program:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="7115e47589bcee59b0a61eaa45ab542a71510c572b3ac535cee85c1e699a712f423dae8134f2affd672cf88f7672ab446dc0e41c3564ee64ac7e0945fcb596422528c6569dd67ebd870f8a7aff04c916559b3ece4996a3e0a265fe997ff2f48600ab8c68ecf14ae2c4699a1c6b81390f0fcb1da506fcc6800cbc9571aec8624b297a9a5bffc54c1d1feb311706b1e8b1c077", @ANYRESOCT=r0, @ANYRESHEX=r0], 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000008c0)='none\x00', 0x1cf)
mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./proc\x00', &(0x7f0000000980)='proc\x00', 0x0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000009c0)={0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000a00)={{0x84, @loopback, 0x4e20, 0x0, 'rr\x00'}, {@loopback, 0x4e20, 0x1, 0x1}}, 0x44)
syz_mount_image$minix(&(0x7f0000000b00), &(0x7f0000000b40)='./file1\x00', 0x1810002, &(0x7f0000000b80)=ANY=[], 0x1, 0x1e2, &(0x7f0000000bc0)="$eJzs28tO1FAcx/FfO52W4v22cWXiQjdOdZhE2ckD+ALuCFRCLGrUjcRE2fgePoY738QXgESfoOaU1qGkpy0dZ8rl+0mgh0N/55wm/NtTkhGAC+t69t2Ro2HWStP0yz1JL19I8orfV/IXtUYA85E6h0Vv41d3L9WnAJwNg9/V/YG1wH8UDZe7AHCWHawNsn3AT0f69efzxn7+NWy5fzhYc6VB/sORvC8t1W07/uX3nOx415P2j+QDlQdwvloG+n6Yf6ByPmy7/nz+5WP55aageWUy9tzs8PB+OX9J0mVJVyRdlXQtf9e6Ielmxfybx+a/03L9wCzMX9+o1FNXtk51flQTCernN9XzajuJHzct1GKY559UjNuGn+fHHecv8isd80GeH228TTatZz3vODpQz53Wf1hV300a699q+u/DWerfs9Q/gGYfPu2+Xk+S+P3JG279OebJ1nFkGuehUWwkTY+5TTenvv2P2c2bX+/X3twIT8cy7I2eb0wA5i76uPMuCrX7aHtnfSveit+MJ6vPJivjydPVKNuXR7PszgGcZtOHfrvzvXkvCAAAAAAAAAAAAAAAnNgtSbf7XgQAAACAhVjEx4n6vkYAAAAAAAAAAAAAAAAAAADgvPgbAAD//6hDOM8=")
syz_mount_image$exfat(0x0, &(0x7f0000000dc0)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f0000000e00))
rename(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)='./bus\x00')
rmdir(&(0x7f0000000ec0)='./bus\x00')
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r3, &(0x7f0000000a80)={0x2, 0x4e20, @loopback}, 0x10)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./proc/net/ip_vs_conn\x00', 0x0, 0x0)
read(r4, &(0x7f0000000b00), 0x1000)
syz_usb_control_io$hid(r1, 0x0, 0x0)
accept4$unix(r4, 0x0, &(0x7f0000000000), 0x800)
syz_usb_control_io(r1, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f0000000f00)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000f40)='./file0\x00', &(0x7f0000000f80), 0x8, &(0x7f0000000fc0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000001000)='./file0\x00')
r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x103042, 0x0)
lseek(r6, 0x1d5, 0x1)
syz_open_dev$I2C(&(0x7f00000005c0), 0x2, 0x41)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000340)={0x1, 0x0, 0xfffffeff, &(0x7f0000000380)={0xf, "a12fa1f55d27060f351b050000003f0b1e805e00"}})
syz_usb_connect$cdc_ncm(0x5, 0x83, &(0x7f0000000680)=ANY=[@ANYBLOB="12010102020000402505a1a44000010203010902710002010600000904000001020d00000b240600013e25210481be05240009000d240f0105000000040002000306241a01000408241c05000f030007240a054005000905810340000005080904010000020d00000904010102020d000009058202400004999b212ef4710869f044f9"], &(0x7f0000000880)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x250, 0x6, 0xf, 0xfd, 0x20, 0x40}, 0x42, &(0x7f0000000780)=ANY=[@ANYBLOB="050f4200060385e5a650b2fd16e7081331b9eb84ec100b0a1003000800039f04000710021877ffff0a100302000001036c011410040063c33a214f2f6173a5cb2fd8"], 0x1, [{0x6f, &(0x7f0000000800)=ANY=[@ANYBLOB="6f035a65b0226e41255a1443ac80c3f6642f1e3d470049d100bd1d31fb329638071c6e16a956ff97adb87839becdc8ce5167a3a231b621db57a23e40665f951a80ae453f2363e9f231a6ec06002aca519865f970283fa8a145848c27a8baaa9119b41a114900"/111]}]})
socket$nl_generic(0x10, 0x3, 0x10)
[ 93.910147][ T5284] Bluetooth: hci0: command tx timeout
[ 94.234513][ T1241] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 94.364491][ T1241] usb 5-1: device descriptor read/64, error -71
[ 94.604510][ T1241] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[ 94.734468][ T1241] usb 5-1: device descriptor read/64, error -71
[ 94.844680][ T1241] usb usb5-port1: attempt power cycle
[ 95.184510][ T1241] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[ 95.205063][ T1241] usb 5-1: device descriptor read/8, error -71
[ 95.444987][ T1241] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[ 95.465076][ T1241] usb 5-1: device descriptor read/8, error -71
[ 95.575064][ T1241] usb usb5-port1: unable to enumerate USB device
[ 95.984959][ T5284] Bluetooth: hci0: command tx timeout
[ 97.046599][ T55] IPVS: starting estimator thread 0...
