Extracting prog: 1m46.060391059s
Minimizing prog: 14m28.233521975s
Simplifying prog options: 3m0.951786102s
Extracting C: 1m3.487369692s
Simplifying C: 0s


extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program crashed: general protection fault in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(0xffffffffffffffff, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QPerNtCCAs1tCZCiFRj8GJiSPRsPJr4F3jzYtSTiVe9GxKiXEBPNTM7Q7fLbmlhu1u7n08y8N7O27733Tdv58282QB61kj2TxKxPSJ+j4ihWnZ5gZHaf9evnq/8c/V8JYnFxbf+SvJy166er5RFy/dtKzKjaUT6aVJUstzc2XMnp6rVmTNFfnz+1Pvjc2fPPXvi1NTxmeMzpycPHz50cOKF5yefa0ucWVzX9n40u2/Pa+9cer1y9NJ7P3+XtXd7sb8+jnYZyQL/ezHXuO+JdlfWZTvq0kl/FxvCmvRFRNZdA/n4H4q+WOq8oXj1k642DlhX2blpS+vdC4vAJpZEt1sAdEd5os+uf8utQ1OPDeHKS7ULoCzu68VW29MfaVFmoOH6tp1GIuLowr9fZ1us030IAIB6n1e+OhLPNJv/pXF/XbmdxRrKcETcExG7IuLeiNgdEfdF5GUfiIgH11h/49LQzfOf9PJtBbZK2fzvxWJta/n8r5z9xXBfkduRxz+QHDtRnTlQfCajMbAly0+sUMcPr/z2Rat99fO/bMvqL+eCRTsu9zfcoJuemp/KJ6VtcOXjiL39zeJPbqwEJBGxJyL2rq3SnWXixFPf7mtV6Nbxr6AN60yL30Q8Wev/hWiIv5SsvD45fldUZw6Ml0fFzX759eKbreq/o/jbIOv/rcuP/8Yiw0n9eu3c2uu4+MdnLa9pbvf4H0zezvtlsHjtw6n5+TMTEYPJkTy/7PXJpfeW+bJ8Fv/o/ubjf1fxnuTdiIciIjuIH46IRyLi0aLtj0XE4xGxf4X4f3q59b6N0P/TTb//bhz/Df2/9kTfyR+/b1X/6vr/UJ4aLV7Jv/9uYbUNvJPPDgAAAP4v0vwZ+CQdu5FO07Gx2jP8u2NrWp2dm3/62OwHp6drz8oPx0Ba3ukaqrsfOpEsFH+xlp8s7hWX+w8W942/7Ls7z49VZqvTXY4det22FuM/82dft1sHrLtm62iTg11oCNBxjeM/f/Rhaa3/whudbhDQMX6vDb3rFuM/7VQ7gM5z/ofe1Wz8X2jIWwuAzcn5H3qX8Q+9y/iH3mX8Q0+6k9/1S2zSxMBqCke6EZq6aRLbNkYzlhLd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8CAAD//2wj7mI=")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QPerNtCCAs1tCZCiFRj8GJiSPRsPJr4F3jzYtSTiVe9GxKiXEBPNTM7Q7fLbmlhu1u7n08y8N7O27733Tdv58282QB61kj2TxKxPSJ+j4ihWnZ5gZHaf9evnq/8c/V8JYnFxbf+SvJy166er5RFy/dtKzKjaUT6aVJUstzc2XMnp6rVmTNFfnz+1Pvjc2fPPXvi1NTxmeMzpycPHz50cOKF5yefa0ucWVzX9n40u2/Pa+9cer1y9NJ7P3+XtXd7sb8+jnYZyQL/ezHXuO+JdlfWZTvq0kl/FxvCmvRFRNZdA/n4H4q+WOq8oXj1k642DlhX2blpS+vdC4vAJpZEt1sAdEd5os+uf8utQ1OPDeHKS7ULoCzu68VW29MfaVFmoOH6tp1GIuLowr9fZ1us030IAIB6n1e+OhLPNJv/pXF/XbmdxRrKcETcExG7IuLeiNgdEfdF5GUfiIgH11h/49LQzfOf9PJtBbZK2fzvxWJta/n8r5z9xXBfkduRxz+QHDtRnTlQfCajMbAly0+sUMcPr/z2Rat99fO/bMvqL+eCRTsu9zfcoJuemp/KJ6VtcOXjiL39zeJPbqwEJBGxJyL2rq3SnWXixFPf7mtV6Nbxr6AN60yL30Q8Wev/hWiIv5SsvD45fldUZw6Ml0fFzX759eKbreq/o/jbIOv/rcuP/8Yiw0n9eu3c2uu4+MdnLa9pbvf4H0zezvtlsHjtw6n5+TMTEYPJkTy/7PXJpfeW+bJ8Fv/o/ubjf1fxnuTdiIciIjuIH46IRyLi0aLtj0XE4xGxf4X4f3q59b6N0P/TTb//bhz/Df2/9kTfyR+/b1X/6vr/UJ4aLV7Jv/9uYbUNvJPPDgAAAP4v0vwZ+CQdu5FO07Gx2jP8u2NrWp2dm3/62OwHp6drz8oPx0Ba3ukaqrsfOpEsFH+xlp8s7hWX+w8W942/7Ls7z49VZqvTXY4det22FuM/82dft1sHrLtm62iTg11oCNBxjeM/f/Rhaa3/whudbhDQMX6vDb3rFuM/7VQ7gM5z/ofe1Wz8X2jIWwuAzcn5H3qX8Q+9y/iH3mX8Q0+6k9/1S2zSxMBqCke6EZq6aRLbNkYzlhLd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8CAAD//2wj7mI=")
