Extracting prog: 3m11.456823471s Minimizing prog: 28m46.788161803s Simplifying prog options: 3m34.903765817s Extracting C: 1m58.51634353s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 30s testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash single: failed to extract reproducer single: executing 1 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program crashed: general protection fault in lock_sock_nested single: successfully extracted reproducer found reproducer with 6 syscalls minimizing guilty program testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$eJzs3U9sHFcdB/DvrDd2NoTUTZM2RZUcNRIgIhI7JgVXQgSEUA4VqsqBs5U4jZVNWhwXuRWiQfy79hCOSOWQE5yQuEcqFy5w6xEfKyG49IK5sGhmZ52NvevYxfba7edTzb735s3795uZnd2tIgf4zLp6Ps2HKXL1/CsrZXn1wWx79cHs7V4+yUSSRtKskiLFvzudzgfJlXS3PJ+kqLsrho1zf3HutQ8/Xv2oW2rWW3V8Y6t223Ov3nI2yVid7lZ/157U39EndVesr7AM2Lle4GDUjiTpVP55v7vnR385vl7TpzWo9ROvfOAQKLrPzU0mk2P1jV5+Dug+FbvP7EPt3qgnAAAAAPvgqbWsZSUnRj0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEyKr7XGyqTeGr382RS9v/8/Xu9LnT9YpnZ2+MO9mgcAAAAAAAAA7KOptaxlJSd65U5R/T//F6vCqer1c3krd7OQpVzISuaznOUsZSbJZF9H4yvzy8tLM/0tJwa3vDSw5aUnTHSiTlu7tHAAAAAAAAAA+FRpJFk+PupZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvyIZ6ybVdqqXn0yjmeRokvHyuHvJ33r5w+zhqCcAAAAA++CptaxlJSd65U5Rfed/tvrefzRv5U6Ws5jltLOQ69VvAd1v/Y3VB7Pt1Qezt8ttc7/f/teOplH1mO5vD4NHPlMd0cqNLFZ7LuRa3kg719OoWpbO9OYzeF4/K+dUfKu2zZldr9Ny5e/V6Sbv7mixw+zwx5TJKiJH1iMyXc+tjMbTW0dih2dn40gzaaxP9tSGkTYsYuqTxPxYnZbr+dWwmI/Exkhc6rv6nt065smX/vSHH95s37l188bd8wdnSdszVqed6rW1ORKzfZF47tMciU2mq0icXi9fzffyg5zP2byapSzmx5nPchZyNt+tcvP19Vy+TtRthkTqymOlV7eaRe++m1w/WTub04tV2xNZzPfzRq5nIS9V/13KTL6ey7mcub4zfHob77SNIXd95/MDF3Duy3WmleTXdXowlLF9ui+u/e+5k1Vd/55HUTq5+8+j5hfqTDnGz+v0YNgYiZm+SDyzdSR+V72t3G3fubV0c/7N7Q138r06U95HvzxQT4nyejlZnqyq9PjVUdY9M7Bupqo7tV7X2FR3ulf399/+5uXqmGF36nj9Ga75zblNT6yy7rmBo8xWdWf66gZ93gLgwDv2lWPjrX+0/tp6v/WL1s3WK0e/M/GNiRfGc+TPR15uTo99sfFC8ce8n58++v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnfffufWfLu9sLQh00zn3SFVe5L57/6M1ftzZkOPObLrgz5/PNmfGG7OjCfZ90EHZv7T6XTqPcX/0U+RYj+C2SlNpLPnYWkmGVQ1NerzNd8e8RsTsOcuLt9+8+Ldt9/56uLt+dcXXl+4M3f58tz03OWXZi/eWGwvTHdfRz1LYC88eug/vn9qVBMCAAAAAAAAAAAAnmg//jnB8NGP7udSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPq6vk0H6bIzPSF6bK8+mC2XW69/KMjm0kaSYqfJMUHyZV0t0z1dVcMG+f+4txrH368+tGjvpq94xtbtduee/WWs0nG6nS3+ru2nf5+v1Vlsb7CMmDneoGDUftfAAAA//9adQUE") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(0xffffffffffffffff, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$eJzs3U9sHFcdB/DvrDd2NoTUTZM2RZUcNRIgIhI7JgVXQgSEUA4VqsqBs5U4jZVNWhwXuRWiQfy79hCOSOWQE5yQuEcqFy5w6xEfKyG49IK5sGhmZ52NvevYxfba7edTzb735s3795uZnd2tIgf4zLp6Ps2HKXL1/CsrZXn1wWx79cHs7V4+yUSSRtKskiLFvzudzgfJlXS3PJ+kqLsrho1zf3HutQ8/Xv2oW2rWW3V8Y6t223Ov3nI2yVid7lZ/157U39EndVesr7AM2Lle4GDUjiTpVP55v7vnR385vl7TpzWo9ROvfOAQKLrPzU0mk2P1jV5+Dug+FbvP7EPt3qgnAAAAAPvgqbWsZSUnRj0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEyKr7XGyqTeGr382RS9v/8/Xu9LnT9YpnZ2+MO9mgcAAAAAAAAA7KOptaxlJSd65U5R/T//F6vCqer1c3krd7OQpVzISuaznOUsZSbJZF9H4yvzy8tLM/0tJwa3vDSw5aUnTHSiTlu7tHAAAAAAAAAA+FRpJFk+PupZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvyIZ6ybVdqqXn0yjmeRokvHyuHvJ33r5w+zhqCcAAAAA++CptaxlJSd65U5Rfed/tvrefzRv5U6Ws5jltLOQ69VvAd1v/Y3VB7Pt1Qezt8ttc7/f/teOplH1mO5vD4NHPlMd0cqNLFZ7LuRa3kg719OoWpbO9OYzeF4/K+dUfKu2zZldr9Ny5e/V6Sbv7mixw+zwx5TJKiJH1iMyXc+tjMbTW0dih2dn40gzaaxP9tSGkTYsYuqTxPxYnZbr+dWwmI/Exkhc6rv6nt065smX/vSHH95s37l188bd8wdnSdszVqed6rW1ORKzfZF47tMciU2mq0icXi9fzffyg5zP2byapSzmx5nPchZyNt+tcvP19Vy+TtRthkTqymOlV7eaRe++m1w/WTub04tV2xNZzPfzRq5nIS9V/13KTL6ey7mcub4zfHob77SNIXd95/MDF3Duy3WmleTXdXowlLF9ui+u/e+5k1Vd/55HUTq5+8+j5hfqTDnGz+v0YNgYiZm+SDyzdSR+V72t3G3fubV0c/7N7Q138r06U95HvzxQT4nyejlZnqyq9PjVUdY9M7Bupqo7tV7X2FR3ulf399/+5uXqmGF36nj9Ga75zblNT6yy7rmBo8xWdWf66gZ93gLgwDv2lWPjrX+0/tp6v/WL1s3WK0e/M/GNiRfGc+TPR15uTo99sfFC8ce8n58++v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnfffufWfLu9sLQh00zn3SFVe5L57/6M1ftzZkOPObLrgz5/PNmfGG7OjCfZ90EHZv7T6XTqPcX/0U+RYj+C2SlNpLPnYWkmGVQ1NerzNd8e8RsTsOcuLt9+8+Ldt9/56uLt+dcXXl+4M3f58tz03OWXZi/eWGwvTHdfRz1LYC88eug/vn9qVBMCAAAAAAAAAAAAnmg//jnB8NGP7udSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPq6vk0H6bIzPSF6bK8+mC2XW69/KMjm0kaSYqfJMUHyZV0t0z1dVcMG+f+4txrH368+tGjvpq94xtbtduee/WWs0nG6nS3+ru2nf5+v1Vlsb7CMmDneoGDUftfAAAA//9adQUE") syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r0, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$eJzs3U9sHFcdB/DvrDd2NoTUTZM2RZUcNRIgIhI7JgVXQgSEUA4VqsqBs5U4jZVNWhwXuRWiQfy79hCOSOWQE5yQuEcqFy5w6xEfKyG49IK5sGhmZ52NvevYxfba7edTzb735s3795uZnd2tIgf4zLp6Ps2HKXL1/CsrZXn1wWx79cHs7V4+yUSSRtKskiLFvzudzgfJlXS3PJ+kqLsrho1zf3HutQ8/Xv2oW2rWW3V8Y6t223Ov3nI2yVid7lZ/157U39EndVesr7AM2Lle4GDUjiTpVP55v7vnR385vl7TpzWo9ROvfOAQKLrPzU0mk2P1jV5+Dug+FbvP7EPt3qgnAAAAAPvgqbWsZSUnRj0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEyKr7XGyqTeGr382RS9v/8/Xu9LnT9YpnZ2+MO9mgcAAAAAAAAA7KOptaxlJSd65U5R/T//F6vCqer1c3krd7OQpVzISuaznOUsZSbJZF9H4yvzy8tLM/0tJwa3vDSw5aUnTHSiTlu7tHAAAAAAAAAA+FRpJFk+PupZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvyIZ6ybVdqqXn0yjmeRokvHyuHvJ33r5w+zhqCcAAAAA++CptaxlJSd65U5Rfed/tvrefzRv5U6Ws5jltLOQ69VvAd1v/Y3VB7Pt1Qezt8ttc7/f/teOplH1mO5vD4NHPlMd0cqNLFZ7LuRa3kg719OoWpbO9OYzeF4/K+dUfKu2zZldr9Ny5e/V6Sbv7mixw+zwx5TJKiJH1iMyXc+tjMbTW0dih2dn40gzaaxP9tSGkTYsYuqTxPxYnZbr+dWwmI/Exkhc6rv6nt065smX/vSHH95s37l188bd8wdnSdszVqed6rW1ORKzfZF47tMciU2mq0icXi9fzffyg5zP2byapSzmx5nPchZyNt+tcvP19Vy+TtRthkTqymOlV7eaRe++m1w/WTub04tV2xNZzPfzRq5nIS9V/13KTL6ey7mcub4zfHob77SNIXd95/MDF3Duy3WmleTXdXowlLF9ui+u/e+5k1Vd/55HUTq5+8+j5hfqTDnGz+v0YNgYiZm+SDyzdSR+V72t3G3fubV0c/7N7Q138r06U95HvzxQT4nyejlZnqyq9PjVUdY9M7Bupqo7tV7X2FR3ulf399/+5uXqmGF36nj9Ga75zblNT6yy7rmBo8xWdWf66gZ93gLgwDv2lWPjrX+0/tp6v/WL1s3WK0e/M/GNiRfGc+TPR15uTo99sfFC8ce8n58++v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnfffufWfLu9sLQh00zn3SFVe5L57/6M1ftzZkOPObLrgz5/PNmfGG7OjCfZ90EHZv7T6XTqPcX/0U+RYj+C2SlNpLPnYWkmGVQ1NerzNd8e8RsTsOcuLt9+8+Ldt9/56uLt+dcXXl+4M3f58tz03OWXZi/eWGwvTHdfRz1LYC88eug/vn9qVBMCAAAAAAAAAAAAnmg//jnB8NGP7udSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPq6vk0H6bIzPSF6bK8+mC2XW69/KMjm0kaSYqfJMUHyZV0t0z1dVcMG+f+4txrH368+tGjvpq94xtbtduee/WWs0nG6nS3+ru2nf5+v1Vlsb7CMmDneoGDUftfAAAA//9adQUE") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) listen(r1, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen program did not crash simplifying guilty program options testing program (duration=1m40s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program did not crash validation run: crashed=false testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$eJzs3U9sHFcdB/DvrDd2NoTUTZM2RZUcNRIgIhI7JgVXQgSEUA4VqsqBs5U4jZVNWhwXuRWiQfy79hCOSOWQE5yQuEcqFy5w6xEfKyG49IK5sGhmZ52NvevYxfba7edTzb735s3795uZnd2tIgf4zLp6Ps2HKXL1/CsrZXn1wWx79cHs7V4+yUSSRtKskiLFvzudzgfJlXS3PJ+kqLsrho1zf3HutQ8/Xv2oW2rWW3V8Y6t223Ov3nI2yVid7lZ/157U39EndVesr7AM2Lle4GDUjiTpVP55v7vnR385vl7TpzWo9ROvfOAQKLrPzU0mk2P1jV5+Dug+FbvP7EPt3qgnAAAAAPvgqbWsZSUnRj0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEyKr7XGyqTeGr382RS9v/8/Xu9LnT9YpnZ2+MO9mgcAAAAAAAAA7KOptaxlJSd65U5R/T//F6vCqer1c3krd7OQpVzISuaznOUsZSbJZF9H4yvzy8tLM/0tJwa3vDSw5aUnTHSiTlu7tHAAAAAAAAAA+FRpJFk+PupZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAvyIZ6ybVdqqXn0yjmeRokvHyuHvJ33r5w+zhqCcAAAAA++CptaxlJSd65U5Rfed/tvrefzRv5U6Ws5jltLOQ69VvAd1v/Y3VB7Pt1Qezt8ttc7/f/teOplH1mO5vD4NHPlMd0cqNLFZ7LuRa3kg719OoWpbO9OYzeF4/K+dUfKu2zZldr9Ny5e/V6Sbv7mixw+zwx5TJKiJH1iMyXc+tjMbTW0dih2dn40gzaaxP9tSGkTYsYuqTxPxYnZbr+dWwmI/Exkhc6rv6nt065smX/vSHH95s37l188bd8wdnSdszVqed6rW1ORKzfZF47tMciU2mq0icXi9fzffyg5zP2byapSzmx5nPchZyNt+tcvP19Vy+TtRthkTqymOlV7eaRe++m1w/WTub04tV2xNZzPfzRq5nIS9V/13KTL6ey7mcub4zfHob77SNIXd95/MDF3Duy3WmleTXdXowlLF9ui+u/e+5k1Vd/55HUTq5+8+j5hfqTDnGz+v0YNgYiZm+SDyzdSR+V72t3G3fubV0c/7N7Q138r06U95HvzxQT4nyejlZnqyq9PjVUdY9M7Bupqo7tV7X2FR3ulf399/+5uXqmGF36nj9Ga75zblNT6yy7rmBo8xWdWf66gZ93gLgwDv2lWPjrX+0/tp6v/WL1s3WK0e/M/GNiRfGc+TPR15uTo99sfFC8ce8n58++v4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8cnfffufWfLu9sLQh00zn3SFVe5L57/6M1ftzZkOPObLrgz5/PNmfGG7OjCfZ90EHZv7T6XTqPcX/0U+RYj+C2SlNpLPnYWkmGVQ1NerzNd8e8RsTsOcuLt9+8+Ldt9/56uLt+dcXXl+4M3f58tz03OWXZi/eWGwvTHdfRz1LYC88eug/vn9qVBMCAAAAAAAAAAAAnmg//jnB8NGP7udSAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEPq6vk0H6bIzPSF6bK8+mC2XW69/KMjm0kaSYqfJMUHyZV0t0z1dVcMG+f+4txrH368+tGjvpq94xtbtduee/WWs0nG6nS3+ru2nf5+v1Vlsb7CMmDneoGDUftfAAAA//9adQUE") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program crashed: general protection fault in lock_sock_nested validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program crashed: general protection fault in lock_sock_nested validation run: crashed=true testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$hfsplus-openat$fuse-syz_mount_image$fuse-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen detailed listing: executing program 0: syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000080)='./bus\x00', 0x810010, &(0x7f0000000340)=ANY=[], 0x1, 0x66f, &(0x7f0000000a80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r1, 0x0) program crashed: general protection fault in lock_sock_nested validation run: crashed=true reproducing took 44m51.346701052s repro crashed as (corrupted=false): general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] CPU: 0 PID: 5946 Comm: kworker/0:4 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events l2cap_info_timeout RIP: 0010:__lock_acquire+0xeb/0x7c80 kernel/locking/lockdep.c:5005 Code: 85 dc 66 00 00 83 3d 6f c1 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 3e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 91 ea 75 00 48 8b RSP: 0018:ffffc90003497600 EFLAGS: 00010002 RAX: 0000000000000026 RBX: 1ffff92000692ee4 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 RBP: ffffc90003497848 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1c9516e R12: 0000000000000001 R13: 0000000000000000 R14: ffff88802b379e00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a765c7e9c CR3: 000000000cb30000 CR4: 00000000003506f0 Call Trace: lock_acquire+0x197/0x410 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3532 lock_sock include/net/sock.h:1767 [inline] l2cap_sock_ready_cb+0x45/0x130 net/bluetooth/l2cap_sock.c:1661 l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline] l2cap_conn_start+0x753/0xe40 net/bluetooth/l2cap_core.c:1512 l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1669 process_one_work kernel/workqueue.c:2634 [inline] process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__lock_acquire+0xeb/0x7c80 kernel/locking/lockdep.c:5005 Code: 85 dc 66 00 00 83 3d 6f c1 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 3e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 91 ea 75 00 48 8b RSP: 0018:ffffc90003497600 EFLAGS: 00010002 RAX: 0000000000000026 RBX: 1ffff92000692ee4 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 RBP: ffffc90003497848 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1c9516e R12: 0000000000000001 R13: 0000000000000000 R14: ffff88802b379e00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a765c7e9c CR3: 000000000cb30000 CR4: 00000000003506f0 ---------------- Code disassembly (best guess): 0: 85 dc test %ebx,%esp 2: 66 00 00 data16 add %al,(%rax) 5: 83 3d 6f c1 e3 0c 00 cmpl $0x0,0xce3c16f(%rip) # 0xce3c17b c: 48 89 9c 24 f0 00 00 mov %rbx,0xf0(%rsp) 13: 00 14: 0f 84 11 10 00 00 je 0x102b 1a: 83 3d 3e d1 58 0b 00 cmpl $0x0,0xb58d13e(%rip) # 0xb58d15f 21: 74 36 je 0x59 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 00 00 cmpb $0x0,(%rax,%r8,1) <-- trapping instruction 2f: 74 1f je 0x50 31: 48 8b bc 24 88 00 00 mov 0x88(%rsp),%rdi 38: 00 39: e8 91 ea 75 00 call 0x75eacf 3e: 48 rex.W 3f: 8b .byte 0x8b