9465108 	ldr	w8, [x8, #1616]
   8:	340090a8 	cbz	w8, 0x121c
   c:	d343fea8 	lsr	x8, x21, #3
* 10:	386d6908 	ldrb	w8, [x8, x13] <-- trapping instruction

final repro crashed as (corrupted=false):
Unable to handle kernel paging request at virtual address dfff80000000004b
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
Mem abort info:
  ESR = 0x0000000096000005
  EC = 0x25: DABT (current EL), IL = 32 bits
  SET = 0, FnV = 0
  EA = 0, S1PTW = 0
  FSC = 0x05: level 1 translation fault
Data abort info:
  ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000
  CM = 0, WnR = 0, TnD = 0, TagAccess = 0
  GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[dfff80000000004b] address between user and kernel address ranges
Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP
Modules linked in:
CPU: 1 UID: 0 PID: 6625 Comm: kworker/1:6 Not tainted 6.13.0-rc2-syzkaller-g2e7aff49b5da #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
Workqueue: events l2cap_info_timeout
pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
pc : __lock_acquire+0xfc/0x7904 kernel/locking/lockdep.c:5089
lr : lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849
sp : ffff80009ff873e0
x29: ffff80009ff876a0 x28: ffff80008a879960 x27: 0000000000000000
x26: ffff0001b362f500 x25: 0000000000000000 x24: 0000000000000000
x23: 0000000000000000 x22: 1ffff00011f300ca x21: 0000000000000258
x20: 0000000000000001 x19: 0000000000000000 x18: ffff80009ff87220
x17: 0000000000021cbe x16: ffff80008326d6e4 x15: 0000000000000001
x14: 1fffe00019c76c21 x13: dfff800000000000 x12: ffff700013ff0ea4
x11: ffff8000804648c0 x10: ffff80008f980650 x9 : 00000000000000f3
x8 : 000000000000004b x7 : ffff80008a879960 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000
x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000258
Call trace:
 __lock_acquire+0xfc/0x7904 kernel/locking/lockdep.c:5089 (P)
 lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849 (L)
 lock_acquire+0x23c/0x724 kernel/locking/lockdep.c:5849
 lock_sock_nested+0x5c/0x11c net/core/sock.c:3622
 lock_sock include/net/sock.h:1617 [inline]
 l2cap_sock_ready_cb+0x4c/0x130 net/bluetooth/l2cap_sock.c:1660
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1256 [inline]
 l2cap_conn_start+0x6f4/0xe70 net/bluetooth/l2cap_core.c:1506
 l2cap_info_timeout+0x68/0xb8 net/bluetooth/l2cap_core.c:1668
 process_one_work+0x7a8/0x15cc kernel/workqueue.c:3229
 process_scheduled_works kernel/workqueue.c:3310 [inline]
 worker_thread+0x97c/0xeec kernel/workqueue.c:3391
 kthread+0x288/0x310 kernel/kthread.c:389
 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:862
Code: 9007a8e8 b9465108 340090a8 d343fea8 (386d6908) 
---[ end trace 0000000000000000 ]---
----------------
Code disassembly (best guess):
   0:	9007a8e8 	adrp	x8, 0xf51c000
   4:	b9465108 	ldr	w8, [x8, #1616]
   8:	340090a8 	cbz	w8, 0x121c
   c:	d343fea8 	lsr	x8, x21, #3
* 10:	386d6908 	ldrb	w8, [x8, x13] <-- trapping instruction