chdir(&(0x7f0000000140)='./file0\x00')
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(0x0, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
listen(r0, 0xffffffff)

program did not crash
extracting C reproducer
testing compiled C program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
program did not crash
simplifying guilty program options
testing program (duration=55.561204804s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QPerNtCCAs1tCZCiFRj8GJiSPRsPJr4F3jzYtSTiVe9GxKiXEBPNTM7Q7fLbmlhu1u7n08y8N7O27733Tdv58282QB61kj2TxKxPSJ+j4ihWnZ5gZHaf9evnq/8c/V8JYnFxbf+SvJy166er5RFy/dtKzKjaUT6aVJUstzc2XMnp6rVmTNFfnz+1Pvjc2fPPXvi1NTxmeMzpycPHz50cOKF5yefa0ucWVzX9n40u2/Pa+9cer1y9NJ7P3+XtXd7sb8+jnYZyQL/ezHXuO+JdlfWZTvq0kl/FxvCmvRFRNZdA/n4H4q+WOq8oXj1k642DlhX2blpS+vdC4vAJpZEt1sAdEd5os+uf8utQ1OPDeHKS7ULoCzu68VW29MfaVFmoOH6tp1GIuLowr9fZ1us030IAIB6n1e+OhLPNJv/pXF/XbmdxRrKcETcExG7IuLeiNgdEfdF5GUfiIgH11h/49LQzfOf9PJtBbZK2fzvxWJta/n8r5z9xXBfkduRxz+QHDtRnTlQfCajMbAly0+sUMcPr/z2Rat99fO/bMvqL+eCRTsu9zfcoJuemp/KJ6VtcOXjiL39zeJPbqwEJBGxJyL2rq3SnWXixFPf7mtV6Nbxr6AN60yL30Q8Wev/hWiIv5SsvD45fldUZw6Ml0fFzX759eKbreq/o/jbIOv/rcuP/8Yiw0n9eu3c2uu4+MdnLa9pbvf4H0zezvtlsHjtw6n5+TMTEYPJkTy/7PXJpfeW+bJ8Fv/o/ubjf1fxnuTdiIciIjuIH46IRyLi0aLtj0XE4xGxf4X4f3q59b6N0P/TTb//bhz/Df2/9kTfyR+/b1X/6vr/UJ4aLV7Jv/9uYbUNvJPPDgAAAP4v0vwZ+CQdu5FO07Gx2jP8u2NrWp2dm3/62OwHp6drz8oPx0Ba3ukaqrsfOpEsFH+xlp8s7hWX+w8W942/7Ls7z49VZqvTXY4det22FuM/82dft1sHrLtm62iTg11oCNBxjeM/f/Rhaa3/whudbhDQMX6vDb3rFuM/7VQ7gM5z/ofe1Wz8X2jIWwuAzcn5H3qX8Q+9y/iH3mX8Q0+6k9/1S2zSxMBqCke6EZq6aRLbNkYzlhLd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8CAAD//2wj7mI=")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program crashed: general protection fault in lock_sock_nested
validation run: crashed=true
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QPerNtCCAs1tCZCiFRj8GJiSPRsPJr4F3jzYtSTiVe9GxKiXEBPNTM7Q7fLbmlhu1u7n08y8N7O27733Tdv58282QB61kj2TxKxPSJ+j4ihWnZ5gZHaf9evnq/8c/V8JYnFxbf+SvJy166er5RFy/dtKzKjaUT6aVJUstzc2XMnp6rVmTNFfnz+1Pvjc2fPPXvi1NTxmeMzpycPHz50cOKF5yefa0ucWVzX9n40u2/Pa+9cer1y9NJ7P3+XtXd7sb8+jnYZyQL/ezHXuO+JdlfWZTvq0kl/FxvCmvRFRNZdA/n4H4q+WOq8oXj1k642DlhX2blpS+vdC4vAJpZEt1sAdEd5os+uf8utQ1OPDeHKS7ULoCzu68VW29MfaVFmoOH6tp1GIuLowr9fZ1us030IAIB6n1e+OhLPNJv/pXF/XbmdxRrKcETcExG7IuLeiNgdEfdF5GUfiIgH11h/49LQzfOf9PJtBbZK2fzvxWJta/n8r5z9xXBfkduRxz+QHDtRnTlQfCajMbAly0+sUMcPr/z2Rat99fO/bMvqL+eCRTsu9zfcoJuemp/KJ6VtcOXjiL39zeJPbqwEJBGxJyL2rq3SnWXixFPf7mtV6Nbxr6AN60yL30Q8Wev/hWiIv5SsvD45fldUZw6Ml0fFzX759eKbreq/o/jbIOv/rcuP/8Yiw0n9eu3c2uu4+MdnLa9pbvf4H0zezvtlsHjtw6n5+TMTEYPJkTy/7PXJpfeW+bJ8Fv/o/ubjf1fxnuTdiIciIjuIH46IRyLi0aLtj0XE4xGxf4X4f3q59b6N0P/TTb//bhz/Df2/9kTfyR+/b1X/6vr/UJ4aLV7Jv/9uYbUNvJPPDgAAAP4v0vwZ+CQdu5FO07Gx2jP8u2NrWp2dm3/62OwHp6drz8oPx0Ba3ukaqrsfOpEsFH+xlp8s7hWX+w8W942/7Ls7z49VZqvTXY4det22FuM/82dft1sHrLtm62iTg11oCNBxjeM/f/Rhaa3/whudbhDQMX6vDb3rFuM/7VQ7gM5z/ofe1Wz8X2jIWwuAzcn5H3qX8Q+9y/iH3mX8Q0+6k9/1S2zSxMBqCke6EZq6aRLbNkYzlhLd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8CAAD//2wj7mI=")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program did not crash
