rom 0 to 65 [ 719.382066][T19150] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 719.482545][T19153] loop3: detected capacity change from 0 to 1024 20:34:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:51 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000015) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1, @ANYBLOB="1ea7a96cda999f568baebfb8e53f510597f18dde769c4b3f14a9b6ded054146aa113ea485e007cda67499c2aa77a11bec8eb44bd62a0fdbe394ed65e53c4066c02e77c26ce79d0b538785683da26d31a17b983b92ce15db726fb", @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r2]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async) sendfile(r2, r2, 0x0, 0x108000015) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1, @ANYBLOB="1ea7a96cda999f568baebfb8e53f510597f18dde769c4b3f14a9b6ded054146aa113ea485e007cda67499c2aa77a11bec8eb44bd62a0fdbe394ed65e53c4066c02e77c26ce79d0b538785683da26d31a17b983b92ce15db726fb", @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r2]) (async) [ 719.674227][T19153] hfsplus: unable to load nls mapping "m" [ 719.696286][T19153] hfsplus: unable to parse mount options [ 719.703016][T19159] loop1: detected capacity change from 0 to 65 [ 719.736956][T19159] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:51 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc19, 0x5) 20:34:51 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)={[], [{@flag='sync'}], 0x5c}) 20:34:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d6d0f0024b36f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303333312c00"], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) 20:34:51 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc48, 0x5) 20:34:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 720.030633][T19174] loop1: detected capacity change from 0 to 65 [ 720.033046][T19168] loop3: detected capacity change from 0 to 1024 [ 720.059614][T19174] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 720.163746][T19168] hfsplus: unable to load nls mapping "m" [ 720.174106][T19166] overlay: filesystem on ./bus not supported as upperdir [ 720.199646][T19168] hfsplus: unable to parse mount options 20:34:51 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)={[], [{@flag='sync'}], 0x5c}) 20:34:51 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c637265617459e7e83dbd3c66f52c6e6c733d6d616363726f617469616e2c7530303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303333312c00"/110], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256={0x1, 0xa}, 0x0, '\x00', @b}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file2\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) linkat(r2, &(0x7f0000000840)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) pivot_root(&(0x7f0000000940)='./file1\x00', &(0x7f0000000b80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') unlink(&(0x7f0000000340)='./file2\x00') getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 720.284226][T19183] loop1: detected capacity change from 0 to 65 [ 720.299913][T19183] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:51 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) sendfile(r2, r2, 0x0, 0x108000015) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1, @ANYBLOB="1ea7a96cda999f568baebfb8e53f510597f18dde769c4b3f14a9b6ded054146aa113ea485e007cda67499c2aa77a11bec8eb44bd62a0fdbe394ed65e53c4066c02e77c26ce79d0b538785683da26d31a17b983b92ce15db726fb", @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r2]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) (async) sendfile(r2, r2, 0x0, 0x108000015) (async) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r3, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRESHEX=r1, @ANYBLOB="1ea7a96cda999f568baebfb8e53f510597f18dde769c4b3f14a9b6ded054146aa113ea485e007cda67499c2aa77a11bec8eb44bd62a0fdbe394ed65e53c4066c02e77c26ce79d0b538785683da26d31a17b983b92ce15db726fb", @ANYRESOCT=r2, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYRES8=0x0, @ANYRES32=r2]) (async) 20:34:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 720.490588][T19185] loop3: detected capacity change from 0 to 1024 [ 720.507890][T19185] hfsplus: unable to parse mount options [ 720.569576][T19192] loop1: detected capacity change from 0 to 65 [ 720.598080][T19192] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c637265617459e7e83dbd3c66f52c6e6c733d6d616363726f617469616e2c7530303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303333312c00"/110], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256={0x1, 0xa}, 0x0, '\x00', @b}) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) (async, rerun: 32) chdir(&(0x7f00000003c0)='./bus\x00') (rerun: 32) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file2\x00') (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) (rerun: 64) linkat(r2, &(0x7f0000000840)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000940)='./file1\x00', &(0x7f0000000b80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') unlink(&(0x7f0000000340)='./file2\x00') getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 720.878375][T19197] loop1: detected capacity change from 0 to 65 20:34:52 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc33, 0x5) 20:34:52 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)={[], [{@flag='sync'}], 0x5c}) 20:34:52 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc49, 0x5) 20:34:52 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowefile0,upperdir=./file1,\x00\x00\x00\x00\x00\x00\x00\x00']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 720.958344][T19197] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 721.084453][T19209] loop3: detected capacity change from 0 to 1024 [ 721.111350][T19211] overlayfs: failed to resolve './file1': -2 20:34:52 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c637265617459e7e83dbd3c66f52c6e6c733d6d616363726f617469616e2c7530303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303333312c00"/110], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256={0x1, 0xa}, 0x0, '\x00', @b}) (async) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) creat(&(0x7f0000000100)='./file1/file0\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') (async) link(&(0x7f0000000180)='./file0\x00', &(0x7f0000000400)='./file2\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r0}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) linkat(r2, &(0x7f0000000840)='./file3\x00', 0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x0) (async) pivot_root(&(0x7f0000000940)='./file1\x00', &(0x7f0000000b80)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async, rerun: 64) unlink(&(0x7f0000000340)='./file2\x00') (async, rerun: 64) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 721.232978][T19218] overlay: Unknown parameter 'lowefile0' 20:34:52 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowefile0,upperdir=./file1,\x00\x00\x00\x00\x00\x00\x00\x00']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:52 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, 0x0) [ 721.313591][T19220] loop1: detected capacity change from 0 to 65 [ 721.328596][T19220] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 721.338809][T17924] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:34:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 721.454945][T19225] overlay: Unknown parameter 'lowefile0' 20:34:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowefile0,upperdir=./file1,\x00\x00\x00\x00\x00\x00\x00\x00']) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 721.577419][T19227] overlayfs: failed to resolve './file1': -2 20:34:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 721.626320][T19234] loop1: detected capacity change from 0 to 65 [ 721.660697][T19234] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:53 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, 0x0) 20:34:53 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc3b, 0x5) 20:34:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1040022, &(0x7f00000007c0)={[{@uid}, {@part={'part', 0x3d, 0x1}}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x100000001}}, {@nls={'nls', 0x3d, 'cp850'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '['}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) 20:34:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:53 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc76, 0x5) 20:34:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:34:53 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, 0x0) [ 722.001906][T19247] loop3: detected capacity change from 0 to 1024 [ 722.035835][T19250] loop1: detected capacity change from 0 to 65 20:34:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1040022, &(0x7f00000007c0)={[{@uid}, {@part={'part', 0x3d, 0x1}}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x100000001}}, {@nls={'nls', 0x3d, 'cp850'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '['}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 722.075671][T19250] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 722.253552][T19257] overlay: filesystem on ./bus not supported as upperdir [ 722.288656][T19260] loop3: detected capacity change from 0 to 1024 20:34:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:53 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:34:53 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1040022, &(0x7f00000007c0)={[{@uid}, {@part={'part', 0x3d, 0x1}}, {@nls={'nls', 0x3d, 'koi8-u'}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@part={'part', 0x3d, 0x100000001}}, {@nls={'nls', 0x3d, 'cp850'}}], [{@smackfsfloor={'smackfsfloor', 0x3d, '['}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 722.348782][T19268] loop1: detected capacity change from 0 to 65 [ 722.377269][T19268] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 722.622728][T19279] loop1: detected capacity change from 0 to 65 [ 722.649674][T19272] loop3: detected capacity change from 0 to 1024 [ 722.697049][T19279] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:54 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc43, 0x5) 20:34:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000040)) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000002240), 0x84089, &(0x7f0000002380)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@stats}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_eq={'uid', 0x3d, r2}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:54 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, 0x0) 20:34:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x3, 0x6a4, &(0x7f0000000100)="$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") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) 20:34:54 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:54 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc8b, 0x5) [ 723.012402][T19285] loop1: detected capacity change from 0 to 65 20:34:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000040)) (async) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000002240), 0x84089, &(0x7f0000002380)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@stats}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_eq={'uid', 0x3d, r2}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 723.066523][T19285] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 723.103543][T19290] loop3: detected capacity change from 0 to 1024 20:34:54 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc76, 0x5) 20:34:54 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 723.148349][T19290] hfsplus: unable to parse mount options 20:34:54 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x3, 0x6a4, &(0x7f0000000100)="$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") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 723.298296][T19297] loop1: detected capacity change from 0 to 65 20:34:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r2, &(0x7f0000000040)) (async) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$binder(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000002240), 0x84089, &(0x7f0000002380)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@stats}, {@stats}, {@stats}], [{@permit_directio}, {@fowner_eq={'fowner', 0x3d, r0}}, {@euid_eq={'euid', 0x3d, r3}}, {@uid_eq={'uid', 0x3d, r2}}, {@context={'context', 0x3d, 'sysadm_u'}}]}) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0x100) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 723.351052][T19297] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:54 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 723.508440][T19306] loop3: detected capacity change from 0 to 1024 [ 723.542820][T19306] hfsplus: unable to parse mount options [ 723.642548][T19314] loop1: detected capacity change from 0 to 65 [ 723.685793][T19314] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x3, 0x6a4, &(0x7f0000000100)="$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") openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x40480, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) 20:34:55 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000001c0)={[{@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@pcr={'pcr', 0x3d, 0x3}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:55 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:55 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc93, 0x5) 20:34:55 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc48, 0x5) [ 724.015719][T19318] loop3: detected capacity change from 0 to 1024 [ 724.025732][T19319] overlay: filesystem on ./bus not supported as upperdir 20:34:55 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000001c0)={[{@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@pcr={'pcr', 0x3d, 0x3}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 724.070495][T19324] loop1: detected capacity change from 0 to 65 [ 724.084563][T19318] hfsplus: unable to parse mount options [ 724.086737][T19324] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:55 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 724.257718][T19330] overlayfs: failed to resolve './file0': -2 [ 724.292916][T19330] overlayfs: failed to resolve './file0': -2 20:34:55 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f0000000440)={[], [{@flag='sync'}], 0x5c}) 20:34:55 