Extracting prog: 2m23.786075183s Minimizing prog: 11m16.695063325s Simplifying prog options: 4m57.725429464s Extracting C: 2m3.685969641s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program crashed: BUG: unable to handle kernel paging request in lock_sock_nested single: successfully extracted reproducer found reproducer with 8 syscalls minimizing guilty program testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = syz_pidfd_open(0x0, 0x0) setns(r1, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone program did not crash simplifying guilty program options testing program (duration=48.182839495s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program crashed: WARNING: held lock freed in bt_accept_dequeue a never seen crash title: WARNING: held lock freed in bt_accept_dequeue, ignore testing program (duration=48.182839495s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program did not crash testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program crashed: BUG: unable to handle kernel paging request in lock_sock_nested validation run: crashed=true testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program crashed: BUG: unable to handle kernel paging request in lock_sock_nested validation run: crashed=true testing program (duration=48.182839495s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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") r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) program crashed: BUG: unable to handle kernel paging request in lock_sock_nested validation run: crashed=true reproducing took 27m37.932557524s repro crashed as (corrupted=false): Unable to handle kernel paging request at virtual address dfff80000000004c KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [dfff80000000004c] address between user and kernel address ranges Internal error: Oops: 0000000096000005 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: events l2cap_info_timeout pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kasan_byte_accessible+0x10/0x20 mm/kasan/generic.c:210 lr : __kasan_check_byte+0x20/0x54 mm/kasan/common.c:573 sp : ffff800097cd7790 x29: ffff800097cd7790 x28: ffff80008f871000 x27: ffff0000c1a39c80 x26: cef08000891b31c4 x25: 0000000000000000 x24: 0000000000000001 x23: 0000000000000000 x22: 0000000000000260 x21: 0000000000000260 x20: 0000000000000000 x19: ffff8000891b31c4 x18: 00000000ffffffff x17: ffff800093599000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00019b9f221 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000000003 x9 : dfff800000000000 x8 : 000000000000004c x7 : ffff800082e60154 x6 : ffff80008a23d440 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff8000891b31c4 x0 : 0000000000000260 Call trace: kasan_mem_to_shadow include/linux/kasan.h:65 [inline] (P) kasan_byte_accessible+0x10/0x20 mm/kasan/generic.c:210 (P) kasan_check_byte include/linux/kasan.h:402 [inline] lock_acquire+0xa4/0x2e0 kernel/locking/lockdep.c:5842 lock_sock_nested+0x58/0x118 net/core/sock.c:3780 lock_sock include/net/sock.h:1700 [inline] l2cap_sock_ready_cb+0x4c/0x15c net/bluetooth/l2cap_sock.c:1677 l2cap_chan_ready net/bluetooth/l2cap_core.c:1264 [inline] l2cap_conn_start+0x53c/0xad0 net/bluetooth/l2cap_core.c:1513 l2cap_info_timeout+0x78/0xb0 net/bluetooth/l2cap_core.c:1670 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 Code: d503245f d343fc08 d2d00009 f2fbffe9 (38696908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: d503245f bti c 4: d343fc08 lsr x8, x0, #3 8: d2d00009 mov x9, #0x800000000000 // #140737488355328 c: f2fbffe9 movk x9, #0xdfff, lsl #48 * 10: 38696908 ldrb w8, [x8, x9] <-- trapping instruction final repro crashed as (corrupted=false): Unable to handle kernel paging request at virtual address dfff80000000004c KASAN: null-ptr-deref in range [0x0000000000000260-0x0000000000000267] Mem abort info: ESR = 0x0000000096000005 EC = 0x25: DABT (current EL), IL = 32 bits SET = 0, FnV = 0 EA = 0, S1PTW = 0 FSC = 0x05: level 1 translation fault Data abort info: ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 CM = 0, WnR = 0, TnD = 0, TagAccess = 0 GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [dfff80000000004c] address between user and kernel address ranges Internal error: Oops: 0000000096000005 [#1] SMP Modules linked in: CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 Workqueue: events l2cap_info_timeout pstate: 23400005 (nzCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) pc : kasan_byte_accessible+0x10/0x20 mm/kasan/generic.c:210 lr : __kasan_check_byte+0x20/0x54 mm/kasan/common.c:573 sp : ffff800097cd7790 x29: ffff800097cd7790 x28: ffff80008f871000 x27: ffff0000c1a39c80 x26: cef08000891b31c4 x25: 0000000000000000 x24: 0000000000000001 x23: 0000000000000000 x22: 0000000000000260 x21: 0000000000000260 x20: 0000000000000000 x19: ffff8000891b31c4 x18: 00000000ffffffff x17: ffff800093599000 x16: ffff800082e5e68c x15: 0000000000000001 x14: 1fffe00019b9f221 x13: 0000000000000000 x12: 0000000000000000 x11: ffff800093398d48 x10: 0000000000000003 x9 : dfff800000000000 x8 : 000000000000004c x7 : ffff800082e60154 x6 : ffff80008a23d440 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000000 x2 : 0000000000000000 x1 : ffff8000891b31c4 x0 : 0000000000000260 Call trace: kasan_mem_to_shadow include/linux/kasan.h:65 [inline] (P) kasan_byte_accessible+0x10/0x20 mm/kasan/generic.c:210 (P) kasan_check_byte include/linux/kasan.h:402 [inline] lock_acquire+0xa4/0x2e0 kernel/locking/lockdep.c:5842 lock_sock_nested+0x58/0x118 net/core/sock.c:3780 lock_sock include/net/sock.h:1700 [inline] l2cap_sock_ready_cb+0x4c/0x15c net/bluetooth/l2cap_sock.c:1677 l2cap_chan_ready net/bluetooth/l2cap_core.c:1264 [inline] l2cap_conn_start+0x53c/0xad0 net/bluetooth/l2cap_core.c:1513 l2cap_info_timeout+0x78/0xb0 net/bluetooth/l2cap_core.c:1670 process_one_work+0x7c0/0x1558 kernel/workqueue.c:3257 process_scheduled_works kernel/workqueue.c:3340 [inline] worker_thread+0x958/0xed8 kernel/workqueue.c:3421 kthread+0x5fc/0x75c kernel/kthread.c:463 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:844 Code: d503245f d343fc08 d2d00009 f2fbffe9 (38696908) ---[ end trace 0000000000000000 ]--- ---------------- Code disassembly (best guess): 0: d503245f bti c 4: d343fc08 lsr x8, x0, #3 8: d2d00009 mov x9, #0x800000000000 // #140737488355328 c: f2fbffe9 movk x9, #0xdfff, lsl #48 * 10: 38696908 ldrb w8, [x8, x9] <-- trapping instruction