final repro crashed as (corrupted=false): general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] CPU: 0 PID: 5946 Comm: kworker/0:4 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Workqueue: events l2cap_info_timeout RIP: 0010:__lock_acquire+0xeb/0x7c80 kernel/locking/lockdep.c:5005 Code: 85 dc 66 00 00 83 3d 6f c1 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 3e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 91 ea 75 00 48 8b RSP: 0018:ffffc90003497600 EFLAGS: 00010002 RAX: 0000000000000026 RBX: 1ffff92000692ee4 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 RBP: ffffc90003497848 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1c9516e R12: 0000000000000001 R13: 0000000000000000 R14: ffff88802b379e00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a765c7e9c CR3: 000000000cb30000 CR4: 00000000003506f0 Call Trace: lock_acquire+0x197/0x410 kernel/locking/lockdep.c:5754 lock_sock_nested+0x48/0x100 net/core/sock.c:3532 lock_sock include/net/sock.h:1767 [inline] l2cap_sock_ready_cb+0x45/0x130 net/bluetooth/l2cap_sock.c:1661 l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline] l2cap_conn_start+0x753/0xe40 net/bluetooth/l2cap_core.c:1512 l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1669 process_one_work kernel/workqueue.c:2634 [inline] process_scheduled_works+0xa45/0x15b0 kernel/workqueue.c:2711 worker_thread+0xa55/0xfc0 kernel/workqueue.c:2792 kthread+0x2fa/0x390 kernel/kthread.c:388 ret_from_fork+0x48/0x80 arch/x86/kernel/process.c:152 ret_from_fork_asm+0x11/0x20 arch/x86/entry/entry_64.S:293 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:__lock_acquire+0xeb/0x7c80 kernel/locking/lockdep.c:5005 Code: 85 dc 66 00 00 83 3d 6f c1 e3 0c 00 48 89 9c 24 f0 00 00 00 0f 84 11 10 00 00 83 3d 3e d1 58 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 91 ea 75 00 48 8b RSP: 0018:ffffc90003497600 EFLAGS: 00010002 RAX: 0000000000000026 RBX: 1ffff92000692ee4 RCX: 0000000000000000 RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 RBP: ffffc90003497848 R08: dffffc0000000000 R09: 0000000000000000 R10: dffffc0000000000 R11: fffffbfff1c9516e R12: 0000000000000001 R13: 0000000000000000 R14: ffff88802b379e00 R15: 0000000000000000 FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f4a765c7e9c CR3: 000000000cb30000 CR4: 00000000003506f0 ---------------- Code disassembly (best guess): 0: 85 dc test %ebx,%esp 2: 66 00 00 data16 add %al,(%rax) 5: 83 3d 6f c1 e3 0c 00 cmpl $0x0,0xce3c16f(%rip) # 0xce3c17b c: 48 89 9c 24 f0 00 00 mov %rbx,0xf0(%rsp) 13: 00 14: 0f 84 11 10 00 00 je 0x102b 1a: 83 3d 3e d1 58 0b 00 cmpl $0x0,0xb58d13e(%rip) # 0xb58d15f 21: 74 36 je 0x59 23: 48 89 f8 mov %rdi,%rax 26: 48 c1 e8 03 shr $0x3,%rax * 2a: 42 80 3c 00 00 cmpb $0x0,(%rax,%r8,1) <-- trapping instruction 2f: 74 1f je 0x50 31: 48 8b bc 24 88 00 00 mov 0x88(%rsp),%rdi 38: 00 39: e8 91 ea 75 00 call 0x75eacf 3e: 48 rex.W 3f: 8b .byte 0x8b