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 724.316688][T19328] overlay: Unknown parameter 'pcr' [ 724.370765][T19333] loop3: detected capacity change from 0 to 1024 [ 724.389968][T19334] loop1: detected capacity change from 0 to 65 [ 724.408315][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.417506][T19333] hfsplus: unable to parse mount options [ 724.423858][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.434564][T19334] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 724.456727][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.475213][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.490977][T19330] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18) (async) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) (async) [ 724.541102][T19330] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 724.609708][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.627778][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.649285][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.722826][T19340] loop1: detected capacity change from 0 to 65 [ 724.737006][T19340] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 724.749205][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.772751][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.774811][T19341] loop3: detected capacity change from 0 to 1024 [ 724.787378][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.812459][T19330] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 4: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:56 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc9b, 0x5) [ 724.851646][T19341] hfsplus: unable to parse mount options [ 724.891018][T19330] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc49, 0x5) [ 724.939820][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.977776][T19349] loop1: detected capacity change from 0 to 65 20:34:56 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000b00)=ANY=[@ANYRESDEC], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000080)={0x18, 0x1, 0x0, {0x5}}, 0x18) (async) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) read$FUSE(r0, &(0x7f0000000b40)={0x2020}, 0x2020) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) [ 724.989042][T19330] overlay: filesystem on ./bus not supported as upperdir [ 724.998531][T19349] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 725.008504][T19330] overlay: filesystem on ./bus not supported as upperdir [ 725.034712][T19330] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:56 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000001c0)={[{@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@pcr={'pcr', 0x3d, 0x3}}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x200000, &(0x7f00000001c0)={[{@xino_on}, {@workdir={'workdir', 0x3d, './bus'}}], [{@pcr={'pcr', 0x3d, 0x3}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:34:56 executing program 4: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726965722c63726561746f723dbd3c66f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d30303030303030303030303030303030303030303333312c0042a024f27e337589103b3d2bb4b4f106cfbf3cd433de0f68ec9288de7f94dad03d20b36da55d55bb2ea68fcd502ada8440b0bd33c499c0c45994daa924bd1010f335d5db2f45eb5cff624976d495abbfd8be1800e8e9a411ca163469d3b3b1115b741a16ea5ae6d6d97532f904e5e02462e129557d2172269b0d29cc23d50de0147da54f3a7f07"], 0x3, 0x6a4, &(0x7f0000000100)="$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") ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) [ 725.160547][T19352] loop3: detected capacity change from 0 to 1024 [ 725.200398][T19352] hfsplus: unable to parse mount options 20:34:56 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726165722c63726561746f7204000000f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d080000003333312c00"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) linkat(r2, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) [ 725.277388][T19362] loop1: detected capacity change from 0 to 65 20:34:56 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xbe1, 0x5) [ 725.354580][T19362] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 725.425806][T19365] overlay: filesystem on ./bus not supported as upperdir 20:34:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:57 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10010, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file3'}}, {@nfs_export_off}, {@xino_auto}, {@index_on}, {@workdir={'workdir', 0x3d, './file3'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) [ 725.491638][T19367] loop3: detected capacity change from 0 to 1024 [ 725.519364][T19367] hfsplus: unable to parse mount options [ 725.594239][T17902] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:34:57 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726165722c63726561746f7204000000f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d080000003333312c00"], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) linkat(r2, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) [ 725.664919][T19376] loop1: detected capacity change from 0 to 65 [ 725.713001][T19376] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 725.775176][T19378] loop3: detected capacity change from 0 to 1024 [ 725.792923][T19378] hfsplus: unable to parse mount options 20:34:57 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca0, 0x5) 20:34:57 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f626172726165722c63726561746f7204000000f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d080000003333312c00"], 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) linkat(r2, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000840)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x400) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) [ 725.854062][T19381] overlayfs: failed to resolve './file2': -2 20:34:57 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc76, 0x5) 20:34:57 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:34:57 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10010, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file3'}}, {@nfs_export_off}, {@xino_auto}, {@index_on}, {@workdir={'workdir', 0x3d, './file3'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10010, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file3'}}, {@nfs_export_off}, {@xino_auto}, {@index_on}, {@workdir={'workdir', 0x3d, './file3'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) (async) [ 726.037821][T19387] loop3: detected capacity change from 0 to 1024 [ 726.064987][T19388] loop1: detected capacity change from 0 to 65 [ 726.072030][T19387] hfsplus: unable to parse mount options [ 726.131895][T19391] overlayfs: failed to resolve './file2': -2 [ 726.132639][T19388] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:57 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4001, &(0x7f0000003280)={[{@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000003400)={{0x1, 0x1, 0x18, r2, {0x80000000}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) linkat(r2, &(0x7f0000003380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000003480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000003300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000007c0), 0x210000, &(0x7f0000003580)=ANY=[@ANYBLOB="72656469726563745f6469723d131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6d6561737572652c657569643d", @ANYRESDEC=r4, @ANYBLOB="a6435ee0c1ecd994fa552c2c61707072616973655f747970653d696d617369672c66736d616769633d307830302c736d61636b66737572616e736d7574653d63726561746f722c00"/86]) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000003500)={0x1, 0x3, 0x1000, 0x37, &(0x7f0000002240)="c12ab1cd5ea47b57cb550df20256c11511ff250968ca6bb1954a494b0ac3406222dc1751d418586b792c8b4f80c5a672392b91e4ad7e91", 0x1000, 0x0, &(0x7f0000002280)="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"}) 20:34:57 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10010, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file3'}}, {@nfs_export_off}, {@xino_auto}, {@index_on}, {@workdir={'workdir', 0x3d, './file3'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x10010, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file2'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file3'}}, {@nfs_export_off}, {@xino_auto}, {@index_on}, {@workdir={'workdir', 0x3d, './file3'}}], [{@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}]}) (async) [ 726.229318][T19391] overlayfs: failed to resolve './file2': -2 20:34:57 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 726.385283][T19399] loop3: detected capacity change from 0 to 1024 20:34:57 executing program 4: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs9'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 726.477187][T19399] hfsplus: bad catalog entry type [ 726.489624][T19402] loop1: detected capacity change from 0 to 65 [ 726.505109][T19402] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x104000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 726.530253][T19403] overlayfs: failed to resolve './file2': -2 20:34:58 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4001, &(0x7f0000003280)={[{@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 64) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000003400)={{0x1, 0x1, 0x18, r2, {0x80000000}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) linkat(r2, &(0x7f0000003380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000003480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000003300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000007c0), 0x210000, &(0x7f0000003580)=ANY=[@ANYBLOB="72656469726563745f6469723d131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6d6561737572652c657569643d", @ANYRESDEC=r4, @ANYBLOB="a6435ee0c1ecd994fa552c2c61707072616973655f747970653d696d617369672c66736d616769633d307830302c736d61636b66737572616e736d7574653d63726561746f722c00"/86]) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000003500)={0x1, 0x3, 0x1000, 0x37, &(0x7f0000002240)="c12ab1cd5ea47b57cb550df20256c11511ff250968ca6bb1954a494b0ac3406222dc1751d418586b792c8b4f80c5a672392b91e4ad7e91", 0x1000, 0x0, &(0x7f0000002280)="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"}) 20:34:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x104000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 726.802193][T19413] loop3: detected capacity change from 0 to 1024 20:34:58 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca5, 0x5) 20:34:58 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 726.896850][T19413] hfsplus: bad catalog entry type [ 726.949664][T19418] loop1: detected capacity change from 0 to 65 [ 726.975304][T19418] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:58 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc8b, 0x5) 20:34:58 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) open(&(0x7f0000000040)='./file1\x00', 0x4480, 0x10) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2c0b2, &(0x7f0000000140)=ANY=[@ANYBLOB='sync,smackfsfloor=cd*o-,fsname=lowerd)r,obj_user=uppe@\x00ir,\x00', @ANYRES32=r0]) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/module/nf_conntrack_ftp', 0x20882, 0x0) mknodat$loop(r1, &(0x7f0000000200)='./file0/file0\x00', 0x2000, 0x0) 20:34:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x104000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:58 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4001, &(0x7f0000003280)={[{@nobarrier}, {@nodecompose}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000003400)={{0x1, 0x1, 0x18, r2, {0x80000000}}, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00'}) linkat(r2, &(0x7f0000003380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000003480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) linkat(r2, &(0x7f0000003380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000003480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdirat(r0, &(0x7f0000003300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r4, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000007c0), 0x210000, &(0x7f0000003580)=ANY=[@ANYBLOB="72656469726563745f6469723d131377c5fc35d41454d5d41d29ad1a6029598146e6be166e41ad0dbd4054033c9f33bbda8224a2f3d772e7636e48b33cbf708372e8f1b9933ec5127743be2206209ef02df9cbf2f6e880d3382f2c6d6561737572652c657569643d", @ANYRESDEC=r4, @ANYBLOB="a6435ee0c1ecd994fa552c2c61707072616973655f747970653d696d617369672c66736d616769633d307830302c736d61636b66737572616e736d7574653d63726561746f722c00"/86]) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) (async) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000003500)={0x1, 0x3, 0x1000, 0x37, &(0x7f0000002240)="c12ab1cd5ea47b57cb550df20256c11511ff250968ca6bb1954a494b0ac3406222dc1751d418586b792c8b4f80c5a672392b91e4ad7e91", 0x1000, 