validation run: crashed=false
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$eJzs289vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QPerNtCCAs1tCZCiFRj8GJiSPRsPJr4F3jzYtSTiVe9GxKiXEBPNTM7Q7fLbmlhu1u7n08y8N7O27733Tdv58282QB61kj2TxKxPSJ+j4ihWnZ5gZHaf9evnq/8c/V8JYnFxbf+SvJy166er5RFy/dtKzKjaUT6aVJUstzc2XMnp6rVmTNFfnz+1Pvjc2fPPXvi1NTxmeMzpycPHz50cOKF5yefa0ucWVzX9n40u2/Pa+9cer1y9NJ7P3+XtXd7sb8+jnYZyQL/ezHXuO+JdlfWZTvq0kl/FxvCmvRFRNZdA/n4H4q+WOq8oXj1k642DlhX2blpS+vdC4vAJpZEt1sAdEd5os+uf8utQ1OPDeHKS7ULoCzu68VW29MfaVFmoOH6tp1GIuLowr9fZ1us030IAIB6n1e+OhLPNJv/pXF/XbmdxRrKcETcExG7IuLeiNgdEfdF5GUfiIgH11h/49LQzfOf9PJtBbZK2fzvxWJta/n8r5z9xXBfkduRxz+QHDtRnTlQfCajMbAly0+sUMcPr/z2Rat99fO/bMvqL+eCRTsu9zfcoJuemp/KJ6VtcOXjiL39zeJPbqwEJBGxJyL2rq3SnWXixFPf7mtV6Nbxr6AN60yL30Q8Wev/hWiIv5SsvD45fldUZw6Ml0fFzX759eKbreq/o/jbIOv/rcuP/8Yiw0n9eu3c2uu4+MdnLa9pbvf4H0zezvtlsHjtw6n5+TMTEYPJkTy/7PXJpfeW+bJ8Fv/o/ubjf1fxnuTdiIciIjuIH46IRyLi0aLtj0XE4xGxf4X4f3q59b6N0P/TTb//bhz/Df2/9kTfyR+/b1X/6vr/UJ4aLV7Jv/9uYbUNvJPPDgAAAP4v0vwZ+CQdu5FO07Gx2jP8u2NrWp2dm3/62OwHp6drz8oPx0Ba3ukaqrsfOpEsFH+xlp8s7hWX+w8W942/7Ls7z49VZqvTXY4det22FuM/82dft1sHrLtm62iTg11oCNBxjeM/f/Rhaa3/whudbhDQMX6vDb3rFuM/7VQ7gM5z/ofe1Wz8X2jIWwuAzcn5H3qX8Q+9y/iH3mX8Q0+6k9/1S2zSxMBqCke6EZq6aRLbNkYzlhLd/mYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABoj/8CAAD//2wj7mI=")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program crashed: general protection fault in lock_sock_nested
validation run: crashed=true
testing program (duration=55.561204804s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-chdir-creat-mount-futex-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000002c0)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@grpquota}, {@stripe}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x455, &(0x7f0000000880)="$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")
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x63d014, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe)
listen(r0, 0xffffffff)

program crashed: general protection fault in lock_sock_nested
validation run: crashed=true
reproducing took 24m1.074406758s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7]
CPU: 0 UID: 0 PID: 5565 Comm: kworker/0:7 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
RIP: 0010:do_raw_spin_lock+0x78/0x290 kernel/locking/spinlock_debug.c:115
