program: r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0xc2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x9, 0x0, 0xfffffff9, 0x9}, {0x7fff, 0x7, 0x3, 0xd06a}}}, 0x0, 0x600) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000005840)={0x8000, 0x4, 0x3, 0x1, 0x2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@dev, 0x0, 0x3c}, 0x0, @in=@private}]}]}, 0xfc}}, 0x0) socket$inet6(0xa, 0x80003, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000001300)={@local, @random="0074d47f4800", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) [ 80.006454][ T4536] Bluetooth: hci0: command tx timeout [ 81.252111][ T5116] loop0: detected capacity change from 0 to 1024 [ 81.321145][ T5116] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.495821][ T79] ------------[ cut here ]------------ [ 81.498393][ T79] WARNING: CPU: 0 PID: 79 at fs/ext4/inode.c:5195 ext4_write_inode+0x627/0x6f0 [ 81.502150][ T79] Modules linked in: [ 81.503472][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd0 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 81.506922][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.510442][ T79] RIP: 0010:ext4_write_inode+0x627/0x6f0 [ 81.512139][ T79] Code: ff ff ff 4d 85 ff 74 12 e8 46 35 34 ff 4c 89 ff e8 9e 7e c2 ff e9 cf fd ff ff e8 34 35 34 ff e9 c5 fd ff ff e8 2a 35 34 ff 90 <0f> 0b 90 e9 b7 fd ff ff e8 1c 35 34 ff e9 76 fd ff ff 44 89 f1 80 [ 81.520700][ T79] RSP: 0018:ffffc90000e46c20 EFLAGS: 00010293 [ 81.523432][ T79] RAX: ffffffff8260b146 RBX: 0000000000000800 RCX: ffff88801f040000 [ 81.526455][ T79] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 81.529247][ T79] RBP: ffffc90000e46d20 R08: ffffffff8260abe2 R09: 1ffffffff2039da5 [ 81.532108][ T79] R10: dffffc0000000000 R11: ffffffff8260ab20 R12: 0000000000220840 [ 81.535164][ T79] R13: 1ffff920001c8d88 R14: 0000000000000000 R15: ffff88801f040000 [ 81.538700][ T79] FS: 0000000000000000(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 81.542593][ T79] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 81.545036][ T79] CR2: 00007f2938208440 CR3: 000000003da20000 CR4: 0000000000352ef0 [ 81.548316][ T79] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 81.551441][ T79] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 81.554647][ T79] Call Trace: [ 81.555950][ T79] [ 81.557122][ T79] ? __warn+0x168/0x4e0 [ 81.558883][ T79] ? ext4_write_inode+0x627/0x6f0 [ 81.560734][ T79] ? report_bug+0x2b3/0x500 [ 81.562636][ T79] ? ext4_write_inode+0x627/0x6f0 [ 81.564617][ T79] ? handle_bug+0x60/0x90 [ 81.566192][ T79] ? exc_invalid_op+0x1a/0x50 [ 81.567875][ T79] ? asm_exc_invalid_op+0x1a/0x20 [ 81.569820][ T79] ? __pfx_ext4_write_inode+0x10/0x10 [ 81.572025][ T79] ? ext4_write_inode+0xc2/0x6f0 [ 81.574405][ T79] ? ext4_write_inode+0x626/0x6f0 [ 81.576445][ T79] ? ext4_write_inode+0x627/0x6f0 [ 81.578368][ T79] ? __pfx_ext4_write_inode+0x10/0x10 [ 81.580315][ T79] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.582205][ T79] __writeback_single_inode+0x711/0x10d0 [ 81.584408][ T79] writeback_single_inode+0x1f3/0x660 [ 81.587351][ T79] write_inode_now+0x1dd/0x260 [ 81.589742][ T79] ? __pfx_write_inode_now+0x10/0x10 [ 81.592014][ T79] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.594544][ T79] iput+0x60d/0xa50 [ 81.595778][ T79] __dentry_kill+0x20d/0x630 [ 81.597244][ T79] ? dput+0x37/0x2b0 [ 81.598547][ T79] dput+0x19f/0x2b0 [ 81.599789][ T79] ovl_destroy_inode+0x44/0x160 [ 81.601389][ T79] evict+0x7b5/0x9b0 [ 81.602677][ T79] ? __pfx_evict+0x10/0x10 [ 81.604229][ T79] ? _raw_spin_unlock+0x28/0x50 [ 81.605830][ T79] ? iput+0x713/0xa50 [ 81.607262][ T79] __dentry_kill+0x20d/0x630 [ 81.609016][ T79] ? shrink_kill+0x8d/0x2c0 [ 81.610890][ T79] shrink_kill+0xa9/0x2c0 [ 81.612800][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 81.615160][ T79] prune_dcache_sb+0x10f/0x180 [ 81.616946][ T79] ? __pfx_prune_dcache_sb+0x10/0x10 [ 81.618780][ T79] ? list_lru_count_one+0x29/0x2e0 [ 81.620569][ T79] ? list_lru_count_one+0x283/0x2e0 [ 81.622483][ T79] ? list_lru_count_one+0x29/0x2e0 [ 81.624344][ T79] super_cache_scan+0x34f/0x4b0 [ 81.625987][ T79] do_shrink_slab+0x701/0x1160 [ 81.627540][ T79] ? shrink_slab+0x12b/0x14d0 [ 81.629084][ T79] shrink_slab+0x1093/0x14d0 [ 81.631017][ T79] ? shrink_slab+0x12b/0x14d0 [ 81.633083][ T79] ? __pfx_shrink_slab+0x10/0x10 [ 81.635679][ T79] ? shrink_node+0x3547/0x3de0 [ 81.637619][ T79] ? __pfx_lock_release+0x10/0x10 [ 81.639654][ T79] shrink_one+0x43b/0x850 [ 81.641393][ T79] ? shrink_node+0x3547/0x3de0 [ 81.643355][ T79] shrink_node+0x3799/0x3de0 [ 81.645422][ T79] ? shrink_node+0x3547/0x3de0 [ 81.647953][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 81.650614][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 81.652870][ T79] ? __pfx_lock_release+0x10/0x10 [ 81.654702][ T79] ? __pfx_shrink_node+0x10/0x10 [ 81.656233][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 81.657681][ T79] kswapd+0x1ca3/0x3700 [ 81.659027][ T79] ? kswapd+0xbf1/0x3700 [ 81.660378][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.661840][ T79] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.663785][ T79] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.666214][ T79] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.668697][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.671418][ T79] ? __kthread_parkme+0x169/0x1d0 [ 81.673373][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.675235][ T79] kthread+0x2f0/0x390 [ 81.676551][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.677936][ T79] ? __pfx_kthread+0x10/0x10 [ 81.679415][ T79] ret_from_fork+0x4b/0x80 [ 81.680838][ T79] ? __pfx_kthread+0x10/0x10 [ 81.682354][ T79] ret_from_fork_asm+0x1a/0x30 [ 81.684093][ T79] [ 81.685444][ T79] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 81.688662][ T79] CPU: 0 UID: 0 PID: 79 Comm: kswapd0 Not tainted 6.12.0-rc1-syzkaller-00381-g2a130b7e1fcd #0 [ 81.693060][ T79] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.696797][ T79] Call Trace: [ 81.697876][ T79] [ 81.698958][ T79] dump_stack_lvl+0x241/0x360 [ 81.700571][ T79] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.702552][ T79] ? __pfx__printk+0x10/0x10 [ 81.704414][ T79] ? vscnprintf+0x5d/0x90 [ 81.706262][ T79] panic+0x349/0x880 [ 81.708026][ T79] ? __warn+0x177/0x4e0 [ 81.709667][ T79] ? __pfx_panic+0x10/0x10 [ 81.711355][ T79] ? ret_from_fork_asm+0x1a/0x30 [ 81.713255][ T79] __warn+0x34b/0x4e0 [ 81.714863][ T79] ? ext4_write_inode+0x627/0x6f0 [ 81.716788][ T79] report_bug+0x2b3/0x500 [ 81.718421][ T79] ? ext4_write_inode+0x627/0x6f0 [ 81.720246][ T79] handle_bug+0x60/0x90 [ 81.721797][ T79] exc_invalid_op+0x1a/0x50 [ 81.723494][ T79] asm_exc_invalid_op+0x1a/0x20 [ 81.725324][ T79] RIP: 0010:ext4_write_inode+0x627/0x6f0 [ 81.727601][ T79] Code: ff ff ff 4d 85 ff 74 12 e8 46 35 34 ff 4c 89 ff e8 9e 7e c2 ff e9 cf fd ff ff e8 34 35 34 ff e9 c5 fd ff ff e8 2a 35 34 ff 90 <0f> 0b 90 e9 b7 fd ff ff e8 1c 35 34 ff e9 76 fd ff ff 44 89 f1 80 [ 81.735049][ T79] RSP: 