[ 97.093573][ T5326] loop0: detected capacity change from 0 to 64
[ 97.135248][ T5333] IPVS: using max 56 ests per chain, 134400 per kthread
[ 97.187199][ T5326] syz.0.0: attempt to access beyond end of device
[ 97.187199][ T5326] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[ 97.188533][ T5326] minix-fs error (device loop0): minix_unlink:149: inode #9: comm syz.0.0: inode has corrupted nlink
[ 97.216359][ T5326] ------------[ cut here ]------------
[ 97.216367][ T5326] !(inode_state_read_once(inode) & I_LINKABLE)
[ 97.216379][ T5326] WARNING: fs/inode.c:465 at inc_nlink+0x122/0x150, CPU#0: syz.0.0/5326
[ 97.224927][ T5326] Modules linked in:
[ 97.227389][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 97.231275][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.235709][ T5326] RIP: 0010:inc_nlink+0x122/0x150
[ 97.237932][ T5326] Code: e4 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 39 61 e4 ff e9 3f ff ff ff e8 2f e5 71 ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff
[ 97.247455][ T5326] RSP: 0018:ffffc9000f897418 EFLAGS: 00010287
[ 97.250600][ T5326] RAX: ffffffff82563d01 RBX: ffff8880147bb650 RCX: 0000000000100000
[ 97.254167][ T5326] RDX: ffffc90020001000 RSI: 0000000000001770 RDI: 0000000000001771
[ 97.257801][ T5326] RBP: 0000000000000000 R08: ffffffff917a987f R09: 1ffffffff22f530f
[ 97.261105][ T5326] R10: dffffc0000000000 R11: fffffbfff22f5310 R12: dffffc0000000000
[ 97.264085][ T5326] R13: 1ffff110028f76ca R14: ffff8880147bb608 R15: ffff8880147bb6d8
[ 97.267531][ T5326] FS: 00007f8ce262a6c0(0000) GS:ffff88808b0b4000(0000) knlGS:0000000000000000
[ 97.271371][ T5326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 97.274440][ T5326] CR2: 0000200000001000 CR3: 000000001e465000 CR4: 0000000000352ef0
[ 97.277565][ T5326] Call Trace:
[ 97.280447][ T5326]
[ 97.281676][ T5326] minix_mkdir+0x3e/0x120
[ 97.283592][ T5326] vfs_mkdir+0x40c/0x620
[ 97.285581][ T5326] ovl_workdir_create+0x4b8/0x970
[ 97.287624][ T5326] ? __pfx_ovl_workdir_create+0x10/0x10
[ 97.289962][ T5326] ? mnt_get_write_access+0x216/0x280
[ 97.292134][ T5326] ovl_get_workdir+0x339/0x1980
[ 97.294184][ T5326] ? __pfx_ovl_get_workdir+0x10/0x10
[ 97.296642][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 97.298972][ T5326] ? do_raw_spin_unlock+0x4d/0x200
[ 97.301342][ T5326] ? _raw_spin_unlock+0x28/0x50
[ 97.306499][ T5326] ? ovl_inuse_trylock+0x177/0x230
[ 97.308712][ T5326] ovl_fill_super+0x1702/0x4360
[ 97.310880][ T5326] ? __mutex_unlock_slowpath+0x731/0x900
[ 97.313065][ T5326] ? super_dev_insert+0x2a/0xe10
[ 97.315382][ T5326] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 97.317907][ T5326] ? __raw_spin_lock_init+0x45/0x100
[ 97.320110][ T5326] ? __pfx_ovl_fill_super+0x10/0x10
[ 97.322373][ T5326] ? shrinker_register+0x158/0x210
[ 97.324753][ T5326] ? sget_fc+0x1961/0x1a60
[ 97.326782][ T5326] ? __pfx_ovl_next_opt+0x10/0x10
[ 97.329004][ T5326] ? __pfx_ovl_fill_super+0x10/0x10
[ 97.331349][ T5326] get_tree_nodev+0xbb/0x150
[ 97.333385][ T5326] vfs_get_tree+0x92/0x2a0
