Extracting prog: 1m24.373377117s Minimizing prog: 1m13.719758413s Simplifying prog options: 4m3.865504492s Extracting C: 1m59.421550723s Simplifying C: 7m52.921168394s extracting reproducer from 30 programs first checking the prog from the crash report single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid-syz_mount_image$iso9660 detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f0000000000)={[{}, {@block={'block', 0x3d, 0x200}, 0x0}, {@nocompress}, {@showassoc}, {@map_normal}, {@check_relaxed, 0x41}, {@session={'session', 0x3d, 0x3e}}, {@unhide}, {@uid}, {@mode={'mode', 0x3d, 0x1}}, {@showassoc}, {@map_normal}, {@check_relaxed}]}, 0x2, 0x6be, &(0x7f0000000840)="$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") program crashed: Internal error in sys_getresuid single: successfully extracted reproducer found reproducer with 2 syscalls minimizing guilty program testing program (duration=45.353788807s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) program crashed: Internal error in sys_getresuid extracting C reproducer testing compiled C program (duration=45.353788807s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_mount a never seen crash title: Internal error in sys_mount, ignore simplifying guilty program options testing program (duration=45.353788807s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) program crashed: Internal error in sys_getresuid extracting C reproducer testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid simplifying C reproducer testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing compiled C program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid program crashed: Internal error in sys_getresuid testing program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) program crashed: Internal error in sys_getresuid validation run: crashed=true testing program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) program crashed: Internal error in sys_getresuid validation run: crashed=true testing program (duration=45.353788807s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): getresuid detailed listing: executing program 0: getresuid(0x0, 0x0, 0x0) program crashed: Internal error in sys_getresuid validation run: crashed=true reproducing took 20m21.68150681s repro crashed as (corrupted=false): Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 4174 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) pc : __do_sys_getresuid kernel/sys.c:743 [inline] pc : __se_sys_getresuid kernel/sys.c:732 [inline] pc : __arm64_sys_getresuid+0x204/0x4b8 kernel/sys.c:732 lr : __do_sys_getresuid kernel/sys.c:742 [inline] lr : __se_sys_getresuid kernel/sys.c:732 [inline] lr : __arm64_sys_getresuid+0x1e0/0x4b8 kernel/sys.c:732 sp : ffff80001f627d10 x29: ffff80001f627d20 x28: 0000000000000000 x27: 0000000000000000 x26: dfff800000000000 x25: 1fffe0001acb6a3c x24: 00000000fffffff2 x23: 0000000000000000 x22: ffff0000d65b51e4 x21: 0000000000000000 x20: 0000000000000000 x19: ffff0000d65b51c0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000081d7c54 x15: 0000000000000000 x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: __do_sys_getresuid kernel/sys.c:742 [inline] __se_sys_getresuid kernel/sys.c:732 [inline] __arm64_sys_getresuid+0x204/0x4b8 kernel/sys.c:732 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Code: d503229f 2a1f03f8 2a1f03e0 b8000957 (2a1803e1) ---[ end trace bce839a66d9899bf ]--- ---------------- Code disassembly (best guess): 0: d503229f csdb 4: 2a1f03f8 mov w24, wzr 8: 2a1f03e0 mov w0, wzr c: b8000957 sttr w23, [x10] * 10: 2a1803e1 mov w1, w24 <-- trapping instruction final repro crashed as (corrupted=false): Internal error: Oops - BTI: 0000000036000001 [#1] PREEMPT SMP Modules linked in: CPU: 1 PID: 4174 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 pstate: 42400405 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=jc) pc : __do_sys_getresuid kernel/sys.c:743 [inline] pc : __se_sys_getresuid kernel/sys.c:732 [inline] pc : __arm64_sys_getresuid+0x204/0x4b8 kernel/sys.c:732 lr : __do_sys_getresuid kernel/sys.c:742 [inline] lr : __se_sys_getresuid kernel/sys.c:732 [inline] lr : __arm64_sys_getresuid+0x1e0/0x4b8 kernel/sys.c:732 sp : ffff80001f627d10 x29: ffff80001f627d20 x28: 0000000000000000 x27: 0000000000000000 x26: dfff800000000000 x25: 1fffe0001acb6a3c x24: 00000000fffffff2 x23: 0000000000000000 x22: ffff0000d65b51e4 x21: 0000000000000000 x20: 0000000000000000 x19: ffff0000d65b51c0 x18: 0000000000000000 x17: 0000000000000000 x16: ffff8000081d7c54 x15: 0000000000000000 x14: 0000000000000000 x13: 1ffff0000282e06b x12: 0000000000ff0100 x11: 0000000000000000 x10: 0000000000000000 x9 : 0000ffffffffffff x8 : 0000000000000000 x7 : ffff800008750ed4 x6 : 0000000000000000 x5 : 0000000000000000 x4 : 0000000000000001 x3 : 0000000000000001 x2 : 0000000000000008 x1 : 0000000000000001 x0 : 0000000000000000 Call trace: __do_sys_getresuid kernel/sys.c:742 [inline] __se_sys_getresuid kernel/sys.c:732 [inline] __arm64_sys_getresuid+0x204/0x4b8 kernel/sys.c:732 __invoke_syscall arch/arm64/kernel/syscall.c:38 [inline] invoke_syscall+0x98/0x2b8 arch/arm64/kernel/syscall.c:52 el0_svc_common+0x138/0x258 arch/arm64/kernel/syscall.c:142 do_el0_svc+0x58/0x14c arch/arm64/kernel/syscall.c:181 el0_svc+0x78/0x1e0 arch/arm64/kernel/entry-common.c:608 el0t_64_sync_handler+0xcc/0xe4 arch/arm64/kernel/entry-common.c:626 el0t_64_sync+0x1a0/0x1a4 arch/arm64/kernel/entry.S:584 Code: d503229f 2a1f03f8 2a1f03e0 b8000957 (2a1803e1) ---[ end trace bce839a66d9899bf ]--- ---------------- Code disassembly (best guess): 0: d503229f csdb 4: 2a1f03f8 mov w24, wzr 8: 2a1f03e0 mov w0, wzr c: b8000957 sttr w23, [x10] * 10: 2a1803e1 mov w1, w24 <-- trapping instruction