0018:ffffc90000e46c20 EFLAGS: 00010293 [ 81.737844][ T79] RAX: ffffffff8260b146 RBX: 0000000000000800 RCX: ffff88801f040000 [ 81.741616][ T79] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000000 [ 81.744700][ T79] RBP: ffffc90000e46d20 R08: ffffffff8260abe2 R09: 1ffffffff2039da5 [ 81.747780][ T79] R10: dffffc0000000000 R11: ffffffff8260ab20 R12: 0000000000220840 [ 81.750898][ T79] R13: 1ffff920001c8d88 R14: 0000000000000000 R15: ffff88801f040000 [ 81.754511][ T79] ? __pfx_ext4_write_inode+0x10/0x10 [ 81.756977][ T79] ? ext4_write_inode+0xc2/0x6f0 [ 81.758909][ T79] ? ext4_write_inode+0x626/0x6f0 [ 81.760531][ T79] ? __pfx_ext4_write_inode+0x10/0x10 [ 81.762468][ T79] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.764370][ T79] __writeback_single_inode+0x711/0x10d0 [ 81.766452][ T79] writeback_single_inode+0x1f3/0x660 [ 81.768477][ T79] write_inode_now+0x1dd/0x260 [ 81.770503][ T79] ? __pfx_write_inode_now+0x10/0x10 [ 81.772890][ T79] ? do_raw_spin_unlock+0x58/0x8b0 [ 81.775198][ T79] iput+0x60d/0xa50 [ 81.776960][ T79] __dentry_kill+0x20d/0x630 [ 81.778934][ T79] ? dput+0x37/0x2b0 [ 81.780449][ T79] dput+0x19f/0x2b0 [ 81.781949][ T79] ovl_destroy_inode+0x44/0x160 [ 81.783854][ T79] evict+0x7b5/0x9b0 [ 81.785436][ T79] ? __pfx_evict+0x10/0x10 [ 81.787213][ T79] ? _raw_spin_unlock+0x28/0x50 [ 81.789109][ T79] ? iput+0x713/0xa50 [ 81.790549][ T79] __dentry_kill+0x20d/0x630 [ 81.792578][ T79] ? shrink_kill+0x8d/0x2c0 [ 81.794798][ T79] shrink_kill+0xa9/0x2c0 [ 81.796899][ T79] shrink_dentry_list+0x2c0/0x5b0 [ 81.798907][ T79] prune_dcache_sb+0x10f/0x180 [ 81.800685][ T79] ? __pfx_prune_dcache_sb+0x10/0x10 [ 81.802738][ T79] ? list_lru_count_one+0x29/0x2e0 [ 81.804733][ T79] ? list_lru_count_one+0x283/0x2e0 [ 81.806870][ T79] ? list_lru_count_one+0x29/0x2e0 [ 81.809090][ T79] super_cache_scan+0x34f/0x4b0 [ 81.811304][ T79] do_shrink_slab+0x701/0x1160 [ 81.813302][ T79] ? shrink_slab+0x12b/0x14d0 [ 81.815230][ T79] shrink_slab+0x1093/0x14d0 [ 81.817127][ T79] ? shrink_slab+0x12b/0x14d0 [ 81.819223][ T79] ? __pfx_shrink_slab+0x10/0x10 [ 81.821351][ T79] ? shrink_node+0x3547/0x3de0 [ 81.823600][ T79] ? __pfx_lock_release+0x10/0x10 [ 81.825867][ T79] shrink_one+0x43b/0x850 [ 81.827766][ T79] ? shrink_node+0x3547/0x3de0 [ 81.829580][ T79] shrink_node+0x3799/0x3de0 [ 81.831277][ T79] ? shrink_node+0x3547/0x3de0 [ 81.832859][ T79] ? __pfx_lock_acquire+0x10/0x10 [ 81.834726][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 81.836745][ T79] ? __pfx_lock_release+0x10/0x10 [ 81.839258][ T79] ? __pfx_shrink_node+0x10/0x10 [ 81.841874][ T79] ? mem_cgroup_iter+0x3d/0x420 [ 81.844714][ T79] kswapd+0x1ca3/0x3700 [ 81.846641][ T79] ? kswapd+0xbf1/0x3700 [ 81.848582][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.850476][ T79] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.852760][ T79] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.855306][ T79] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 81.857912][ T79] ? __pfx_autoremove_wake_function+0x10/0x10 [ 81.860453][ T79] ? __kthread_parkme+0x169/0x1d0 [ 81.862682][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.864764][ T79] kthread+0x2f0/0x390 [ 81.866645][ T79] ? __pfx_kswapd+0x10/0x10 [ 81.868618][ T79] ? __pfx_kthread+0x10/0x10 [ 81.870491][ T79] ret_from_fork+0x4b/0x80 [ 81.872291][ T79] ? __pfx_kthread+0x10/0x10 [ 81.874019][ T79] ret_from_fork_asm+0x1a/0x30 [ 81.875896][ T79] [ 81.877772][ T79] Kernel Offset: disabled [ 81.880676][ T79] Rebooting in 86400 seconds..