0x0, &(0x7f0000002280)="d57f6cc32af56e32dcdbec9d972621a57945f4167090cb4218195984d098a434d78e17afdb25a129d4ef60c4cdeabb4792e40b6fd82c24ff550b5d5e9c32e520acd07d057f5bb3eb0e13d8c6406c3e485e76051a14854321c0377036bfb68fdfc8403803f5acc19859200f977074e996c1c1947615f97730c1ecca998994d6d74a550173fc205d63dae488484a6d93517cb82b6917f59b1c90b05f659143a6f8bec7421ab48fb03a851f8cdc3007f2811f20bddd058b1013a94d5c8291812bfe731a718e4954b171dfa26cb485bf63fb7005784dfe599449bb32bb0d3419360fd51262a2a9d59bd679626445b9fd3e09b34c2ec9c8d572cd02bedcffae7bdb7ac75a50bb3e546cb16fdb4f5d5aecbe5d45d809eb4bf030f70c60bd28cafd16cc2e34fb22dc16a75b4e128891b4e1bb755b69b45f257275f26d5637032ad0efd32e5665956310366c8db214b86e37faf5ef0887ec4027915a5d3dd7b07959cebd2f4450badf8bba3625bbea78ff87ecc240a971e28edd8beb5ca8e4608e35f3ce5a2cfb16ad8e1340143c4f3eee3bf3e21d7a5b9600d7b1825fa0536788621be35f259accce8997d0f4da512c2c76e93afe9cadeafd4f34fef6c019e543fde6ea5afeeac4d4c3a057c8a1c869e906a10f1a5b2ed2553a804ad58f07031422b29924dc3f6906f687dc23224eec3694cc5fb35fda00d2d7d566618fdd24b84af42a44e6d557970debe4f7547e00bdccec9887aaeee9f625b870c9cc3f3d92619fcf1e0542c6220c1ae1c46a05397f955224be318abd38ed16cc64b6dcf3424a2b05c1652df5c1484e8c43426f906ea4fd7a23ae1b0b079c3cc8503a31a54f397ed0745bcbb2e1ae596e3649db6fd79bfe4702245ac14aaaced2507e3fba10a3bbc45158584c08300760dabc6db24a4a7c85b3669bd443d18d694c719beb70d45c9fb39a80daf1b4c3bf95376794d3c6ab7a5a6440ae5212aa5807651110e3bc56b17b36a0a397bee88e1e065789592d93a7acee7500be4bf46244933a52fdbfdeeb651bce2af2b29d5a2e5dd85271a8732f515045565ea112188d8288e02fdd8c8a27f67a8f8f83125a86ed6c0d2baacc134a01c3dbe3a721953154d61081e9ca5fb2f939373da89797123580c4fcf65d10d49753411fb756d6147f773a52b6a4273621d43492d3c48f2ec9fc96f08153df52f02ff5ca3416514b1f411d0b4a1ec4d5736a5a60734eaca3a0978b920d96c3a87d4716a212a566cef372a56cee682d7cfe4737d7f2061ce5d80ff39bcc19172e05b87ebf7e2275b611bf97833a1eaadb18fbffe57a3d1a1b602a0a226bc94ba73b87c002830f20fc6de8e0eda284dabeaa1f1f3a0c48cf13f1dd1097d07e965bec192f8123a944370366e6be4cfbeed3a805228ed28c089e93d1298df0a1fb66c0b1cf02a335fdfb82c461b58c8cd254ec1c14e0f67207f2deaeb45718188b27d4e077dfc481091b9fd2af0a1195261235c6979e83ffe936f9bdbf1622f9e5bbe1cb8e71bdf26c271a3995e6af9081ec14005937a79379f8636caece1e1658871121a60b683a251f0ceeb4e0e4ab97c52748c603b6180ea5ca1fffe9f8e2a66fc45c607f19e41879e2dd2aed32ddb5c9eb436a23bdf36ad0d42cf23abe12265e07bc7f25edbe6ad3c2cb523dc7d2da7d5bfa7ac70d0a66b725a22e3c80b54159f724039c22428d554d067943a03b3da673ee686f5cf1456ad7dcc07cecea86fe196b6aca08df994e52acedb45394cfefb439225f88838400a4b6b1313bd2ae546f7c49f31c3bd87a3a7e41fde9905596e69ba384c662cb34621798286006e637949b6f268b4e796c03ee9270adca93c2c7787836c753a00f73292cdc9eb94215873585e393e6447c714cbb7ff40e5e00890bbe410f1821ca006caa3d5adee1d2316b5ffb4abf21fb80439c8b5ba93d4e01a0b1291ec2c1138b191a5facf8f59988022b6e244c4a627cdaa0e9b458949fa8fb9a0817b0f74efaa7da214a42b24c1d2c6321799307ea480e7fa8dfe64948323b4e53e97ded34cf58bcd391a624cbac51c5aede5f5685f943ae785a458bb4c4528477ebcee52eedd99987da64e4bbee8a917b14c2c038dc7d49aee41966854550435cd024c5725e4647bacd6bc3d5a832f8a082fe3a96c03c3aeb4fe6adc6506e62c331375739a544a0adc63437901ea69e2693e65f381d43053aac3ac59156b4d57c6f5a616a49148662ef43257fdbf7f99cdf0b8aa47659e878d78d8cea1ba9c4576f9c84d74d9ad9ac20f0751fb2590e61770c14a48e612237c92d33ceee464b556d51b2ffaa359ab5a3e6d1122f787f75ab27de61e53b242cf4d30a2a6020a1af6d0d8243203cf1c3e29913756b376d58fb83d811888f8e89b1cc2ec64d77640ab5f38c6b56f7dc9ebf376d5b69d947b68e0f9cf9228339a17e296b4c1373547cc7ec0520a5f92ca65a01b44f1124d29d5b0347c80b18c6cb648f2ecfff58ad4e6e7f939465ceb708c10a786d41c575311a3af7873eb0840e8ca8e91ecf22fa06abe8b56038ee79baa1903fa5eb530b8405bf8ca4401e8841e804dbab7f8615fa18d8503715ddbff1243339defcc07edd5b09a9b41737c8daf7bf33d9b8fe568120630c2f5b278b234b86e2fb67649de0924816bf568f98c33c76875bba56ddd4c4424076bb2789823eaf64c7695e6dd6a3e7bdb5ee3ca6477f37a8988aa7af46c84c36518b1217c3e537e99260e5033595b18af48fdcbbe6d2419a9d8129797c711d4dd97e32cce968939e6031ac73aec9d6ef0caef2823747fc866ffb1a026579502228133ce2e69a74c3f44f3fe178c8114f81fa46e2e0ffefa15d4bac2de94e52524170e639110e16dc4bfc627927e27669dca2e47797ee0a53aba990195fae086ec7e0fb8315b4b173967095d1d865016eafa3e666d4002c4503f76fcbf652ebed7a7dd9a662a5ccc0ca3510012abdd8102db45e8ba30b8bb87f2f401c4e02207b07fa5ef19546ba94dc0cb09ed9805af9cc6c9513da0af84d326ac928ce18ea81bb04f73c5ff77407a502587c70bb247b5eb9c06135bd0340bb7c3fdadc31055207ca749f958ba5b6849084448e5253f0adab738bef517221043b243c73d11a89d88e6988dcd647604df6908bf08985c1dc3aa06a96169b618da77c02e0ff7bd6994249a7261d180fb5e87b90ae8c58b108633868d7b9a59f2314f0ee4f864b5470beeb09c57a12650c95b904296c2764dad1ff70eadd3cdd2ac3606c2f1b6ee1bfd37f8336cf5c65bc84f047a76e4b01914a199c013f20fd8709c41198c56a2113a8d08dc1d5b57c5728c90d26fa9ab4f89244a50bf2d49cbf22e35f70aa506c76fb6c674dae83f8fa44a5713789faa8b9b77e6d7e3e2fd964ff07b649c235bb32bbe550b56b499d3886754d2e8da48fc1da8c382563d31f862c185395480b5b903b79b18669f6e23d7bfa1c35e6dab9693e924e9655bf7f6f82e60664f25f824bd43697d675336e8969d905cfbbe8d9df67262cc5525ea31aa3d3654f33c9fb7c03c423a8457b63caeb1453a6c7bc31c4d6e890275ec6b1995d97c258fac3a93c1a7bfc4e0ea337ff0818258301103fe44c79d1db0614b0e6360e367646ba00e20c9ee8d87d7c9d0ed7360e36050a7b8fb255b6cb3355cc61d78755c1f7917415cd2cff377602144cc6eb3dd9a914ec1c598bb08cb07612c80456b25c794cdc25dfcb55b322cf1f98219c0b41e6132c0f5b73035657012ea28b5d04203ff8c188b43a942130b2c649fad0e01b4b30e55e1922b950e1b14d94a8526ca0197a1f0c9b81efdef2249d55962e43106d59380fefc71cbd112176127d98491f5661e2b4c730289550ea9b8b2020c086bfec2befe1e811a1cfc266d85391a71db93da4ddd6a48524395904a57320432073ae28b53c65fae0ac8636df09c5f184ac1ac3fb38757e1ccc144a411da12514abeb7055b0a66a4dc030a77224458cf79e8ae8cd4ed555a8226662a677c1ffbffb07963b837734ff74de09448bd9170eb1dba4bdd9597cd4e4420bb4dc6735e219a99ad74d3604b9dc1526293db53ac324fe84aa0863502b9f1583a881087f1e83dd26ad244fb533f0fffae3f88ecb26b0c8d3ff8fdea9d3b2bdbeb392d305736c41890ca2513cd3422d39d00d0b69a5866c448d2ea6e38f055e08765db578663ace73b151408ce1b28fe3c039f69fed61dacf347c5614ca410a1cbab7efd0d31aff1b993334af67c42a4f9a92d66a82bb7a1ee7d4319d7ceb6dfbed4ea1bf35c248ff7f690fcae9f859e031bdc7b58b2ccf3e632eeeeb63d78ec4b2da26fbd75f6583028e870cd3dc4b84cd28230618742e37458c477ce0812eb9114b291448df776a50f47b9aa807c5810579dc113388f7839affa71f797ad7a9f558df80dfcae39f7ba56a80da9b96db684b9fc030a5c3e6b5524984125c13152e4263393bd463e3d123da3f57404ffcb9b6b77fc5d984c0334b0d2833af8d0ed11907c4d1312b58855545a9dc287f1f963ae794fd04e0565739a188b2d6577a00bb4be513ba72899e18df33930518260ccd1012f1b217f4537ca6f3aeb1d227045c443785008eea2aa77fac6ccc70aca818bb1010cbdc87d0d4c756df198b73496b72f2b5b3a0d937098e827f2d3902a33fba41d9afe1559a0058edbd0d95af765f01d823e565df2e2a4babfd854da0414a24465239411a4a32b71c5cbd77d6a4eee9a9c5049f1d182d9de94ba3e8070ca2f347ce86835541f57a9fd3020c6bf526bdfd85e1b0adc0fffa87cb00b0b6b3bb49632cf98edfd8f123864cefe6d8f90971b46c1b1618965bbd97444204863973cf5bd7c6bd3132a6798362bea2f5737bb6767acc6fbf43aa800c9c12b9d199ab301576acd5e931dfd21a8d1e3333fcfe70c9aea69eb7a48d3d5b65c8fc81b8b5f60e09113e1c9202690ad2a889c0a8154c2e95ced9c418a232dae3aeabb52093286be84ed48e790951525f298a233e7b1e2e7c5155e82921119b990c535b8155d4187822f82e07deec1d88dd36af6058b8207ca72392a6db8d3aa04cf056e86cffee39fdb4995b843e16ed07a20858311bf7605154db4d7fe21ee1870c12697b586b65402287f249ca1ad4b89ed655ae622809178502bf50c063972de23d29bcdb4929542014dbaeeb5d5f5ac46291d9b721c3927c916e60fdf7629874b3001d108a289a535ba4ded79e1973fc15d26388173a4e300d25ad40218a283fa86f508de9ff72500abeeacafa8673bbaf2a782b0fe0594c518e9b5facb523fa9c7f9bbea16f718d530aee1150b778dd2bc31cee32e26df50f3f6c41c04b22a54377609511081a8f0c1025cb658a71bc7cce2757f99c13a659e3bfb32d7bde49205e26101b335da8ac21cbaac471f0875416cc3ae7d2ebac9647e7118023a004437c706aa9d3939b760f4dcf3ceb7274f5b32da485efc7e7df41da30aae25db44a2013412bc33cd924af14d6c1376cfa557ddc6e0d1e06195a9080cb4a480dba421510ef3bd8eb6d2003183e7e712ddc599d2a94fe2e8e344e3e275ae9e3adfb06adb620095a04acc7c4257d59b4da6f18a1e9c7d58ec8b76b8942c72342017a09b8c5ab569dbea47203a04c1423969335ce2c4d12cbb01f100ab97295fa372a6e6a74dc58086f392442b221ac9c9cfbf4a6f14f2abd858923afc8855693bcff179f9377c6f8a09f27b5b9efa37eed1818be2ed70fde77d9d2b79032677844435628ff3ccda672fcd738b6d9404caf11451ecef0bec2d1154c3a5f260f8c6e7140"}) 20:34:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x20) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x40) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./bus\x00') 20:34:58 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 727.230884][T19433] loop1: detected capacity change from 0 to 65 [ 727.275780][T19433] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 727.288076][T19434] loop3: detected capacity change from 0 to 1024 20:34:58 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}], 0x2c}) [ 727.339300][T19436] overlayfs: conflicting lowerdir path [ 727.341276][T19438] hfsplus: bad catalog entry type 20:34:58 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 727.386717][T19434] hfsplus: bad catalog entry type 20:34:58 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x12c) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) 20:34:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x20) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x40) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./bus\x00') [ 727.524265][T19444] loop1: detected capacity change from 0 to 65 [ 727.545037][T19444] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 727.644226][T19448] loop3: detected capacity change from 0 to 1024 [ 727.714639][T19448] hfsplus: bad catalog entry type [ 727.790966][ T9602] hfsplus: b-tree write err: -5, ino 4 20:34:59 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca6, 0x5) 20:34:59 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 727.969100][T19454] loop1: detected capacity change from 0 to 65 [ 728.004181][T19454] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:59 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './bus\x00'}) mkdirat(r0, &(0x7f0000000100)='./file1\x00', 0x20) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x40) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}]}) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) rename(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./bus\x00') 20:34:59 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) openat(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x12c) (async) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) 20:34:59 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x5c00000000000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:34:59 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc93, 0x5) 20:34:59 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 728.195598][T19461] loop3: detected capacity change from 0 to 1024 [ 728.250652][T19469] loop1: detected capacity change from 0 to 65 [ 728.264304][T19467] overlayfs: conflicting lowerdir path [ 728.285860][T19469] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:34:59 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 1) [ 728.336683][T19472] hfsplus: bad catalog entry type [ 728.360526][T19467] overlayfs: conflicting lowerdir path 20:34:59 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async, rerun: 64) openat(r0, &(0x7f0000000080)='./file0\x00', 0x6000, 0x12c) (async, rerun: 64) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) 20:34:59 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 728.419756][T19467] overlayfs: conflicting lowerdir path [ 728.441313][ T2912] hfsplus: b-tree write err: -5, ino 4 [ 728.471968][T19467] overlayfs: conflicting lowerdir path [ 728.508992][T19467] overlayfs: conflicting lowerdir path [ 728.535026][T19467] overlayfs: conflicting lowerdir path [ 728.560841][T19475] loop1: detected capacity change from 0 to 65 [ 728.598264][T19475] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 728.634781][T19467] overlayfs: conflicting lowerdir path [ 728.643021][T19477] FAULT_INJECTION: forcing a failure. [ 728.643021][T19477] name failslab, interval 1, probability 0, space 0, times 0 [ 728.666678][T19477] CPU: 0 PID: 19477 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 728.677250][T19477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 728.687342][T19477] Call Trace: [ 728.690647][T19477] [ 728.693606][T19477] dump_stack_lvl+0x1e7/0x2d0 [ 728.698326][T19477] ? nf_tcp_handle_invalid+0x650/0x650 [ 728.703821][T19477] ? panic+0x850/0x850 [ 728.707929][T19477] ? __might_sleep+0xe0/0xe0 [ 728.712595][T19477] ? __mutex_unlock_slowpath+0x21c/0x750 [ 728.718270][T19477] should_fail_ex+0x3aa/0x4e0 [ 728.722965][T19477] ? __se_sys_mount+0x15a/0x3c0 [ 728.727832][T19477] should_failslab+0x9/0x20 [ 728.732427][T19477] __kmem_cache_alloc_node+0x6d/0x300 [ 728.737807][T19477] ? __se_sys_mount+0x15a/0x3c0 [ 728.742745][T19477] kmalloc_trace+0x2a/0x60 [ 728.747428][T19477] __se_sys_mount+0x15a/0x3c0 [ 728.752101][T19477] ? print_irqtrace_events+0x220/0x220 [ 728.757583][T19477] ? __x64_sys_mount+0xc0/0xc0 [ 728.762348][T19477] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 728.768336][T19477] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 728.774314][T19477] ? __x64_sys_mount+0x20/0xc0 [ 728.779178][T19477] do_syscall_64+0x45/0x110 [ 728.783770][T19477] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 728.789665][T19477] RIP: 0033:0x7fd14d47cce9 [ 728.794077][T19477] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 728.813710][T19477] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 728.822123][T19477] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 728.830104][T19477] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 728.838084][T19477] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 728.846516][T19477] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 728.854530][T19477] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 728.862508][T19477] 20:35:00 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) 20:35:00 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 2) 20:35:00 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcd3, 0x5) 20:35:00 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 728.989069][T19467] overlayfs: conflicting lowerdir path [ 729.040329][T19484] loop3: detected capacity change from 0 to 1024 20:35:00 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./bus\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:00 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc9b, 0x5) [ 729.111075][T19484] hfsplus: bad catalog entry type [ 729.150927][T19487] loop1: detected capacity change from 0 to 65 20:35:00 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) (async) [ 729.212200][T19487] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 729.228184][ T12] hfsplus: b-tree write err: -5, ino 4 20:35:00 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 729.366986][T19491] FAULT_INJECTION: forcing a failure. [ 729.366986][T19491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.399760][T19491] CPU: 1 PID: 19491 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 729.410231][T19491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 729.420587][T19491] Call Trace: [ 729.423894][T19491] [ 729.426850][T19491] dump_stack_lvl+0x1e7/0x2d0 [ 729.431575][T19491] ? nf_tcp_handle_invalid+0x650/0x650 [ 729.437074][T19491] ? panic+0x850/0x850 [ 729.441173][T19491] ? __lock_acquire+0x1fd0/0x1fd0 [ 729.446243][T19491] should_fail_ex+0x3aa/0x4e0 [ 729.450970][T19491] _copy_from_user+0x2f/0xe0 [ 729.455598][T19491] __se_sys_mount+0x17d/0x3c0 [ 729.460305][T19491] ? print_irqtrace_events+0x220/0x220 [ 729.465798][T19491] ? __x64_sys_mount+0xc0/0xc0 [ 729.470584][T19491] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 729.476600][T19491] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 729.482618][T19491] ? __x64_sys_mount+0x20/0xc0 [ 729.487414][T19491] do_syscall_64+0x45/0x110 [ 729.491961][T19491] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 729.497890][T19491] RIP: 0033:0x7fd14d47cce9 [ 729.502332][T19491] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 729.521962][T19491] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 729.530476][T19491] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 729.538540][T19491] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 729.546628][T19491] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 729.554659][T19491] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 20:35:01 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./bus\x00') (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 729.562644][T19491] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 729.571152][T19491] [ 729.603104][T19499] loop3: detected capacity change from 0 to 1024 20:35:01 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) (async) [ 729.655838][T19501] loop1: detected capacity change from 0 to 65 [ 729.669646][T19501] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 729.680501][T19499] hfsplus: bad catalog entry type 20:35:01 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 3) 20:35:01 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 729.751084][ T1081] hfsplus: b-tree write err: -5, ino 4 [ 729.781091][T19508] overlayfs: workdir and upperdir must be separate subtrees 20:35:01 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='./bus\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 729.929370][T19511] loop3: detected capacity change from 0 to 1024 [ 729.958853][T19515] loop1: detected capacity change from 0 to 65 20:35:01 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcef, 0x5) [ 729.983642][T19515] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 729.997713][T19516] FAULT_INJECTION: forcing a failure. [ 729.997713][T19516] name failslab, interval 1, probability 0, space 0, times 0 [ 730.016857][T19511] hfsplus: bad catalog entry type [ 730.030278][T19516] CPU: 0 PID: 19516 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 730.040767][T19516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 730.050854][T19516] Call Trace: [ 730.054162][T19516] [ 730.057118][T19516] dump_stack_lvl+0x1e7/0x2d0 [ 730.061835][T19516] ? nf_tcp_handle_invalid+0x650/0x650 [ 730.067327][T19516] ? panic+0x850/0x850 [ 730.071406][T19516] ? __might_sleep+0xe0/0xe0 [ 730.076019][T19516] should_fail_ex+0x3aa/0x4e0 [ 730.080705][T19516] ? getname_flags+0xbc/0x4f0 [ 730.085382][T19516] should_failslab+0x9/0x20 [ 730.089885][T19516] kmem_cache_alloc+0x6d/0x2b0 [ 730.094662][T19516] getname_flags+0xbc/0x4f0 [ 730.099173][T19516] user_path_at_empty+0x2c/0x60 [ 730.104110][T19516] __se_sys_mount+0x29a/0x3c0 [ 730.108800][T19516] ? __x64_sys_mount+0xc0/0xc0 [ 730.113563][T19516] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 730.119541][T19516] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 730.125515][T19516] ? __x64_sys_mount+0x20/0xc0 [ 730.130280][T19516] do_syscall_64+0x45/0x110 [ 730.134806][T19516] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 730.140702][T19516] RIP: 0033:0x7fd14d47cce9 [ 730.145113][T19516] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 730.164806][T19516] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 730.173308][T19516] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 730.181277][T19516] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 730.189250][T19516] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 730.197229][T19516] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 730.205196][T19516] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 730.213202][T19516] [ 730.246953][ T1081] hfsplus: b-tree write err: -5, ino 4 20:35:01 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x2010000, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:01 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:01 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDZrb5BSt03TgJBqNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXtoqRCZAMUrpxQDxyKUDj0hBBCKidEOSMhceGUeyQkDhxyAIxmdna9Xm8cO//WbT8faXbezJv33m9+mT+7s7E2wGfW2Teyv5siZ4+du14u37ndWb5zu3O1X04ylaSRNHuzFO2k+Dg5k96Uz5cr6+6K+43z2t2Piub7H3Z6S816qrZvbNdui7FbdpPpwcK+JLO94n923O2W/qqp6ufCRn8PqRjEXSbsaD9xMGnrW3Q3KhsPbL7z8xbYs2727ptbzCQH0ru7lu8DUl8dHnxlmLxtr03dpxcHAAAAPCljP8sPe+Ze7uV6Dj6dcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODToej9ZmBRT41+eTZF//f/W0O/qd+acLiP6L1L1ey7z0w6EAAAAAAAAAB4JC/dy71cz8H+8npRfef/crVwqHr9XN7JahazkuO5noWsZS0rmU8yM9RR6/rC2trK/NaWv0jZcn19/Wbd8uTYlic3x9UdDXTc/zTYshEAAAAAAAAAfGb9KGc3vv8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC9oEj29WbVdKhfnkmjmWQ6SauYHWzemmiwj8GfJh0AAAAAPHnten6w+N/wYg5Xn/un806uZS1LWctyFnOxehbQ+9Tf+Fu3s3zndudqOW3t+Bv/3FUcVY/pPXsYP/JctcULgxZn8+18L8cym/NZyVK+n4WsZTGz+VZVWkiRmfrpxcyd2+30Y90a75lNS+dHY3tpqFzGd6SKpJ1LWapiO54LrX7ojXq7I0Oj/aGVjIx4q8xO8Xpthzm6WM/LPfp5Pd8bZqo93z/ISLPOfZmNZ4fzvjX3uzxORkeaT2PwDOrQxijl4uhID5XzA/W8zPVPn2zOd/kobXMm/rWp7vD2OU++/Pc/n7/cuHbl8qXVY3vnMHpIo8dEJ43BefjijjKxXGai+wiZmH6U+B+fVp2N3lV0d1fLl6u2B7OU7+StXMxiTmUu8zmduXwtJ9PJyaG8vrB9XqtzrbG7c+3ol+pCeRP62fDN6GmZul9Fmddnh/K6cazNVfl+dtOajSw9t4MsFa2Mz9I/xobS/EJdKMf48dAdZ/JGMzE/lInnt8/Er/67nmR1+dqVlcsLb+9wvFfqeXnavrf52vzrx7JDu1fvbnm8PFf+Y6V32xg+Osq65/t1I/lq1d+4NOvONtW1Up3PvboHnallT4dvjeupV/fi2FE6Vd2RobpN73LyVpYH70IA2MMOvHqg1b7b/mv7g/ZP2pfb56a/OXV66out7P9L84/7ftv4TePrxav5ID/MwUlHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnwarN969srC8vLiyBwtpPOYOb42t6qeit6a1N/b9k1qY2u6I+l2SbZq3JhFzO8meSF2aT2GsqYyumV69cW6wpp00BvEkubJHfuAOeBJOrF19+8TqjXe/snR14c3FNxevnTx96vVTna/O3zxxaWl5ca73OukogSdh4x3CpCMBAAAAAAAAAAAAdupp/HnDmGGL7gT2FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPhkOvtG9ndTZH7u+Fy5fOd2Z7mc+uWNLZtJGkmKHyTFx8mZ9KbMDHVX3G+c1+5+9MtX3v+ws9FXs799Y6Td7/+9vr7LvejWU2aT7KvnDza1o/4uDPXX3U1U7X6hGOxhmbCj/cTBpP0/AAD//9zFBhg=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202040, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) r2 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x80800) open_tree(r2, &(0x7f00000007c0)='./file0\x00', 0x1100) 20:35:01 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca0, 0x5) 20:35:01 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:01 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 4) [ 730.542950][T19533] loop3: detected capacity change from 0 to 1024 [ 730.578636][T19535] loop1: detected capacity change from 0 to 65 [ 730.627520][T19535] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 730.669691][T19533] hfsplus: failed to load root directory 20:35:02 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x2010000, 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 730.720086][T19539] FAULT_INJECTION: forcing a failure. [ 730.720086][T19539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.735826][T19539] CPU: 1 PID: 19539 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 730.746306][T19539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 730.756398][T19539] Call Trace: [ 730.759689][T19539] [ 730.762629][T19539] dump_stack_lvl+0x1e7/0x2d0 [ 730.767343][T19539] ? nf_tcp_handle_invalid+0x650/0x650 [ 730.772845][T19539] ? panic+0x850/0x850 [ 730.777046][T19539] should_fail_ex+0x3aa/0x4e0 [ 730.781860][T19539] strncpy_from_user+0x36/0x2e0 [ 730.786755][T19539] getname_flags+0xf9/0x4f0 [ 730.791401][T19539] user_path_at_empty+0x2c/0x60 [ 730.796317][T19539] __se_sys_mount+0x29a/0x3c0 [ 730.801085][T19539] ? __x64_sys_mount+0xc0/0xc0 [ 730.805890][T19539] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 730.811934][T19539] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 730.817946][T19539] ? __x64_sys_mount+0x20/0xc0 [ 730.822759][T19539] do_syscall_64+0x45/0x110 [ 730.827317][T19539] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 730.833352][T19539] RIP: 0033:0x7fd14d47cce9 [ 730.837775][T19539] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 730.857394][T19539] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:35:02 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x3, 0x6a4, &(0x7f0000000100)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202040, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) (async) r2 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x80800) open_tree(r2, &(0x7f00000007c0)='./file0\x00', 0x1100) 20:35:02 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 730.865982][T19539] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 730.874048][T19539] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 730.882100][T19539] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 730.890070][T19539] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 730.898037][T19539] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 730.906111][T19539] 20:35:02 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 5) [ 730.971341][T19541] loop1: detected capacity change from 0 to 65 [ 730.987921][T19541] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:02 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x2010000, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 731.063763][T19548] loop3: detected capacity change from 0 to 1024 [ 731.101499][T19548] hfsplus: failed to load root directory 20:35:02 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcf7, 0x5) 20:35:02 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:02 executing program 3: r0 = syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='./file0\x00', 0x1000000, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202040, 0x0) mkdirat(r1, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) getdents64(r1, &(0x7f0000000a00)=""/254, 0xfe) (async) r2 = open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x80800) open_tree(r2, &(0x7f00000007c0)='./file0\x00', 0x1100) [ 731.227424][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.237009][T19556] loop1: detected capacity change from 0 to 65 [ 731.279164][T19556] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 731.296640][T19551] overlay: filesystem on ./bus not supported as upperdir 20:35:02 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca5, 0x5) [ 731.320094][T19557] FAULT_INJECTION: forcing a failure. [ 731.320094][T19557] name failslab, interval 1, probability 0, space 0, times 0 [ 731.334441][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.381110][T19557] CPU: 1 PID: 19557 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 731.391679][T19557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 731.401883][T19557] Call Trace: [ 731.405193][T19557] [ 731.408208][T19557] dump_stack_lvl+0x1e7/0x2d0 [ 731.413058][T19557] ? nf_tcp_handle_invalid+0x650/0x650 [ 731.418553][T19557] ? panic+0x850/0x850 [ 731.422659][T19557] ? __might_sleep+0xe0/0xe0 [ 731.427472][T19557] should_fail_ex+0x3aa/0x4e0 [ 731.432188][T19557] ? tomoyo_encode+0x26f/0x530 [ 731.436996][T19557] should_failslab+0x9/0x20 [ 731.441536][T19557] __kmem_cache_alloc_node+0x6d/0x300 [ 731.446952][T19557] ? arch_stack_walk+0x162/0x1a0 [ 731.451933][T19557] ? tomoyo_encode+0x26f/0x530 [ 731.456739][T19557] __kmalloc+0xa2/0x1a0 [ 731.460936][T19557] tomoyo_encode+0x26f/0x530 [ 731.465570][T19557] tomoyo_mount_permission+0x356/0xb80 [ 731.471069][T19557] ? __stack_depot_save+0x20/0x650 [ 731.476306][T19557] ? tomoyo_mount_permission+0x295/0xb80 [ 731.482076][T19557] ? tomoyo_get_name+0x510/0x510 [ 731.487281][T19557] ? hook_sb_mount+0x128/0x3c0 [ 731.492298][T19557] security_sb_mount+0x8c/0xc0 [ 731.497103][T19557] path_mount+0xb9/0xfa0 [ 731.501355][T19557] ? kmem_cache_free+0x299/0x470 [ 731.506319][T19557] __se_sys_mount+0x2d9/0x3c0 [ 731.511099][T19557] ? __x64_sys_mount+0xc0/0xc0 [ 731.515867][T19557] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 731.521869][T19557] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 731.527860][T19557] ? __x64_sys_mount+0x20/0xc0 [ 731.532644][T19557] do_syscall_64+0x45/0x110 [ 731.537231][T19557] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 731.543232][T19557] RIP: 0033:0x7fd14d47cce9 [ 731.547663][T19557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 731.567380][T19557] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 731.575932][T19557] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 731.583985][T19557] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 731.591950][T19557] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 731.599944][T19557] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 731.607921][T19557] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 731.615993][T19557] 20:35:03 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0xe0d98000) [ 731.654682][T19551] overlay: filesystem on ./bus not supported as upperdir 20:35:03 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 6) [ 731.695418][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.773870][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.790702][T19573] loop3: detected capacity change from 0 to 1024 [ 731.791646][T19571] loop1: detected capacity change from 0 to 65 [ 731.826368][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.835624][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.844256][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.866034][T19573] hfsplus: bad catalog entry type 20:35:03 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) (async) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0xe0d98000) [ 731.873399][T19573] hfsplus: catalog searching failed [ 731.891720][T19571] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 731.910065][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.917955][ T12] hfsplus: b-tree write err: -5, ino 4 [ 731.924231][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.934136][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.958415][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.969908][T19551] overlay: filesystem on ./bus not supported as upperdir [ 731.985055][T19551] overlay: filesystem on ./bus not supported as upperdir 20:35:03 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x9c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f662f221fff8a76e59b48408074f666a3696c65312c00"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="01c9f07997e9"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa4) 20:35:03 