[ 97.335400][ T5326] do_new_mount+0x325/0xb00
[ 97.337377][ T5326] ? __pfx_do_new_mount+0x10/0x10
[ 97.339481][ T5326] ? ns_capable+0x89/0xe0
[ 97.341272][ T5326] ? path_mount+0x647/0x1050
[ 97.343760][ T5326] ? user_path_at+0xd4/0x160
[ 97.346641][ T5326] __se_sys_mount+0x31d/0x420
[ 97.348849][ T5326] ? __pfx___se_sys_mount+0x10/0x10
[ 97.351270][ T5326] ? __x64_sys_mount+0x20/0xc0
[ 97.353328][ T5326] do_syscall_64+0x166/0x520
[ 97.355411][ T5326] ? trace_irq_disable+0x3b/0x140
[ 97.357636][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.360378][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 97.362455][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.365254][ T5326] RIP: 0033:0x7f8ce179e559
[ 97.367201][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.375493][ T5326] RSP: 002b:00007f8ce2629fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 97.379303][ T5326] RAX: ffffffffffffffda RBX: 00007f8ce1a26090 RCX: 00007f8ce179e559
[ 97.382821][ T5326] RDX: 0000200000000f80 RSI: 0000200000000f40 RDI: 0000000000000000
[ 97.386428][ T5326] RBP: 00007f8ce1835ab8 R08: 0000200000000fc0 R09: 0000000000000000
[ 97.389908][ T5326] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 97.393469][ T5326] R13: 00007f8ce1a26128 R14: 00007f8ce1a26090 R15: 00007ffcb4cc58c8
[ 97.397048][ T5326]
[ 97.398500][ T5326] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 97.401497][ T5326] CPU: 0 UID: 0 PID: 5326 Comm: syz.0.0 Not tainted syzkaller #0 PREEMPT(full)
[ 97.404990][ T5326] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 97.409169][ T5326] Call Trace:
[ 97.410631][ T5326]
[ 97.411971][ T5326] vpanic+0x56d/0xa60
[ 97.413783][ T5326] ? __pfx__printk+0x10/0x10
[ 97.415863][ T5326] ? __pfx_vpanic+0x10/0x10
[ 97.417609][ T5326] ? is_bpf_text_address+0x292/0x2b0
[ 97.419732][ T5326] ? is_bpf_text_address+0x26/0x2b0
[ 97.422077][ T5326] panic+0xc5/0xd0
[ 97.423702][ T5326] ? __pfx_panic+0x10/0x10
[ 97.425672][ T5326] __warn+0x315/0x4c0
[ 97.427511][ T5326] ? inc_nlink+0x122/0x150
[ 97.429396][ T5326] ? inc_nlink+0x122/0x150
[ 97.431414][ T5326] __report_bug+0x276/0x570
[ 97.433427][ T5326] ? inc_nlink+0x122/0x150
[ 97.435367][ T5326] ? __pfx___report_bug+0x10/0x10
[ 97.437601][ T5326] ? reacquire_held_locks+0x117/0x1a0
[ 97.440049][ T5326] ? __mark_inode_dirty+0x705/0x13b0
[ 97.442354][ T5326] ? inc_nlink+0x122/0x150
[ 97.444354][ T5326] report_bug+0x16b/0x220
[ 97.446282][ T5326] ? inc_nlink+0x122/0x150
[ 97.448202][ T5326] ? inc_nlink+0x124/0x150
[ 97.450202][ T5326] handle_bug+0x9c/0x200
[ 97.452034][ T5326] exc_invalid_op+0x1a/0x50
[ 97.454062][ T5326] asm_exc_invalid_op+0x1a/0x20
[ 97.456085][ T5326] RIP: 0010:inc_nlink+0x122/0x150
[ 97.458249][ T5326] Code: e4 ff e9 3a ff ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 4c ff ff ff 48 89 df e8 39 61 e4 ff e9 3f ff ff ff e8 2f e5 71 ff 90 <0f> 0b 90 eb 80 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 50 ff ff ff
[ 97.466426][ T5326] RSP: 0018:ffffc9000f897418 EFLAGS: 00010287
[ 97.469060][ T5326] RAX: ffffffff82563d01 RBX: ffff8880147bb650 RCX: 0000000000100000
