Extracting prog: 3m23.572700984s
Minimizing prog: 23m44.67434009s
Simplifying prog options: 8m6.128840948s
Extracting C: 3m5.866730018s
Simplifying C: 0s
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
single: failed to extract reproducer
single: executing 1 programs separately with timeout 1m40s
testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program crashed: general protection fault in lock_sock_nested
single: successfully extracted reproducer
found reproducer with 8 syscalls
minimizing guilty program
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
getpid()
setns(0xffffffffffffffff, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-bind$bt_l2cap-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-syz_init_net_socket$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$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")
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x5a3, &(0x7f0000000bc0)="$eJzs3U1rXNUbAPDn3EzSpun/n1QErV0YKNiCmjZpRVHBFuvOhS8FV4IxL6V02oYmgq0VW6jfQD+A4M6NuCwiRd24dSf4AaRYpGbjLnInd9JpOpOXdmZu7f394M7ct+E5d4Znzr1nzj0TQGWN5w9ZxN6IWEgRoy3balFsHF/d7+/bl2eWb1+eSbGy8u5fKVKxrrl/Kp5HihfvjIhff0zx2MC9cRcvXjozXa/PXSiWDy2dXTi0ePHS86fPTp+aOzV3bmryxckXjh6ZOnq4K8e5OyJ+njhRuzb/+r5vZ77e89n331xPcayxPtYdR7eMx/jae9Iqf19f6nawkgwUx9P6Eafaup1e6XOh2LLm5zcYEU/EaAzEnQ9vND5/u9TCAT21kiJWgIpK8h8qqnkekF//Nqdyz0iAfrl1fLUBoNm2t7yW/7XVtsHY2Wgb2LWcorVZJ0VEN1rm8hgLz6TRfIoetcMB7V25GhFPtqv/UyM3xxqt+Hn+Z3flfxYRbxXP+fp37jP++Lpl+Q/98yD5/0FL/n94n/HlPwAAAAAAAHTPjeMR8Vy73/+ytf4/0ab/z0hEHOtC/M1//8tudiEM0Mat4xGvRsTyPf3/suYuYwPF0v8a/QEG0/zpwbnDEfH/iDgYgzvmT9fnJjeIMb7vl8GO21r6/+VTHr/ZF7Aox83ajrtfMzu9NP0gxwysunU14qlanv8p7s7/tFb/pzb1f/59sLDFGCsnXvup07bN8x/olZWvIg60rf/vjFyRNh6f41Be/xePbWN88v717zrFl/9Qnrz+37Vx/o+lxighxXg9i9uP8emfvz9A/rc//x9KJxtDzgwV6z6eXlq6MBkxlN68d/3U9ssMj6JmPjTzJc//g/vbX/9vdP4/HBFXthjz5A9vXOu0Tf0P5cnzf3bT+r9lvL77mNn/3pf/dIq/tfr/aKNOP1is0f4HG9tqgpZdTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4L8oiYnekbGJtPssmJiJGIuLx2JXVzy8uPTt//qNzs/m2xv//Z81/+h1dXU7N//8fa1meWrd8JCL2RMQXA8ON5YmZ8/XZsg8eAAAAAAAAAAAAAAAAAAAAHhIjHe7/z/0xUHbpgJ6rlV0AoDTyH6pL/kN1bTP/B3tVDqD/1P9QXfIfqkv+Q3XJf6iuPP93ll0IoBTqfwAAAAAAeKTsefrGbykirrw83JhyQ8U2/fzh0ZaVXQCgNIb4gerS9QeqawvX+Kkf5QDKs1mSd749wNcDAAAAAAAAAAAAAPTLgb3u/4eq2s79/8M9LAfQf+7/h+py/z9Ul2t8wP3/AAAAAAAAAAAAAPDwW7x46cx0vT53oYyZHUUhyoluxkxZM/FwFGOjmZK/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDX/BgAA///VtfOK")
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(0xffffffffffffffff, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program crashed: general protection fault in lock_sock_nested
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program did not crash
extracting C reproducer
testing compiled C program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
program did not crash
simplifying guilty program options
testing program (duration=2m22.56923704s, {Threaded:false Repeat:true RepeatTimes:0 Procs:6 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program crashed: lost connection to test machine
a never seen crash title: lost connection to test machine, ignore
testing program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
detailed listing:
executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe)
listen(r0, 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
program crashed: general protection fault in lock_sock_nested
extracting C reproducer
testing compiled C program (duration=2m22.56923704s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_init_net_socket$bt_l2cap-bind$bt_l2cap-listen-getpid-syz_pidfd_open-setns-syz_clone
program did not crash
reproducing took 37m46.102093293s
repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb 53 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c8 45 8c 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc900001b7690 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2079f6f R12: ffff88801cac4880
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 000000004f028000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
lock_sock_nested+0x48/0x100 net/core/sock.c:3662
lock_sock include/net/sock.h:1624 [inline]