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:03 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcff, 0x5) [ 732.223608][T19578] loop3: detected capacity change from 0 to 1024 [ 732.246992][T19581] FAULT_INJECTION: forcing a failure. [ 732.246992][T19581] name failslab, interval 1, probability 0, space 0, times 0 [ 732.257119][T19582] loop1: detected capacity change from 0 to 65 [ 732.273999][T19581] CPU: 0 PID: 19581 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 732.280897][T19584] overlayfs: failed to resolve './f/"ÿŠvå›H@€töf£ile1': -2 [ 732.284447][T19581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 732.284466][T19581] Call Trace: [ 732.284474][T19581] [ 732.284484][T19581] dump_stack_lvl+0x1e7/0x2d0 [ 732.313115][T19581] ? nf_tcp_handle_invalid+0x650/0x650 [ 732.318615][T19581] ? panic+0x850/0x850 [ 732.322836][T19581] should_fail_ex+0x3aa/0x4e0 [ 732.327558][T19581] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 732.333313][T19581] should_failslab+0x9/0x20 [ 732.337843][T19581] __kmem_cache_alloc_node+0x6d/0x300 [ 732.343252][T19581] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 732.345003][T19582] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 732.348982][T19581] __kmalloc+0xa2/0x1a0 [ 732.349007][T19581] ? rcu_is_watching+0x15/0xb0 [ 732.349035][T19581] tomoyo_realpath_from_path+0xcf/0x5e0 [ 732.349067][T19581] tomoyo_mount_permission+0x3bc/0xb80 [ 732.349093][T19581] ? tomoyo_mount_permission+0x295/0xb80 [ 732.349115][T19581] ? tomoyo_get_name+0x510/0x510 [ 732.349172][T19581] ? hook_sb_mount+0x128/0x3c0 [ 732.392898][T19581] security_sb_mount+0x8c/0xc0 [ 732.397709][T19581] path_mount+0xb9/0xfa0 [ 732.401982][T19581] ? kmem_cache_free+0x299/0x470 [ 732.406968][T19581] __se_sys_mount+0x2d9/0x3c0 [ 732.411682][T19581] ? __x64_sys_mount+0xc0/0xc0 [ 732.416475][T19581] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 732.422630][T19581] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 732.428645][T19581] ? __x64_sys_mount+0x20/0xc0 [ 732.433450][T19581] do_syscall_64+0x45/0x110 [ 732.437991][T19581] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 732.443910][T19581] RIP: 0033:0x7fd14d47cce9 [ 732.448332][T19581] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 732.468143][T19581] RSP: 002b:00007fd14e1130c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 732.476592][T19581] RAX: ffffffffffffffda RBX: 00007fd14d59c050 RCX: 00007fd14d47cce9 [ 732.484669][T19581] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 732.492646][T19581] RBP: 00007fd14e113120 R08: 0000000020000440 R09: 0000000000000000 [ 732.500629][T19581] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 732.508628][T19581] R13: 000000000000006e R14: 00007fd14d59c050 R15: 00007fff7a4d5cc8 [ 732.516643][T19581] 20:35:04 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 7) 20:35:04 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xca6, 0x5) [ 732.525367][T19581] ERROR: Out of memory at tomoyo_realpath_from_path. 20:35:04 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x9c) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f662f221fff8a76e59b48408074f666a3696c65312c00"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="01c9f07997e9"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa4) 20:35:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) (async, rerun: 32) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) (rerun: 32) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x80010, r1, 0xe0d98000) 20:35:04 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:04 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x9c) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f662f221fff8a76e59b48408074f666a3696c65312c00"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="01c9f07997e9"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa4) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x9c) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f662f221fff8a76e59b48408074f666a3696c65312c00"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="01c9f07997e9"]) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xa4) (async) [ 732.736813][T19599] loop1: detected capacity change from 0 to 65 [ 732.803825][T19606] overlayfs: failed to resolve './f/"ÿŠvå›H@€töf£ile1': -2 [ 732.814607][T19602] loop3: detected capacity change from 0 to 1024 [ 732.837446][T19599] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 732.841502][T19606] overlayfs: failed to resolve './f/"ÿŠvå›H@€töf£ile1': -2 20:35:04 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f77656e690001000075707065726469583d2e2f66696c65312c00000000000000003710e7decb2d3fde37e4ef46e74d8014dfb34b3f57763fc473874c62c005967e7ce57e5b699df993a721b54a43837c60910874e51bb4aabbb9e79534376974113abc19d01fb8"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:04 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) r1 = openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0xe0000, 0x30) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') [ 732.942827][T19607] FAULT_INJECTION: forcing a failure. [ 732.942827][T19607] name failslab, interval 1, probability 0, space 0, times 0 [ 733.006609][T19607] CPU: 0 PID: 19607 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 733.017095][T19607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 733.023405][T19615] overlay: Unknown parameter 'loweni' [ 733.027598][T19607] Call Trace: [ 733.027615][T19607] [ 733.027623][T19607] dump_stack_lvl+0x1e7/0x2d0 [ 733.027658][T19607] ? nf_tcp_handle_invalid+0x650/0x650 [ 733.027682][T19607] ? panic+0x850/0x850 [ 733.027703][T19607] ? __might_sleep+0xe0/0xe0 [ 733.058263][T19607] ? prepend_path+0xa10/0xbe0 [ 733.063179][T19607] should_fail_ex+0x3aa/0x4e0 [ 733.067912][T19607] ? tomoyo_encode+0x26f/0x530 [ 733.072721][T19607] should_failslab+0x9/0x20 [ 733.077247][T19607] __kmem_cache_alloc_node+0x6d/0x300 [ 733.082734][T19607] ? d_absolute_path+0x1c6/0x300 [ 733.087698][T19607] ? tomoyo_encode+0x26f/0x530 [ 733.092481][T19607] __kmalloc+0xa2/0x1a0 [ 733.096666][T19607] tomoyo_encode+0x26f/0x530 [ 733.101281][T19607] tomoyo_realpath_from_path+0x598/0x5e0 [ 733.106932][T19607] tomoyo_mount_permission+0x3bc/0xb80 [ 733.112400][T19607] ? tomoyo_mount_permission+0x295/0xb80 [ 733.118034][T19607] ? tomoyo_get_name+0x510/0x510 [ 733.123005][T19607] ? hook_sb_mount+0x128/0x3c0 [ 733.127805][T19607] security_sb_mount+0x8c/0xc0 [ 733.132570][T19607] path_mount+0xb9/0xfa0 [ 733.136812][T19607] ? kmem_cache_free+0x299/0x470 [ 733.141771][T19607] __se_sys_mount+0x2d9/0x3c0 [ 733.146457][T19607] ? __x64_sys_mount+0xc0/0xc0 [ 733.151221][T19607] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 733.157203][T19607] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 733.163188][T19607] ? __x64_sys_mount+0x20/0xc0 [ 733.167983][T19607] do_syscall_64+0x45/0x110 [ 733.172514][T19607] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 733.178420][T19607] RIP: 0033:0x7fd14d47cce9 [ 733.182839][T19607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 733.202466][T19607] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 733.210910][T19607] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 733.218891][T19607] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 733.226863][T19607] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 733.234827][T19607] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 733.242796][T19607] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 733.250804][T19607] 20:35:04 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:04 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd04, 0x5) 20:35:04 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f77656e690001000075707065726469583d2e2f66696c65312c00000000000000003710e7decb2d3fde37e4ef46e74d8014dfb34b3f57763fc473874c62c005967e7ce57e5b699df993a721b54a43837c60910874e51bb4aabbb9e79534376974113abc19d01fb8"]) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (rerun: 32) [ 733.389440][T19607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 733.430380][T19619] loop1: detected capacity change from 0 to 65 [ 733.463731][T19619] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:05 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcd3, 0x5) [ 733.488497][T18304] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:35:05 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 8) [ 733.551158][T19622] loop3: detected capacity change from 0 to 1024 20:35:05 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 733.607976][T19626] overlay: Unknown parameter 'loweni' [ 733.620180][T19622] hfsplus: bad catalog entry type 20:35:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) r1 = openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0xe0000, 0x30) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) (async) openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0xe0000, 0x30) (async) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) [ 733.659022][T19626] overlay: Unknown parameter 'loweni' [ 733.706491][T19626] overlay: Unknown parameter 'loweni' [ 733.713498][ T12] hfsplus: b-tree write err: -5, ino 4 [ 733.756297][T19626] overlay: Unknown parameter 'loweni' [ 733.799503][T19626] overlay: Unknown parameter 'loweni' [ 733.818490][T19634] loop1: detected capacity change from 0 to 65 [ 733.832756][T19626] overlay: Unknown parameter 'loweni' [ 733.841505][T19634] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 733.854127][T19626] overlay: Unknown parameter 'loweni' [ 733.895029][T19633] FAULT_INJECTION: forcing a failure. [ 733.895029][T19633] name failslab, interval 1, probability 0, space 0, times 0 [ 733.910921][T19626] overlay: Unknown parameter 'loweni' [ 733.924753][T19638] loop3: detected capacity change from 0 to 1024 [ 733.935102][T19626] overlay: Unknown parameter 'loweni' [ 733.948370][T19633] CPU: 0 PID: 19633 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 733.959027][T19633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 733.969110][T19633] Call Trace: [ 733.972423][T19633] [ 733.975382][T19633] dump_stack_lvl+0x1e7/0x2d0 [ 733.980112][T19633] ? nf_tcp_handle_invalid+0x650/0x650 [ 733.985640][T19633] ? panic+0x850/0x850 [ 733.989762][T19633] ? __might_sleep+0xe0/0xe0 [ 733.994413][T19633] should_fail_ex+0x3aa/0x4e0 [ 733.999135][T19633] ? tomoyo_encode+0x26f/0x530 [ 734.003932][T19633] should_failslab+0x9/0x20 [ 734.008471][T19633] __kmem_cache_alloc_node+0x6d/0x300 [ 734.013896][T19633] ? __kmem_cache_free+0x263/0x3a0 [ 734.019058][T19633] ? tomoyo_encode+0x26f/0x530 [ 734.023858][T19633] __kmalloc+0xa2/0x1a0 [ 734.028056][T19633] ? tomoyo_realpath_from_path+0x5ad/0x5e0 [ 734.033920][T19633] tomoyo_encode+0x26f/0x530 [ 734.038604][T19633] tomoyo_mount_permission+0x53a/0xb80 [ 734.044290][T19633] ? tomoyo_mount_permission+0x295/0xb80 [ 734.050054][T19633] ? tomoyo_get_name+0x510/0x510 [ 734.055081][T19633] ? hook_sb_mount+0x128/0x3c0 [ 734.060159][T19633] security_sb_mount+0x8c/0xc0 [ 734.064967][T19633] path_mount+0xb9/0xfa0 [ 734.069336][T19633] ? kmem_cache_free+0x299/0x470 [ 734.074332][T19633] __se_sys_mount+0x2d9/0x3c0 [ 734.079067][T19633] ? __x64_sys_mount+0xc0/0xc0 [ 734.083881][T19633] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 734.089918][T19633] ? syscall_enter_from_user_mode+0xa4/0x2d0 20:35:05 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xf9'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 734.095947][T19633] ? __x64_sys_mount+0x20/0xc0 [ 734.100759][T19633] do_syscall_64+0x45/0x110 [ 734.105313][T19633] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 734.111262][T19633] RIP: 0033:0x7fd14d47cce9 [ 734.115715][T19633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 734.135352][T19633] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 734.143783][T19633] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 734.151791][T19633] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 734.159795][T19633] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 734.167804][T19633] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 734.175898][T19633] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 734.183961][T19633] [ 734.189823][T19626] overlay: Unknown parameter 'loweni' 20:35:05 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 9) [ 734.200616][T19626] overlay: Unknown parameter 'loweni' [ 734.217259][T19626] overlay: Unknown parameter 'loweni' [ 734.220417][T19638] hfsplus: bad catalog entry type [ 734.230756][T19626] overlay: Unknown parameter 'loweni' [ 734.237028][T19626] overlay: Unknown parameter 'loweni' [ 734.243091][T19626] overlay: Unknown parameter 'loweni' 20:35:05 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f0000000c80)={[{@nobarrier}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0xd9}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getdents64(r0, &(0x7f0000000a00)=""/254, 0xfe) openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0xe0000, 0x30) (async) r1 = openat$incfs(r0, &(0x7f00000007c0)='.log\x00', 0xe0000, 0x30) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') (async) symlinkat(&(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000800)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') [ 734.272743][T19626] overlay: Unknown parameter 'loweni' [ 734.289001][T19640] loop1: detected capacity change from 0 to 65 [ 734.299417][T19626] overlay: Unknown parameter 'loweni' 20:35:05 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd05, 0x5) [ 734.320220][T19640] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 734.329460][T19626] overlay: Unknown parameter 'loweni' [ 734.341178][T19626] overlay: Unknown parameter 'loweni' [ 734.366684][ T2912] hfsplus: b-tree write err: -5, ino 4 20:35:05 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f77656e690001000075707065726469583d2e2f66696c65312c00000000000000003710e7decb2d3fde37e4ef46e74d8014dfb34b3f57763fc473874c62c005967e7ce57e5b699df993a721b54a43837c60910874e51bb4aabbb9e79534376974113abc19d01fb8"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:05 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xff'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 734.464760][T19650] loop3: detected capacity change from 0 to 1024 [ 734.510924][T19650] hfsplus: bad catalog entry type 20:35:06 