[ 97.472439][ T5326] RDX: ffffc90020001000 RSI: 0000000000001770 RDI: 0000000000001771
[ 97.475766][ T5326] RBP: 0000000000000000 R08: ffffffff917a987f R09: 1ffffffff22f530f
[ 97.479088][ T5326] R10: dffffc0000000000 R11: fffffbfff22f5310 R12: dffffc0000000000
[ 97.482407][ T5326] R13: 1ffff110028f76ca R14: ffff8880147bb608 R15: ffff8880147bb6d8
[ 97.485871][ T5326] ? inc_nlink+0x121/0x150
[ 97.487874][ T5326] ? inc_nlink+0x121/0x150
[ 97.489806][ T5326] minix_mkdir+0x3e/0x120
[ 97.491726][ T5326] vfs_mkdir+0x40c/0x620
[ 97.493584][ T5326] ovl_workdir_create+0x4b8/0x970
[ 97.495736][ T5326] ? __pfx_ovl_workdir_create+0x10/0x10
[ 97.498085][ T5326] ? mnt_get_write_access+0x216/0x280
[ 97.500551][ T5326] ovl_get_workdir+0x339/0x1980
[ 97.502814][ T5326] ? __pfx_ovl_get_workdir+0x10/0x10
[ 97.505221][ T5326] ? do_raw_spin_lock+0x12b/0x2f0
[ 97.507489][ T5326] ? do_raw_spin_unlock+0x4d/0x200
[ 97.509785][ T5326] ? _raw_spin_unlock+0x28/0x50
[ 97.512007][ T5326] ? ovl_inuse_trylock+0x177/0x230
[ 97.514272][ T5326] ovl_fill_super+0x1702/0x4360
[ 97.516266][ T5326] ? __mutex_unlock_slowpath+0x731/0x900
[ 97.518648][ T5326] ? super_dev_insert+0x2a/0xe10
[ 97.520828][ T5326] ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 97.523492][ T5326] ? __raw_spin_lock_init+0x45/0x100
[ 97.525874][ T5326] ? __pfx_ovl_fill_super+0x10/0x10
[ 97.528239][ T5326] ? shrinker_register+0x158/0x210
[ 97.530667][ T5326] ? sget_fc+0x1961/0x1a60
[ 97.532869][ T5326] ? __pfx_ovl_next_opt+0x10/0x10
[ 97.535050][ T5326] ? __pfx_ovl_fill_super+0x10/0x10
[ 97.537236][ T5326] get_tree_nodev+0xbb/0x150
[ 97.539247][ T5326] vfs_get_tree+0x92/0x2a0
[ 97.541276][ T5326] do_new_mount+0x325/0xb00
[ 97.543362][ T5326] ? __pfx_do_new_mount+0x10/0x10
[ 97.545555][ T5326] ? ns_capable+0x89/0xe0
[ 97.547520][ T5326] ? path_mount+0x647/0x1050
[ 97.549494][ T5326] ? user_path_at+0xd4/0x160
[ 97.551541][ T5326] __se_sys_mount+0x31d/0x420
[ 97.553615][ T5326] ? __pfx___se_sys_mount+0x10/0x10
[ 97.555823][ T5326] ? __x64_sys_mount+0x20/0xc0
[ 97.557809][ T5326] do_syscall_64+0x166/0x520
[ 97.559855][ T5326] ? trace_irq_disable+0x3b/0x140
[ 97.562092][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.564802][ T5326] ? clear_bhb_loop+0x70/0xc0
[ 97.566922][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 97.569538][ T5326] RIP: 0033:0x7f8ce179e559
[ 97.571524][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 97.579753][ T5326] RSP: 002b:00007f8ce2629fe8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 97.583454][ T5326] RAX: ffffffffffffffda RBX: 00007f8ce1a26090 RCX: 00007f8ce179e559
[ 97.587853][ T5326] RDX: 0000200000000f80 RSI: 0000200000000f40 RDI: 0000000000000000
[ 97.592003][ T5326] RBP: 00007f8ce1835ab8 R08: 0000200000000fc0 R09: 0000000000000000
[ 97.595398][ T5326] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000
[ 97.598782][ T5326] R13: 00007f8ce1a26128 R14: 00007f8ce1a26090 R15: 00007ffcb4cc58c8
[ 97.602181][ T5326]
[ 97.603896][ T5326] Kernel Offset: disabled
[ 97.605674][ T5326] Rebooting in 86400 seconds..