Extracting prog: 6m20.27590664s Minimizing prog: 2h1m1.027909001s Simplifying prog options: 15m14.590398471s Extracting C: 5m10.744927943s Simplifying C: 0s extracting reproducer from 1 programs testing a last program of every proc single: executing 1 programs separately with timeout 6m0s testing program (duration=6m0s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENT-mount$9p_fd-sync detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) sync() program crashed: INFO: task hung in iterate_supers program crashed: INFO: task hung in iterate_supers single: successfully extracted reproducer found reproducer with 9 syscalls minimizing guilty program testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-write$FUSE_DIRENT detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_BMAP-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_DIRENT(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_DIRENT(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, 0x0, 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r1 = dup(r0) write$FUSE_DIRENT(r1, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash extracting C reproducer testing compiled C program (duration=5m52.337643314s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd program crashed: no output from test machine a never seen crash title: no output from test machine, ignore simplifying guilty program options testing program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! extracting C reproducer testing compiled C program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd program crashed: no output from test machine a never seen crash title: no output from test machine, ignore testing program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program did not crash testing program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! validation run: crashed=true testing program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$eJzs3M1PXFUbAPDnzjD07UtbsH6WVkWrkfgBhVbtwo1GExeamOiiLhFog9BiCia2IYrG1KVp4t64NPEvcKUbo65M3OreNGkMm1ZXY+7MvTBMZyjgwGDv75fc9px7z/Sch3PPzDn3dAigsIbSP5KIAxHxW0T017PrCwzV/7q5sjT518rSZBLV6pt/JrVyN1aWJvOi+ev6ssxwKaL0aRJHW9S7cOny7MTc3PTFLD+6eP690YVLl5+ZOT9xbvrc9IXx06dPnRx7/rnxZzsSZ9qmG4Mfzh878urbV1+fPHP1nZ++SfL4m+LokKGNLj5erXa4uu462JBOerrYELakHBFpd1Vq478/yrHWef3xyiddbRywo6rVarWv/eXlKnAHS2KzJWez9wvgzpB/0Kfr3/zYpanHnnD9xfoCKI37ZnbUr/REKStTaVrfdtJQRJxZ/vvL9IideQ4BALDOd+n85+lW879S3NdQ7lC2NzQQEXdFxOGIuDsi7omIeyNqZe+PiAe2WH/zJsmt85/StW0Ftknp/O+FbG9r/fwvn/3FQDnLHazFX0nOzsxNn8h+JsNR2Zfmxzao4/uXf/283bXG+V96pPXnc8GsHdd69q1/zdTE4sS/ibnR9Y8jBntaxZ+s7gQkEXEkIga3WcfMk18fa3etXfyVzfzDHdhnqn4V8US9/5ejKf5csvH+5Oj/Ym76xGh+V9zq51+uvNGu/tv3/85K+///Le//1fgHksb92oWt13Hl98/armm2e//3Jm/V0r3ZuQ8mFhcvjkX0Jq/VG914fnzttXk+L5/GP3y89fg/HGs/iaMRkd7ED0bEQxHxcNb2RyLi0Yg4vkH8P7702Lvbj39npfFPban/1xK90XymdaI8+8O36yod2Er8af+fqqWGszObef/bTLu2dzcDAADAf08pIg5EUhpZTZdKIyP1/y9/KF1Hzy8sPnV2/v0LU/XvCAxEpZQ/6epveB46li3r8/x4U/5k9tz4i/L+Wn5kcn5uqtvBQ8H1tRn/qT/K3W4dsON8XwuKy/iH4jL+obiMfyiuFuN/fzfaAey+Vp//H3WhHcDuaxr/tv2gQKz/obiMfygu4x8KaWF/3P5L8ns8kf/uhb3SnmIkorQnmtGhRG9B7599zWeSiKgluvzGBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0CH/BAAA//+z0twg") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! validation run: crashed=true testing program (duration=5m52.337643314s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-sendmsg$key-pipe2$9p-write$P9_RVERSION-dup-write$FUSE_DIRENT-mount$9p_fd detailed listing: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf87}}, {@min_batch_time={'min_batch_time', 0x3d, 0xdff}}, {@bsdgroups}, {@stripe={'stripe', 0x3d, 0x4000}}, {@data_writeback}, {@nomblk_io_submit}]}, 0x3, 0x44d, &(0x7f0000000800)="$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") sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) program crashed: BUG: MAX_LOCKDEP_CHAINS too low! validation run: crashed=true reproducing took 2h41m28.228660731s repro crashed as (corrupted=false): Bluetooth: hci61: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci61: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci61: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci61: unexpected cc 0x0c38 length: 249 > 2 BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 PID: 4485 Comm: kworker/u5:3 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: hci61 hci_rx_work Call trace: dump_backtrace+0x1c4/0x1f0 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3777 [inline] validate_chain kernel/locking/lockdep.c:3798 [inline] __lock_acquire+0x1864/0x6634 kernel/locking/lockdep.c:5063 lock_acquire+0x20c/0x638 kernel/locking/lockdep.c:5678 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x6c/0xb0 kernel/locking/spinlock.c:162 get_partial_node+0x44/0x3bc mm/slub.c:2215 get_partial mm/slub.c:2330 [inline] ___slab_alloc+0x67c/0xe90 mm/slub.c:3131 __slab_alloc+0x74/0xd0 mm/slub.c:3240 slab_alloc_node mm/slub.c:3325 [inline] __kmem_cache_alloc_node+0x298/0x318 mm/slub.c:3398 __do_kmalloc_node mm/slab_common.c:935 [inline] __kmalloc_node_track_caller+0xb8/0x174 mm/slab_common.c:956 kmalloc_reserve net/core/skbuff.c:446 [inline] __alloc_skb+0x260/0x728 net/core/skbuff.c:515 alloc_skb include/linux/skbuff.h:1303 [inline] bt_skb_alloc include/net/bluetooth/bluetooth.h:474 [inline] l2cap_build_cmd net/bluetooth/l2cap_core.c:3005 [inline] l2cap_send_cmd+0xa8/0x740 net/bluetooth/l2cap_core.c:1004 l2cap_request_info+0x204/0x318 net/bluetooth/l2cap_core.c:1453 l2cap_conn_ready net/bluetooth/l2cap_core.c:1666 [inline] l2cap_connect_cfm+0x530/0xedc net/bluetooth/l2cap_core.c:7611 hci_connect_cfm include/net/bluetooth/hci_core.h:1821 [inline] hci_remote_features_evt+0x46c/0x840 net/bluetooth/hci_event.c:3734 hci_event_func net/bluetooth/hci_event.c:7314 [inline] hci_event_packet+0x698/0xe60 net/bluetooth/hci_event.c:7366 hci_rx_work+0x310/0xa70 net/bluetooth/hci_core.c:4006 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 Bluetooth: hci59: command 0x0419 tx timeout Bluetooth: hci61: command 0x0409 tx timeout final repro crashed as (corrupted=false): Bluetooth: hci61: unexpected cc 0x1001 length: 249 > 9 Bluetooth: hci61: unexpected cc 0x0c23 length: 249 > 4 Bluetooth: hci61: unexpected cc 0x0c25 length: 249 > 3 Bluetooth: hci61: unexpected cc 0x0c38 length: 249 > 2 BUG: MAX_LOCKDEP_CHAINS too low! turning off the locking correctness validator. CPU: 1 PID: 4485 Comm: kworker/u5:3 Not tainted syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 Workqueue: hci61 hci_rx_work Call trace: dump_backtrace+0x1c4/0x1f0 arch/arm64/kernel/stacktrace.c:158 show_stack+0x2c/0x3c arch/arm64/kernel/stacktrace.c:165 __dump_stack+0x30/0x40 lib/dump_stack.c:88 dump_stack_lvl+0xf4/0x15c lib/dump_stack.c:106 dump_stack+0x1c/0x5c lib/dump_stack.c:113 add_chain_cache kernel/locking/lockdep.c:-1 [inline] lookup_chain_cache_add kernel/locking/lockdep.c:3777 [inline] validate_chain kernel/locking/lockdep.c:3798 [inline] __lock_acquire+0x1864/0x6634 kernel/locking/lockdep.c:5063 lock_acquire+0x20c/0x638 kernel/locking/lockdep.c:5678 __raw_spin_lock_irqsave include/linux/spinlock_api_smp.h:110 [inline] _raw_spin_lock_irqsave+0x6c/0xb0 kernel/locking/spinlock.c:162 get_partial_node+0x44/0x3bc mm/slub.c:2215 get_partial mm/slub.c:2330 [inline] ___slab_alloc+0x67c/0xe90 mm/slub.c:3131 __slab_alloc+0x74/0xd0 mm/slub.c:3240 slab_alloc_node mm/slub.c:3325 [inline] __kmem_cache_alloc_node+0x298/0x318 mm/slub.c:3398 __do_kmalloc_node mm/slab_common.c:935 [inline] __kmalloc_node_track_caller+0xb8/0x174 mm/slab_common.c:956 kmalloc_reserve net/core/skbuff.c:446 [inline] __alloc_skb+0x260/0x728 net/core/skbuff.c:515 alloc_skb include/linux/skbuff.h:1303 [inline] bt_skb_alloc include/net/bluetooth/bluetooth.h:474 [inline] l2cap_build_cmd net/bluetooth/l2cap_core.c:3005 [inline] l2cap_send_cmd+0xa8/0x740 net/bluetooth/l2cap_core.c:1004 l2cap_request_info+0x204/0x318 net/bluetooth/l2cap_core.c:1453 l2cap_conn_ready net/bluetooth/l2cap_core.c:1666 [inline] l2cap_connect_cfm+0x530/0xedc net/bluetooth/l2cap_core.c:7611 hci_connect_cfm include/net/bluetooth/hci_core.h:1821 [inline] hci_remote_features_evt+0x46c/0x840 net/bluetooth/hci_event.c:3734 hci_event_func net/bluetooth/hci_event.c:7314 [inline] hci_event_packet+0x698/0xe60 net/bluetooth/hci_event.c:7366 hci_rx_work+0x310/0xa70 net/bluetooth/hci_core.c:4006 process_one_work+0x7e4/0x13bc kernel/workqueue.c:2292 worker_thread+0x8cc/0xfe8 kernel/workqueue.c:2439 kthread+0x254/0x2e0 kernel/kthread.c:376 ret_from_fork+0x10/0x20 arch/arm64/kernel/entry.S:850 Bluetooth: hci59: command 0x0419 tx timeout Bluetooth: hci61: command 0x0409 tx timeout