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcef, 0x5) 20:35:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c6ed6b62d3e1944d2f26f6203e4d292656377ea6172726965722c63726561746f723dbd3c66f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d303030303030303030300e30303030303002b7fb6bd18779d57cf0ebdd37bce816ff8390df49d8388df24a8ed9a207b6f95166f874557faa564ae262ce2c93516d942ff21702161cc207e274143293f32318667712a0dbcd6d9769e780045140415851e119057567e951da79380d3eca8a4784cf21485c2ffa550bd31a639db47e60c7d05d2f9f00c64ccef7"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) openat(r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000, 0x0) [ 734.542048][T19648] FAULT_INJECTION: forcing a failure. [ 734.542048][T19648] name failslab, interval 1, probability 0, space 0, times 0 [ 734.569914][ T1081] hfsplus: b-tree write err: -5, ino 4 [ 734.600744][T19657] overlay: Unknown parameter 'loweni' [ 734.607877][T19648] CPU: 1 PID: 19648 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 734.618359][T19648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 734.628462][T19648] Call Trace: [ 734.631776][T19648] [ 734.634741][T19648] dump_stack_lvl+0x1e7/0x2d0 [ 734.639462][T19648] ? nf_tcp_handle_invalid+0x650/0x650 [ 734.644968][T19648] ? panic+0x850/0x850 [ 734.649070][T19648] ? __might_sleep+0xe0/0xe0 [ 734.653726][T19648] should_fail_ex+0x3aa/0x4e0 [ 734.658450][T19648] ? alloc_fs_context+0x63/0x800 [ 734.663431][T19648] should_failslab+0x9/0x20 [ 734.667983][T19648] __kmem_cache_alloc_node+0x6d/0x300 [ 734.673408][T19648] ? alloc_fs_context+0x63/0x800 [ 734.678360][T19648] kmalloc_trace+0x2a/0x60 [ 734.682780][T19648] alloc_fs_context+0x63/0x800 [ 734.687549][T19648] ? security_capable+0x8a/0xb0 [ 734.692520][T19648] path_mount+0xb30/0xfa0 [ 734.696886][T19648] __se_sys_mount+0x2d9/0x3c0 [ 734.701571][T19648] ? __x64_sys_mount+0xc0/0xc0 [ 734.706338][T19648] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 734.712328][T19648] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 734.718310][T19648] ? __x64_sys_mount+0x20/0xc0 [ 734.723073][T19648] do_syscall_64+0x45/0x110 [ 734.727594][T19648] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 734.733494][T19648] RIP: 0033:0x7fd14d47cce9 [ 734.737909][T19648] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 734.757789][T19648] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 734.766209][T19648] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 734.774180][T19648] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 734.782251][T19648] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 734.790226][T19648] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000001 [ 734.798195][T19648] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 734.806187][T19648] 20:35:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:06 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 10) [ 734.863361][T19662] loop1: detected capacity change from 0 to 65 [ 734.914549][T19662] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 734.960196][T19664] loop3: detected capacity change from 0 to 1024 [ 734.971037][T19664] hfsplus: unable to parse mount options 20:35:06 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x8c'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 735.011412][T19666] syz-executor.5: attempt to access beyond end of device [ 735.011412][T19666] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 [ 735.028424][T19666] VFS: could not find a valid V7 on loop5. 20:35:06 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') (async) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:06 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c6ed6b62d3e1944d2f26f6203e4d292656377ea6172726965722c63726561746f723dbd3c66f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d303030303030303030300e30303030303002b7fb6bd18779d57cf0ebdd37bce816ff8390df49d8388df24a8ed9a207b6f95166f874557faa564ae262ce2c93516d942ff21702161cc207e274143293f32318667712a0dbcd6d9769e780045140415851e119057567e951da79380d3eca8a4784cf21485c2ffa550bd31a639db47e60c7d05d2f9f00c64ccef7"], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) openat(r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000, 0x0) [ 735.195435][T19669] FAULT_INJECTION: forcing a failure. [ 735.195435][T19669] name failslab, interval 1, probability 0, space 0, times 0 [ 735.272979][T19669] CPU: 1 PID: 19669 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 735.283483][T19669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 735.293543][T19669] Call Trace: [ 735.296913][T19669] [ 735.299838][T19669] dump_stack_lvl+0x1e7/0x2d0 [ 735.304524][T19669] ? nf_tcp_handle_invalid+0x650/0x650 [ 735.309992][T19669] ? panic+0x850/0x850 [ 735.314071][T19669] ? __might_sleep+0xe0/0xe0 [ 735.318675][T19669] should_fail_ex+0x3aa/0x4e0 [ 735.323358][T19669] ? ovl_init_fs_context+0x58/0x4f0 [ 735.328557][T19669] should_failslab+0x9/0x20 [ 735.333062][T19669] __kmem_cache_alloc_node+0x6d/0x300 [ 735.338563][T19669] ? ovl_init_fs_context+0x58/0x4f0 [ 735.343769][T19669] kmalloc_trace+0x2a/0x60 [ 735.348269][T19669] ovl_init_fs_context+0x58/0x4f0 [ 735.353731][T19669] alloc_fs_context+0x688/0x800 [ 735.358603][T19669] path_mount+0xb30/0xfa0 [ 735.363021][T19669] __se_sys_mount+0x2d9/0x3c0 [ 735.367784][T19669] ? __x64_sys_mount+0xc0/0xc0 [ 735.372543][T19669] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 735.378524][T19669] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 735.384675][T19669] ? __x64_sys_mount+0x20/0xc0 [ 735.389442][T19669] do_syscall_64+0x45/0x110 [ 735.393945][T19669] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 735.399845][T19669] RIP: 0033:0x7fd14d47cce9 [ 735.404349][T19669] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 735.423968][T19669] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 735.432574][T19669] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 735.440582][T19669] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 735.448561][T19669] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 735.456711][T19669] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000002 [ 735.466414][T19669] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 735.474486][T19669] 20:35:06 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 11) [ 735.523873][T19672] loop1: detected capacity change from 0 to 65 [ 735.575392][T19673] loop3: detected capacity change from 0 to 1024 [ 735.583398][T19672] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 735.617200][T19673] hfsplus: unable to parse mount options 20:35:07 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd32, 0x5) 20:35:07 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xeb'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 735.674986][T19683] FAULT_INJECTION: forcing a failure. [ 735.674986][T19683] name failslab, interval 1, probability 0, space 0, times 0 [ 735.711072][T19683] CPU: 1 PID: 19683 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 735.721563][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 735.731647][T19683] Call Trace: [ 735.734964][T19683] [ 735.737922][T19683] dump_stack_lvl+0x1e7/0x2d0 [ 735.742648][T19683] ? nf_tcp_handle_invalid+0x650/0x650 [ 735.748148][T19683] ? panic+0x850/0x850 [ 735.752254][T19683] ? __might_sleep+0xe0/0xe0 [ 735.756973][T19683] should_fail_ex+0x3aa/0x4e0 [ 735.761750][T19683] ? ovl_init_fs_context+0x98/0x4f0 [ 735.766975][T19683] should_failslab+0x9/0x20 [ 735.771473][T19683] __kmem_cache_alloc_node+0x6d/0x300 [ 735.777021][T19683] ? ovl_init_fs_context+0x98/0x4f0 [ 735.782214][T19683] kmalloc_trace+0x2a/0x60 [ 735.786627][T19683] ovl_init_fs_context+0x98/0x4f0 [ 735.791655][T19683] alloc_fs_context+0x688/0x800 [ 735.796600][T19683] path_mount+0xb30/0xfa0 [ 735.800933][T19683] __se_sys_mount+0x2d9/0x3c0 [ 735.805611][T19683] ? __x64_sys_mount+0xc0/0xc0 [ 735.810630][T19683] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 735.816739][T19683] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 735.822823][T19683] ? __x64_sys_mount+0x20/0xc0 [ 735.827594][T19683] do_syscall_64+0x45/0x110 [ 735.832099][T19683] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 735.837990][T19683] RIP: 0033:0x7fd14d47cce9 [ 735.842403][T19683] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 735.862006][T19683] RSP: 002b:00007fd14e1340c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:35:07 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcf7, 0x5) 20:35:07 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') (async) mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 735.870424][T19683] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47cce9 [ 735.878396][T19683] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 735.886371][T19683] RBP: 00007fd14e134120 R08: 0000000020000440 R09: 0000000000000000 [ 735.894339][T19683] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000002 [ 735.902303][T19683] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 735.910282][T19683] 20:35:07 executing program 3: syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f626172726965722c6ed6b62d3e1944d2f26f6203e4d292656377ea6172726965722c63726561746f723dbd3c66f52c6e6c733d6d616363726f617469616e2c756d61736b3d30303030303030303030303030303030303030303033372c756d61736b3d303030303030303030300e30303030303002b7fb6bd18779d57cf0ebdd37bce816ff8390df49d8388df24a8ed9a207b6f95166f874557faa564ae262ce2c93516d942ff21702161cc207e274143293f32318667712a0dbcd6d9769e780045140415851e119057567e951da79380d3eca8a4784cf21485c2ffa550bd31a639db47e60c7d05d2f9f00c64ccef7"], 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000008c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) openat(r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000, 0x0) (async) openat(r1, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30000, 0x0) [ 736.078837][T19689] syz-executor.5: attempt to access beyond end of device [ 736.078837][T19689] loop5: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:07 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 12) [ 736.137627][T19696] loop1: detected capacity change from 0 to 65 [ 736.160157][T19689] VFS: could not find a valid V7 on loop5. [ 736.163258][T19696] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 736.189540][T17924] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 20:35:07 executing program 5: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={'sync'}, 0x5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x3202801, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdiroff,nfs_export=on,\x00'/40]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:07 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\xf6'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 736.305779][T19698] loop3: detected capacity change from 0 to 1024 [ 736.340946][T19698] hfsplus: unable to parse mount options [ 736.429449][T19703] loop1: detected capacity change from 0 to 65 [ 736.442388][T19704] FAULT_INJECTION: forcing a failure. [ 736.442388][T19704] name failslab, interval 1, probability 0, space 0, times 0 20:35:07 executing program 5: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={'sync'}, 0x5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x3202801, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdiroff,nfs_export=on,\x00'/40]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 736.488983][T19704] CPU: 1 PID: 19704 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 736.499460][T19704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 736.509542][T19704] Call Trace: [ 736.512942][T19704] [ 736.515907][T19704] dump_stack_lvl+0x1e7/0x2d0 [ 736.520676][T19704] ? nf_tcp_handle_invalid+0x650/0x650 [ 736.526246][T19704] ? panic+0x850/0x850 [ 736.530355][T19704] ? __might_sleep+0xe0/0xe0 [ 736.534988][T19704] should_fail_ex+0x3aa/0x4e0 [ 736.539707][T19704] ? ovl_init_fs_context+0x11d/0x4f0 [ 736.545202][T19704] should_failslab+0x9/0x20 [ 736.549740][T19704] __kmem_cache_alloc_node+0x6d/0x300 [ 736.555154][T19704] ? ovl_init_fs_context+0x11d/0x4f0 [ 736.560563][T19704] kmalloc_trace+0x2a/0x60 [ 736.565024][T19704] ovl_init_fs_context+0x11d/0x4f0 [ 736.570183][T19704] alloc_fs_context+0x688/0x800 [ 736.575083][T19704] path_mount+0xb30/0xfa0 [ 736.579563][T19704] __se_sys_mount+0x2d9/0x3c0 [ 736.584284][T19704] ? __x64_sys_mount+0xc0/0xc0 [ 736.589114][T19704] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 736.595147][T19704] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 736.601164][T19704] ? __x64_sys_mount+0x20/0xc0 [ 736.605955][T19704] do_syscall_64+0x45/0x110 [ 736.610495][T19704] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 736.616436][T19704] RIP: 0033:0x7fd14d47cce9 [ 736.620876][T19704] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 736.640594][T19704] RSP: 002b:00007fd14e1130c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 736.649054][T19704] RAX: ffffffffffffffda RBX: 00007fd14d59c050 RCX: 00007fd14d47cce9 [ 736.657060][T19704] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000000 [ 736.665059][T19704] RBP: 00007fd14e113120 R08: 0000000020000440 R09: 0000000000000000 [ 736.673060][T19704] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000002 [ 736.681078][T19704] R13: 000000000000006e R14: 00007fd14d59c050 R15: 00007fff7a4d5cc8 [ 736.689104][T19704] 20:35:08 executing program 3: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x8c'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:08 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (fail_nth: 13) [ 736.720558][T19703] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:08 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:08 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd4c, 0x5) 20:35:08 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 736.826811][T19715] loop1: detected capacity change from 0 to 65 [ 736.855726][T19715] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:08 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xcff, 0x5) 20:35:08 executing program 5: write$smackfs_label(0xffffffffffffffff, &(0x7f0000000040)={'sync'}, 0x5) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x3202801, &(0x7f0000000080)=ANY=[@ANYBLOB='upperdiroff,nfs_export=on,\x00'/40]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 736.929008][T19717] loop3: detected capacity change from 0 to 65 [ 736.989047][T19720] loop1: detected capacity change from 0 to 65 [ 737.007874][T19717] BFS-fs: bfs_fill_super(): Last block not available on loop3: 311431 20:35:08 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x109) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 737.056055][T19720] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:08 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 737.137825][T19724] FAULT_INJECTION: forcing a failure. [ 737.137825][T19724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.171819][T19724] CPU: 0 PID: 19724 Comm: syz-executor.4 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 737.182294][T19724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 737.192382][T19724] Call Trace: [ 737.195693][T19724] [ 737.198655][T19724] dump_stack_lvl+0x1e7/0x2d0 [ 737.203374][T19724] ? nf_tcp_handle_invalid+0x650/0x650 [ 737.208875][T19724] ? panic+0x850/0x850 [ 737.212985][T19724] ? snprintf+0xda/0x120 [ 737.217357][T19724] should_fail_ex+0x3aa/0x4e0 [ 737.222076][T19724] _copy_to_user+0x2f/0xa0 [ 737.226534][T19724] simple_read_from_buffer+0xca/0x150 [ 737.232006][T19724] proc_fail_nth_read+0x1e9/0x250 [ 737.237073][T19724] ? proc_fault_inject_write+0x3c0/0x3c0 [ 737.242750][T19724] ? fsnotify_perm+0x43e/0x5a0 [ 737.247564][T19724] ? proc_fault_inject_write+0x3c0/0x3c0 [ 737.253254][T19724] vfs_read+0x289/0xb00 [ 737.257457][T19724] ? __fdget_pos+0x2b0/0x340 [ 737.262081][T19724] ? kernel_read+0x1f0/0x1f0 [ 737.266714][T19724] ? __fget_files+0x3fe/0x480 [ 737.271437][T19724] ? __fget_files+0x29/0x480 [ 737.276075][T19724] ? __fdget_pos+0x2b0/0x340 [ 737.280703][T19724] ? ksys_read+0x7b/0x2c0 [ 737.285074][T19724] ksys_read+0x1a0/0x2c0 [ 737.289372][T19724] ? print_irqtrace_events+0x220/0x220 [ 737.294873][T19724] ? vfs_write+0xb20/0xb20 [ 737.299332][T19724] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 737.305352][T19724] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 737.311379][T19724] do_syscall_64+0x45/0x110 [ 737.315929][T19724] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 737.321879][T19724] RIP: 0033:0x7fd14d47b98c [ 737.326350][T19724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 737.345996][T19724] RSP: 002b:00007fd14e1340c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 737.354448][T19724] RAX: ffffffffffffffda RBX: 00007fd14d59bf80 RCX: 00007fd14d47b98c [ 737.362630][T19724] RDX: 000000000000000f RSI: 00007fd14e134130 RDI: 0000000000000003 [ 737.365535][T19733] syz-executor.3: attempt to access beyond end of device [ 737.365535][T19733] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:08 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 737.370699][T19724] RBP: 00007fd14e134120 R08: 0000000000000000 R09: 0000000000000000 [ 737.370719][T19724] R10: 0000000000004030 R11: 0000000000000246 R12: 0000000000000002 [ 737.370731][T19724] R13: 000000000000000b R14: 00007fd14d59bf80 R15: 00007fff7a4d5cc8 [ 737.370758][T19724] [ 737.397299][T19736] overlayfs: failed to resolve './file1': -2 20:35:08 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:08 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000100)='./bus\x00', 0x109) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (rerun: 64) [ 737.443433][T19739] loop1: detected capacity change from 0 to 65 [ 737.477249][T19733] VFS: could not find a valid V7 on loop3. [ 737.508088][T19739] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:09 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 737.760194][T19743] overlay: filesystem on ./bus not supported as upperdir [ 737.807037][T19750] loop1: detected capacity change from 0 to 65 [ 737.831434][T19750] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 737.846733][T19743] overlay: filesystem on ./bus not supported as upperdir 20:35:09 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd54, 0x5) 20:35:09 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x3f00, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:09 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd04, 0x5) 20:35:09 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 737.918835][T19743] overlay: filesystem on ./bus not supported as upperdir [ 737.938368][T19752] syz-executor.3: attempt to access beyond end of device [ 737.938368][T19752] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 737.969549][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.001005][T19752] VFS: could not find a valid V7 on loop3. [ 738.016849][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.041872][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.091427][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.120967][T19758] loop1: detected capacity change from 0 to 65 20:35:09 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 738.140146][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.164422][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.193237][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.206753][T19758] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 738.225764][T19743] overlay: filesystem on ./bus not supported as upperdir 20:35:09 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x4000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 738.250465][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.290116][T19743] overlay: filesystem on ./bus not supported as upperdir 20:35:09 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 738.367290][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.388383][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.400395][T19743] overlay: filesystem on ./bus not supported as upperdir [ 738.425409][T19743] overlay: filesystem on ./bus not supported as upperdir 20:35:09 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x109) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:09 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xedc0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 738.488354][T19770] loop1: detected capacity change from 0 to 65 [ 738.523666][T19770] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 738.552809][T19766] syz-executor.3: attempt to access beyond end of device [ 738.552809][T19766] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:10 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 738.636336][T19766] VFS: could not find a valid V7 on loop3. 20:35:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='logfs\x00', 0x30dc081, &(0x7f0000000300)='\x00') 20:35:10 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x3f000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 738.769966][T19780] loop1: detected capacity change from 0 to 65 [ 738.789318][T19780] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:10 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd5c, 0x5) 20:35:10 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:10 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:10 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd05, 0x5) [ 739.066354][T19791] loop1: detected capacity change from 0 to 65 [ 739.074794][T19783] syz-executor.3: attempt to access beyond end of device [ 739.074794][T19783] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:10 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x40000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:10 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 739.116645][T19791] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 739.141201][T19783] VFS: could not find a valid V7 on loop3. 20:35:10 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (rerun: 32) 20:35:10 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 739.385677][T19803] loop1: detected capacity change from 0 to 65 [ 739.441988][T19803] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 739.478859][T19801] syz-executor.3: attempt to access beyond end of device [ 739.478859][T19801] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:11 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x8cffffff, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 739.492972][T19801] VFS: could not find a valid V7 on loop3. [ 739.523832][T19806] overlay: filesystem on ./bus not supported as upperdir 20:35:11 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 739.576463][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.602252][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.635001][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.654038][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.692459][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.728006][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.770216][T19806] overlay: filesystem on ./bus not supported as upperdir [ 739.781398][T19813] loop1: detected capacity change from 0 to 65 [ 739.791175][T19814] syz-executor.3: attempt to access beyond end of device [ 739.791175][T19814] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 739.808008][T19806] overlay: filesystem on ./bus not supported as upperdir 20:35:11 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xc0ed0000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 739.826985][T19814] VFS: could not find a valid V7 on loop3. [ 739.827392][T19813] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:11 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd61, 0x5) 20:35:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:11 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd32, 0x5) [ 739.886709][T19806] overlay: filesystem on ./bus not supported as upperdir 20:35:11 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 739.966529][T19806] overlay: filesystem on ./bus not supported as upperdir [ 740.024807][T19806] overlay: filesystem on ./bus not supported as upperdir [ 740.057212][T19821] syz-executor.3: attempt to access beyond end of device [ 740.057212][T19821] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:11 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xebffffff, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 740.060082][T19823] loop1: detected capacity change from 0 to 65 [ 740.080733][T19806] overlay: filesystem on ./bus not supported as upperdir [ 740.093189][T19821] VFS: could not find a valid V7 on loop3. 20:35:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 740.131771][T19806] overlay: filesystem on ./bus not supported as upperdir [ 740.146976][T19823] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 740.193905][T19806] overlay: filesystem on ./bus not supported as upperdir [ 740.218090][T19806] overlay: filesystem on ./bus not supported as upperdir 20:35:11 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:11 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:11 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:11 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xf6ffffff, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 740.381278][T19834] loop1: detected capacity change from 0 to 65 [ 740.415050][T19834] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:12 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 740.544128][T19838] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:35:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 740.701842][T19842] loop1: detected capacity change from 0 to 65 [ 740.743188][T19842] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:12 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd62, 0x5) 20:35:12 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0x221e031, &(0x7f0000000440)) 20:35:12 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xf9fdffff, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:12 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:12 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd4c, 0x5) 20:35:12 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xfffffdf9, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 741.117152][T19854] loop1: detected capacity change from 0 to 65 [ 741.129953][T19858] syz-executor.3: attempt to access beyond end of device [ 741.129953][T19858] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 741.144335][T19854] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:12 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0x221e031, &(0x7f0000000440)) [ 741.163228][T19858] VFS: could not find a valid V7 on loop3. 20:35:12 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000040)={0xa, 0x4, 0xfa00, {r1}}, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:12 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xffffff8c, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:12 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:12 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xffffffeb, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 741.438419][T19869] overlayfs: failed to resolve './file0': -2 [ 741.469929][T19873] syz-executor.3: attempt to access beyond end of device [ 741.469929][T19873] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 741.531796][T19873] VFS: could not find a valid V7 on loop3. [ 741.566118][T19874] loop1: detected capacity change from 0 to 65 [ 741.644743][T19874] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:13 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x2}}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:13 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000040)='./file2\x00', 0x0, 0x221e031, &(0x7f0000000440)) 20:35:13 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xfffffff6, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:13 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:13 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd54, 0x5) 20:35:13 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd8f, 0x5) [ 742.045370][T19882] loop1: detected capacity change from 0 to 65 [ 742.054227][T19886] syz-executor.3: attempt to access beyond end of device [ 742.054227][T19886] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 742.076222][T19882] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:13 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="e9ff"]) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) fchmodat(r0, &(0x7f0000000100)='./bus\x00', 0x6) 20:35:13 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xedc000000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 742.100730][T19886] VFS: could not find a valid V7 on loop3. 