program: socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) writev(r0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c65b7355d2342c4205876", 0xb}], 0x1) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x61f0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) close(0x3) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080), 0x4, 0x4f3, &(0x7f00000012c0)="$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") r3 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') ioctl$FS_IOC_FSSETXATTR(r3, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1000e, &(0x7f0000000300), 0x3, 0x448, &(0x7f0000000f80)="$eJzs282PE+UfAPDvzG6XHz/QrYovvKiraNz4sssCKgcPajTxgImJHvS42V0IUljDrokQomAMnowx8W48+i940osxnky86t2QEMMF8FQznRloS1ugtBTo55MMPM+87PP9duZpn5mnDWBszWT/JBGbI+LPiJjOq607zOT/XTx/cunS+ZNLSdTr7/6TNPa7cP7kUrlredymojKbRqRfJLG9Q7trx08cXqzVVo4V9fn1Ix/Nrx0/8cKhI4sHVw6uHN29b9/ePQsvv7T7xYHkmcV0Ydunqzu2vvXBN2/v/6ol/7Y8BmSm18an6/UBNzda94w6APoyERGTEVFp9P/pmGjUctPx5ucjDQ4Yqnq9Xt/UffOpOnAXS6K1rsvDuCg/6LP733JpHwS8Orzhx8idey2/Acryvlgs+ZbJSIt9KkO8v52JiPdP/ftdtsRwnkMAALT4KRv/PN9p/JfGQ0373VvMDVUj4r6IuD8iHoiILRHxYERj34cj4pEbbL99kuTq8U96tq/ErlM2/nulmNtqHf+l9em8UJ1ovBr5GLAaleTAodrKruI1mY3Khqy+0KONn9/44+tu25rHf9mStV+OBYs4zk5uaD1meXF98eayvuLc6Yhtk53yTy7PBCQRsTUitvXZxqFnf9jRbdu18+9hss+AmtS/j3gmP/+noi3/UtJ7fnL+f1Fb2TVfXhVX++33M+90a/+m8h+A7Pz/v+P1fzn/atI8X7t2422c+evLrvc0/V7/U8l7jfJUse6TxfX1YwsRU8n+POjm9buvHFvWy/2z/Gd3duz/jfe48pXYHhHZRfxoRDwWEY8XsT8REU9GxM4e+f/6+lMf9p//cGX5L9/Q+b9SmIr2NZ0LE4d/+bGl0epV+V/qff73NkqzxZrref+7nrj6u5oBAADgzpNGxOZI0rnL5TSdm8u/L78lIq2trq0/d2D146PL+W8EqlFJyydd003PQxeK2/q8fjoi8q8WlNv3FM+Nv53Y2KjPLa3WlkedPIy5TV36f+bviVFHBwzdAObRgDuU/g/jS/+H8aX/w/jq0P83jiIO4Nbr9Pn/2QjiAG69tv5v2g/GiPt/GF/6P4wv/R/G0trGuPaP5HsWyr/U5+F3bSEqt0UYQytEeluEoTCkwmjflwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAblvwAAAP//i0zh2w==") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file2\x00', 0x10074, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) [ 88.543463][ T5289] Bluetooth: hci0: command tx timeout [ 89.014087][ T5329] loop0: detected capacity change from 0 to 512 [ 89.129314][ T5329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.134618][ T5329] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.204713][ T5329] overlay: ./file2 is not a directory [ 89.231102][ T75] ------------[ cut here ]------------ [ 89.234302][ T75] current->flags & PF_MEMALLOC [ 89.234320][ T75] WARNING: fs/ext4/inode.c:5764 at ext4_write_inode+0x544/0x620, CPU#0: kswapd0/75 [ 89.240660][ T75] Modules linked in: [ 89.243267][ T75] CPU: 0 UID: 0 PID: 75 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 89.248045][ T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.252864][ T75] RIP: 0010:ext4_write_inode+0x544/0x620 [ 89.255602][ T75] Code: 8b 05 60 