Code: ff 9d 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f
RSP: 0018:ffffc9000ce0f7a0 EFLAGS: 00010203
RAX: 0000000000000038 RBX: 00000000000001c0 RCX: 1ffff920019c1ef8
RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: 00000000000001c0
RBP: ffffc9000ce0f858 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a850230 R12: dffffc0000000000
R13: dffffc0000000000 R14: 00000000000001c4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8825e9fc8 CR3: 0000000053e9b000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 lock_sock_nested+0x6a/0x100 net/core/sock.c:3736
 lock_sock include/net/sock.h:1667 [inline]
 l2cap_sock_ready_cb+0x45/0x140 net/bluetooth/l2cap_sock.c:1674
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline]
 l2cap_conn_start+0x76a/0xe50 net/bluetooth/l2cap_core.c:1512
 l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1669
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
RIP: 0010:do_raw_spin_lock+0x78/0x290 kernel/locking/spinlock_debug.c:115
Code: ff 9d 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f
RSP: 0018:ffffc9000ce0f7a0 EFLAGS: 00010203
RAX: 0000000000000038 RBX: 00000000000001c0 RCX: 1ffff920019c1ef8
RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: 00000000000001c0
RBP: ffffc9000ce0f858 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a850230 R12: dffffc0000000000
R13: dffffc0000000000 R14: 00000000000001c4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8825e9fc8 CR3: 0000000053e9b000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess):
   0:	ff 9d 81 48 8d 4c    	lcall  *0x4c8d4881(%rbp)
   6:	24 20                	and    $0x20,%al
   8:	48 c1 e9 03          	shr    $0x3,%rcx
   c:	48 b8 f1 f1 f1 f1 04 	movabs $0xf3f3f304f1f1f1f1,%rax
  13:	f3 f3 f3
  16:	48 89 4c 24 18       	mov    %rcx,0x18(%rsp)
  1b:	4a 89 04 39          	mov    %rax,(%rcx,%r15,1)
  1f:	4c 8d 77 04          	lea    0x4(%rdi),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 0f b6 04 38       	movzbl (%rax,%r15,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	0f 85 9f 01 00 00    	jne    0x1d6
  37:	41 8b 06             	mov    (%r14),%eax
  3a:	3d ad 4e ad de       	cmp    $0xdead4ead,%eax
  3f:	0f                   	.byte 0xf

final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7]
CPU: 0 UID: 0 PID: 5565 Comm: kworker/0:7 Not tainted 6.17.0-rc1-syzkaller-00214-g99bade344cfa #0 PREEMPT(full) 
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
RIP: 0010:do_raw_spin_lock+0x78/0x290 kernel/locking/spinlock_debug.c:115
Code: ff 9d 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f
RSP: 0018:ffffc9000ce0f7a0 EFLAGS: 00010203
RAX: 0000000000000038 RBX: 00000000000001c0 RCX: 1ffff920019c1ef8
RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: 00000000000001c0