l2cap_sock_ready_cb+0x47/0x140 net/bluetooth/l2cap_sock.c:1661
l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline]
l2cap_conn_start+0x8e2/0x1150 net/bluetooth/l2cap_core.c:1511
l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1668
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319
worker_thread+0x870/0xd30 kernel/workqueue.c:3400
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb 53 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c8 45 8c 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc900001b7690 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2079f6f R12: ffff88801cac4880
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 000000004f028000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: b6 04 mov $0x4,%dh
2: 30 84 c0 0f 85 f8 16 xor %al,0x16f8850f(%rax,%rax,8)
9: 00 00 add %al,(%rax)
b: 45 31 f6 xor %r14d,%r14d
e: 83 3d eb 53 a0 0e 00 cmpl $0x0,0xea053eb(%rip) # 0xea05400
15: 0f 84 c8 13 00 00 je 0x13e3
1b: 89 54 24 60 mov %edx,0x60(%rsp)
1f: 89 5c 24 38 mov %ebx,0x38(%rsp)
23: 4c 89 f8 mov %r15,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 80 3c 30 00 cmpb $0x0,(%rax,%rsi,1) <-- trapping instruction
2e: 74 12 je 0x42
30: 4c 89 ff mov %r15,%rdi
33: e8 c8 45 8c 00 call 0x8c4600
38: 48 rex.W
39: be 00 00 00 00 mov $0x0,%esi
3e: 00 fc add %bh,%ah
final repro crashed as (corrupted=false):
Oops: general protection fault, probably for non-canonical address 0xdffffc000000004b: 0000 [#1] PREEMPT SMP KASAN NOPTI
KASAN: null-ptr-deref in range [0x0000000000000258-0x000000000000025f]
CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0
Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
Workqueue: events l2cap_info_timeout
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb 53 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c8 45 8c 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc900001b7690 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2079f6f R12: ffff88801cac4880
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 000000004f028000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5851
lock_sock_nested+0x48/0x100 net/core/sock.c:3662
lock_sock include/net/sock.h:1624 [inline]
l2cap_sock_ready_cb+0x47/0x140 net/bluetooth/l2cap_sock.c:1661
l2cap_chan_ready net/bluetooth/l2cap_core.c:1263 [inline]
l2cap_conn_start+0x8e2/0x1150 net/bluetooth/l2cap_core.c:1511
l2cap_info_timeout+0x68/0xa0 net/bluetooth/l2cap_core.c:1668
process_one_work kernel/workqueue.c:3238 [inline]
process_scheduled_works+0xabe/0x18e0 kernel/workqueue.c:3319
worker_thread+0x870/0xd30 kernel/workqueue.c:3400
kthread+0x7a9/0x920 kernel/kthread.c:464
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:148
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Modules linked in:
---[ end trace 0000000000000000 ]---
RIP: 0010:__lock_acquire+0x6a/0x2100 kernel/locking/lockdep.c:5091
Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d eb 53 a0 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 c8 45 8c 00 48 be 00 00 00 00 00 fc
RSP: 0018:ffffc900001b7690 EFLAGS: 00010006
RAX: 000000000000004b RBX: 0000000000000000 RCX: 0000000000000000
RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000258
RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000
R10: dffffc0000000000 R11: fffffbfff2079f6f R12: ffff88801cac4880
R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000258
FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000000040 CR3: 000000004f028000 CR4: 0000000000352ef0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
----------------
Code disassembly (best guess):
0: b6 04 mov $0x4,%dh
2: 30 84 c0 0f 85 f8 16 xor %al,0x16f8850f(%rax,%rax,8)
9: 00 00 add %al,(%rax)
b: 45 31 f6 xor %r14d,%r14d
e: 83 3d eb 53 a0 0e 00 cmpl $0x0,0xea053eb(%rip) # 0xea05400
15: 0f 84 c8 13 00 00 je 0x13e3
1b: 89 54 24 60 mov %edx,0x60(%rsp)
1f: 89 5c 24 38 mov %ebx,0x38(%rsp)
23: 4c 89 f8 mov %r15,%rax
26: 48 c1 e8 03 shr $0x3,%rax
* 2a: 80 3c 30 00 cmpb $0x0,(%rax,%rsi,1) <-- trapping instruction
2e: 74 12 je 0x42
30: 4c 89 ff mov %r15,%rdi
33: e8 c8 45 8c 00 call 0x8c4600
38: 48 rex.W
39: be 00 00 00 00 mov $0x0,%esi
3e: 00 fc add %bh,%ah