87 b0 10 48 3b 44 24 30 75 5a 44 89 e0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c3 7f 24 09 cc e8 1d 3b 3c ff 90 <0f> 0b 90 eb cf e8 12 3b 3c ff 41 bc fb ff ff ff eb c2 e8 05 3b 3c [ 89.263722][ T75] RSP: 0018:ffffc90000aeee80 EFLAGS: 00010293 [ 89.266329][ T75] RAX: ffffffff828998e3 RBX: 0000000000000800 RCX: ffff888000af4a00 [ 89.269833][ T75] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 89.273358][ T75] RBP: 0000000000000001 R08: ffffffff9030f0f7 R09: 1ffffffff2061e1e [ 89.276800][ T75] R10: dffffc0000000000 R11: ffffffff828993a0 R12: 0000000000000000 [ 89.280275][ T75] R13: ffffc90000aeefc0 R14: ffff888048844d38 R15: ffff888000af4a00 [ 89.283646][ T75] FS: 0000000000000000(0000) GS:ffff88808c87e000(0000) knlGS:0000000000000000 [ 89.287500][ T75] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.290427][ T75] CR2: 0000000000000000 CR3: 0000000036226000 CR4: 0000000000352ef0 [ 89.293791][ T75] Call Trace: [ 89.295264][ T75] [ 89.296497][ T75] ? do_raw_spin_unlock+0x4d/0x210 [ 89.298668][ T75] __writeback_single_inode+0x75a/0x10e0 [ 89.300838][ T75] writeback_single_inode+0x4ac/0xdc0 [ 89.302934][ T75] write_inode_now+0x1c2/0x290 [ 89.304759][ T75] ? __pfx_write_inode_now+0x10/0x10 [ 89.306812][ T75] ? do_raw_spin_unlock+0x4d/0x210 [ 89.308954][ T75] iput+0x8c1/0xe80 [ 89.310616][ T75] __dentry_kill+0x1a2/0x690 [ 89.312497][ T75] ? shrink_kill+0x8d/0x2c0 [ 89.314285][ T75] shrink_kill+0xa9/0x2c0 [ 89.316200][ T75] shrink_dentry_list+0x2e0/0x5e0 [ 89.318255][ T75] prune_dcache_sb+0x119/0x180 [ 89.320258][ T75] ? __pfx_prune_dcache_sb+0x10/0x10 [ 89.322495][ T75] ? list_lru_count_one+0x27/0x2c0 [ 89.324765][ T75] ? list_lru_count_one+0x264/0x2c0 [ 89.327046][ T75] super_cache_scan+0x369/0x4b0 [ 89.329460][ T75] do_shrink_slab+0x6fb/0x1150 [ 89.331557][ T75] shrink_slab+0x835/0x11f0 [ 89.333430][ T75] ? shrink_slab+0x1ef/0x11f0 [ 89.335436][ T75] ? __pfx_shrink_slab+0x10/0x10 [ 89.337686][ T75] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 89.340169][ T75] ? mlock_drain_local+0x79/0x480 [ 89.342364][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.344505][ T75] shrink_one+0x2d9/0x710 [ 89.346458][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.348506][ T75] shrink_node+0x31bf/0x3ae0 [ 89.350450][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.352705][ T75] ? __lock_acquire+0x6b5/0x2cf0 [ 89.354600][ T75] ? percpu_ref_put+0x19/0x180 [ 89.356563][ T75] ? percpu_ref_put+0x19/0x180 [ 89.358785][ T75] ? __pfx_shrink_node+0x10/0x10 [ 89.360837][ T75] ? percpu_ref_put+0x19/0x180 [ 89.362707][ T75] ? percpu_ref_put+0x19/0x180 [ 89.364767][ T75] ? mem_cgroup_iter+0x420/0x450 [ 89.366915][ T75] ? mem_cgroup_iter+0x3b/0x450 [ 89.369139][ T75] kswapd+0x1736/0x2de0 [ 89.370975][ T75] ? kswapd+0x927/0x2de0 [ 89.372819][ T75] ? __pfx_kswapd+0x10/0x10 [ 89.374694][ T75] ? __lock_acquire+0x6b5/0x2cf0 [ 89.376957][ T75] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 89.379685][ T75] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.382261][ T75] ? __pfx_autoremove_wake_function+0x10/0x10 [ 89.384947][ T75] ? __kthread_parkme+0x7a/0x1f0 [ 89.388574][ T75] kthread+0x389/0x470 [ 89.390299][ T75] ? __pfx_kswapd+0x10/0x10 [ 89.392417][ T75] ? __pfx_kthread+0x10/0x10 [ 89.394506][ T75] ret_from_fork+0x514/0xb70 [ 89.396633][ T75] ? __pfx_ret_from_fork+0x10/0x10 [ 89.399068][ T75] ? __switch_to+0xc79/0x1410 [ 89.401197][ T75] ? __pfx_kthread+0x10/0x10 [ 89.403305][ T75] ret_from_fork_asm+0x1a/0x30 [ 89.405472][ T75] [ 89.406903][ T75] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 89.410012][ T75] CPU: 0 UID: 0 PID: 75 Comm: kswapd0 Not tainted syzkaller #0 PREEMPT(full) [ 89.413839][ T75] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.418202][ T75] Call Trace: [ 89.419752][ T75] [ 89.421100][ T75] vpanic+0x56c/0xa60 [ 89.422925][ T75] ? __pfx__printk+0x10/0x10 [ 89.424991][ T75] ? __pfx_vpanic+0x10/0x10 [ 89.427027][ T75] ? is_bpf_text_address+0x292/0x2b0 [ 89.429321][ T75] ? is_bpf_text_address+0x26/0x2b0 [ 89.431657][ T75] panic+0xc5/0xd0 [ 89.433286][ T75] ? __pfx_panic+0x10/0x10 [ 89.435236][ T75] ? ret_from_fork_asm+0x1a/0x30 [ 89.437474][ T75] __warn+0x315/0x4c0 [ 89.439125][ T75] ? ext4_write_inode+0x544/0x620 [ 89.441191][ T75] ? ext4_write_inode+0x544/0x620 [ 89.443297][ T75] __report_bug+0x29a/0x540 [ 89.445158][ T75] ? ext4_write_inode+0x544/0x620 [ 89.447310][ T75] ? __pfx___report_bug+0x10/0x10 [ 89.449547][ T75] ? __filemap_fdatawait_range+0x220/0x2c0 [ 89.452064][ T75] ? __lock_acquire+0x6b5/0x2cf0 [ 89.454131][ T75] ? ext4_write_inode+0x544/0x620 [ 89.456443][ T75] report_bug+0x16a/0x220 [ 89.458438][ T75] ? ext4_write_inode+0x544/0x620 [ 89.460756][ T75] ? ext4_write_inode+0x546/0x620 [ 89.462996][ T75] handle_bug+0x9c/0x200 [ 89.464867][ T75] exc_invalid_op+0x1a/0x50 [ 89.467014][ T75] asm_exc_invalid_op+0x1a/0x20 [ 89.469254][ T75] RIP: 0010:ext4_write_inode+0x544/0x620 [ 89.471816][ T75] Code: 8b 05 60 87 b0 10 48 3b 44 24 30 75 5a 44 89 e0 48 83 c4 38 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c3 7f 24 09 cc e8 1d 3b 3c ff 90 <0f> 0b 90 eb cf e8 12 3b 3c ff 41 bc fb ff ff ff eb c2 e8 05 3b 3c [ 89.480324][ T75] RSP: 0018:ffffc90000aeee80 EFLAGS: 00010293 [ 89.482908][ T75] RAX: ffffffff828998e3 RBX: 0000000000000800 RCX: ffff888000af4a00 [ 89.486350][ T75] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 89.489762][ T75] RBP: 0000000000000001 R08: ffffffff9030f0f7 R09: 1ffffffff2061e1e [ 89.493219][ T75] R10: dffffc0000000000 R11: ffffffff828993a0 R12: 0000000000000000 [ 89.496722][ T75] R13: ffffc90000aeefc0 R14: ffff888048844d38 R15: ffff888000af4a00 [ 89.500229][ T75] ? __pfx_ext4_write_inode+0x10/0x10 [ 89.502683][ T75] ? ext4_write_inode+0x543/0x620 [ 89.504813][ T75] ? do_raw_spin_unlock+0x4d/0x210 [ 89.506957][ T75] __writeback_single_inode+0x75a/0x10e0 [ 89.509190][ T75] writeback_single_inode+0x4ac/0xdc0 [ 89.511408][ T75] write_inode_now+0x1c2/0x290 [ 89.513380][ T75] ? __pfx_write_inode_now+0x10/0x10 [ 89.515771][ T75] ? do_raw_spin_unlock+0x4d/0x210 [ 89.518029][ T75] iput+0x8c1/0xe80 [ 89.519755][ T75] __dentry_kill+0x1a2/0x690 [ 89.521761][ T75] ? shrink_kill+0x8d/0x2c0 [ 89.523804][ T75] shrink_kill+0xa9/0x2c0 [ 89.525765][ T75] shrink_dentry_list+0x2e0/0x5e0 [ 89.528077][ T75] prune_dcache_sb+0x119/0x180 [ 89.530208][ T75] ? __pfx_prune_dcache_sb+0x10/0x10 [ 89.532613][ T75] ? list_lru_count_one+0x27/0x2c0 [ 89.534973][ T75] ? list_lru_count_one+0x264/0x2c0 [ 89.537302][ T75] super_cache_scan+0x369/0x4b0 [ 89.539593][ T75] do_shrink_slab+0x6fb/0x1150 [ 89.541823][ T75] shrink_slab+0x835/0x11f0 [ 89.543905][ T75] ? shrink_slab+0x1ef/0x11f0 [ 89.545910][ T75] ? __pfx_shrink_slab+0x10/0x10 [ 89.548189][ T75] ? __pfx_try_to_shrink_lruvec+0x10/0x10 [ 89.550724][ T75] ? mlock_drain_local+0x79/0x480 [ 89.552967][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.555228][ T75] shrink_one+0x2d9/0x710 [ 89.557314][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.559456][ T75] shrink_node+0x31bf/0x3ae0 [ 89.561558][ T75] ? shrink_node+0x2d92/0x3ae0 [ 89.563757][ T75] ? __lock_acquire+0x6b5/0x2cf0 [ 89.565992][ T75] ? percpu_ref_put+0x19/0x180 [ 89.568206][ T75] ? percpu_ref_put+0x19/0x180 [ 89.570313][ T75] ? __pfx_shrink_node+0x10/0x10 [ 89.572448][ T75] ? percpu_ref_put+0x19/0x180 [ 89.574553][ T75] ? percpu_ref_put+0x19/0x180 [ 89.576799][ T75] ? mem_cgroup_iter+0x420/0x450 [ 89.579029][ T75] ? mem_cgroup_iter+0x3b/0x450 [ 89.581091][ T75] kswapd+0x1736/0x2de0 [ 89.582948][ T75] ? kswapd+0x927/0x2de0 [ 89.584864][ T75] ? __pfx_kswapd+0x10/0x10 [ 89.586835][ T75] ? __lock_acquire+0x6b5/0x2cf0 [ 89.589062][ T75] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 89.591475][ T75] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 89.594092][ T75] ? __pfx_autoremove_wake_function+0x10/0x10 [ 89.597217][ T75] ? __kthread_parkme+0x7a/0x1f0 [ 89.599405][ T75] kthread+0x389/0x470 [ 89.601284][ T75] ? __pfx_kswapd+0x10/0x10 [ 89.603374][ T75] ? __pfx_kthread+0x10/0x10 [ 89.605355][ T75] ret_from_fork+0x514/0xb70 [ 89.607342][ T75] ? __pfx_ret_from_fork+0x10/0x10 [ 89.609650][ T75] ? __switch_to+0xc79/0x1410 [ 89.611802][ T75] ? __pfx_kthread+0x10/0x10 [ 89.613942][ T75] ret_from_fork_asm+0x1a/0x30 [ 89.616080][ T75] [ 89.617760][ T75] Kernel Offset: disabled [ 89.619695][ T75] Rebooting in 86400 seconds..