RBP: ffffc9000ce0f858 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a850230 R12: dffffc0000000000
R13: dffffc0000000000 R14: 00000000000001c4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8825e9fc8 CR3: 0000000053e9b000 CR4: 0000000000352ef0
Call Trace:
 <TASK>
 spin_lock_bh include/linux/spinlock.h:356 [inline]
 lock_sock_nested+0x6a/0x100 net/core/sock.c:3736
 lock_sock include/net/sock.h:1667 [inline]
 l2cap_sock_ready_cb+0x45/0x140 net/bluetooth/l2cap_sock.c:1674
 l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline]
 l2cap_conn_start+0x76a/0xe50 net/bluetooth/l2cap_core.c:1512
 l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1669
 process_one_work kernel/workqueue.c:3236 [inline]
 process_scheduled_works+0xade/0x17b0 kernel/workqueue.c:3319
 worker_thread+0x8a0/0xda0 kernel/workqueue.c:3400
 kthread+0x70e/0x8a0 kernel/kthread.c:463
 ret_from_fork+0x3f9/0x770 arch/x86/kernel/process.c:148
 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:245
 </TASK>
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:debug_spin_lock_before kernel/locking/spinlock_debug.c:86 [inline]
RIP: 0010:do_raw_spin_lock+0x78/0x290 kernel/locking/spinlock_debug.c:115
Code: ff 9d 81 48 8d 4c 24 20 48 c1 e9 03 48 b8 f1 f1 f1 f1 04 f3 f3 f3 48 89 4c 24 18 4a 89 04 39 4c 8d 77 04 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 9f 01 00 00 41 8b 06 3d ad 4e ad de 0f
RSP: 0018:ffffc9000ce0f7a0 EFLAGS: 00010203
RAX: 0000000000000038 RBX: 00000000000001c0 RCX: 1ffff920019c1ef8
RDX: 0000000000000000 RSI: ffffffff8be346e0 RDI: 00000000000001c0
RBP: ffffc9000ce0f858 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: ffffffff8a850230 R12: dffffc0000000000
R13: dffffc0000000000 R14: 00000000000001c4 R15: dffffc0000000000
FS:  0000000000000000(0000) GS:ffff88808d210000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 00007fa8825e9fc8 CR3: 0000000053e9b000 CR4: 0000000000352ef0
----------------
Code disassembly (best guess):
   0:	ff 9d 81 48 8d 4c    	lcall  *0x4c8d4881(%rbp)
   6:	24 20                	and    $0x20,%al
   8:	48 c1 e9 03          	shr    $0x3,%rcx
   c:	48 b8 f1 f1 f1 f1 04 	movabs $0xf3f3f304f1f1f1f1,%rax
  13:	f3 f3 f3
  16:	48 89 4c 24 18       	mov    %rcx,0x18(%rsp)
  1b:	4a 89 04 39          	mov    %rax,(%rcx,%r15,1)
  1f:	4c 8d 77 04          	lea    0x4(%rdi),%r14
  23:	4c 89 f0             	mov    %r14,%rax
  26:	48 c1 e8 03          	shr    $0x3,%rax
* 2a:	42 0f b6 04 38       	movzbl (%rax,%r15,1),%eax <-- trapping instruction
  2f:	84 c0                	test   %al,%al
  31:	0f 85 9f 01 00 00    	jne    0x1d6
  37:	41 8b 06             	mov    (%r14),%eax
  3a:	3d ad 4e ad de       	cmp    $0xdead4ead,%eax
  3f:	0f                   	.byte 0xf