20:35:13 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd5c, 0x5) 20:35:13 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:13 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 742.304380][T19899] syz-executor.3: attempt to access beyond end of device [ 742.304380][T19899] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 742.334795][T19899] VFS: could not find a valid V7 on loop3. [ 742.347362][T19900] loop1: detected capacity change from 0 to 65 20:35:13 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) rename(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./file1\x00') (rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="e9ff"]) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) fchmodat(r0, &(0x7f0000000100)='./bus\x00', 0x6) 20:35:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 742.370861][T19900] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:13 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x3f00000000000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:14 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 742.563243][T19906] syz-executor.3: attempt to access beyond end of device [ 742.563243][T19906] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:14 executing program 3: mkdir(0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 742.608305][T19906] VFS: could not find a valid V7 on loop3. 20:35:14 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 742.713185][T19913] loop1: detected capacity change from 0 to 65 [ 742.744717][T19913] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 742.858452][T19919] loop1: detected capacity change from 0 to 65 [ 742.918386][T19919] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:14 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) rename(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="e9ff"]) (async) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) fchmodat(r0, &(0x7f0000000100)='./bus\x00', 0x6) 20:35:14 executing program 3: mkdir(0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:14 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x4000000000000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:14 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd61, 0x5) 20:35:14 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xda4, 0x5) 20:35:14 executing program 3: mkdir(0x0, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:14 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:14 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file2\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f72716469f5c0104856bc4af59204a944714213723d2e2f6275732c6c6f7765727a7757970a5b6469723d2e2f66696c65302c75707065726469723d2e01000000000000001fc05c3384fc6901569e8ded5dad868f06a77576cf39800f0b154230f54c077c93ae3a0752dba6edb10290a5cce2f7eafbf44b68592959278c568ad04b5e840100010000000000aa3fba69"]) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) linkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:14 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x8cffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 743.269320][T19936] loop1: detected capacity change from 0 to 65 [ 743.307055][T19936] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:14 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 743.467527][T19943] overlay: Unknown parameter 'worqdiõÀHV¼Jõ’©DqBr' 20:35:15 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file2\x00'}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f72716469f5c0104856bc4af59204a944714213723d2e2f6275732c6c6f7765727a7757970a5b6469723d2e2f66696c65302c75707065726469723d2e01000000000000001fc05c3384fc6901569e8ded5dad868f06a77576cf39800f0b154230f54c077c93ae3a0752dba6edb10290a5cce2f7eafbf44b68592959278c568ad04b5e840100010000000000aa3fba69"]) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async, rerun: 32) linkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 743.609986][T19949] loop1: detected capacity change from 0 to 65 [ 743.659442][T19949] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 743.680738][T19954] overlay: Unknown parameter 'worqdiõÀHV¼Jõ’©DqBr' 20:35:15 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/kcm\x00') ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file2\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f72716469f5c0104856bc4af59204a944714213723d2e2f6275732c6c6f7765727a7757970a5b6469723d2e2f66696c65302c75707065726469723d2e01000000000000001fc05c3384fc6901569e8ded5dad868f06a77576cf39800f0b154230f54c077c93ae3a0752dba6edb10290a5cce2f7eafbf44b68592959278c568ad04b5e840100010000000000aa3fba69"]) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async) linkat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r1, &(0x7f0000000100)='./file0\x00', 0x400) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:15 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdac, 0x5) 20:35:15 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xebffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:15 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd62, 0x5) 20:35:15 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 744.099981][ T28] audit: type=1800 audit(1703968515.563:1024): pid=19964 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1954 res=0 errno=0 20:35:15 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="738e6e602c00"]) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000240)={[{@index_off}, {@default_permissions}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_on}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'.}{-@/--!\x90\'].!$^'}}]}) 20:35:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)='v7\x00', 0x8008, &(0x7f00000001c0)='overlay\x00') [ 744.175028][ T28] audit: type=1800 audit(1703968515.563:1025): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 744.194857][T19975] loop1: detected capacity change from 0 to 65 20:35:15 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xf6ffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 744.252322][T19975] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:15 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', 0x0, 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:15 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="738e6e602c00"]) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000240)={[{@index_off}, {@default_permissions}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_on}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'.}{-@/--!\x90\'].!$^'}}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000240)={[{@index_off}, {@default_permissions}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_on}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'.}{-@/--!\x90\'].!$^'}}]}) [ 744.505416][T19990] loop1: detected capacity change from 0 to 65 [ 744.544998][T19990] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', 0x0, 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:16 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdb4, 0x5) 20:35:16 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xf9fdffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:16 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:16 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xd8f, 0x5) 20:35:16 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="738e6e602c00"]) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x40, &(0x7f0000000240)={[{@index_off}, {@default_permissions}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@index_on}], [{@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '\'.}{-@/--!\x90\'].!$^'}}]}) (rerun: 32) 20:35:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', 0x0, 0x8008, &(0x7f00000001c0)='overlay\x00') 20:35:16 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xffffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 745.030955][T20001] loop1: detected capacity change from 0 to 65 [ 745.063760][T20001] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:16 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@flag='nolazytime'}]}) 20:35:16 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x0, &(0x7f00000001c0)='overlay\x00') [ 745.321622][T20022] loop1: detected capacity change from 0 to 65 20:35:16 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@flag='nolazytime'}]}) 20:35:16 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x2c}) [ 745.370042][T20022] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 745.439293][T20026] syz-executor.3: attempt to access beyond end of device [ 745.439293][T20026] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 745.458373][T20026] VFS: unable to read V7 FS superblock on device loop3. [ 745.474760][T20026] VFS: could not find a valid V7 on loop3. 20:35:17 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x0, &(0x7f00000001c0)='overlay\x00') 20:35:17 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@flag='nolazytime'}]}) [ 745.950501][T20034] loop1: detected capacity change from 0 to 65 [ 745.963536][T20034] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 745.987524][T20036] syz-executor.3: attempt to access beyond end of device [ 745.987524][T20036] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 746.006405][T20039] overlayfs: failed to resolve './file0': -2 [ 746.044411][T20036] VFS: unable to read V7 FS superblock on device loop3. [ 746.060626][T20036] VFS: could not find a valid V7 on loop3. 20:35:17 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xda4, 0x5) 20:35:17 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x6e}) 20:35:17 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdb9, 0x5) 20:35:17 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:17 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x55) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x14000, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x0, &(0x7f00000001c0)='overlay\x00') 20:35:17 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 746.208991][T20049] loop1: detected capacity change from 0 to 65 20:35:17 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x55) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x14000, 0x80) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 746.264661][T20049] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 746.281665][T20052] syz-executor.3: attempt to access beyond end of device [ 746.281665][T20052] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 746.303970][T20052] VFS: unable to read V7 FS superblock on device loop3. 20:35:17 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 746.322984][T20052] VFS: could not find a valid V7 on loop3. 20:35:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 746.511639][T20060] syz-executor.3: attempt to access beyond end of device [ 746.511639][T20060] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 746.548377][T20060] VFS: could not find a valid V7 on loop3. 20:35:18 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 746.568337][T20062] loop1: detected capacity change from 0 to 65 [ 746.600398][T20062] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:18 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x55) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x14000, 0x80) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 746.834132][T20070] overlayfs: failed to resolve './file0': -2 20:35:18 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdac, 0x5) 20:35:18 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@flag='nolazytime'}]}) 20:35:18 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:18 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r1, 0x2007ffb) (async) renameat2(r0, &(0x7f0000000100)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00', 0x2) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:18 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='ncpfs\x00', 0x802, &(0x7f0000000300)='}-\x91+\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f4d696c65302c75707065726469723d2e2f66696c65312c00cd30275e354e50626d3a3a7357ec624ea27ca53eccea115335992264c6b2984cb4275ddef1db530fe7237566984f60c14079d802bf5434224a0a098d0602b02a423a1f32d28d5455eff233"]) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:18 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdbe, 0x5) [ 747.121849][T20083] loop1: detected capacity change from 0 to 65 20:35:18 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7c5883, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x124) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 747.163973][T20083] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 747.174557][T20091] overlayfs: failed to resolve './Mile0': -2 20:35:18 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:18 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='ncpfs\x00', 0x802, &(0x7f0000000300)='}-\x91+\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f4d696c65302c75707065726469723d2e2f66696c65312c00cd30275e354e50626d3a3a7357ec624ea27ca53eccea115335992264c6b2984cb4275ddef1db530fe7237566984f60c14079d802bf5434224a0a098d0602b02a423a1f32d28d5455eff233"]) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='ncpfs\x00', 0x802, &(0x7f0000000300)='}-\x91+\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f4d696c65302c75707065726469723d2e2f66696c65312c00cd30275e354e50626d3a3a7357ec624ea27ca53eccea115335992264c6b2984cb4275ddef1db530fe7237566984f60c14079d802bf5434224a0a098d0602b02a423a1f32d28d5455eff233"]) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file1\x00') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:35:18 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x8cffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:18 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7c5883, 0x20) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7c5883, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x124) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x124) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 747.454827][ T1229] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.461481][ T1229] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.493597][T20101] loop1: detected capacity change from 0 to 65 [ 747.498031][T20103] overlayfs: failed to resolve './Mile0': -2 [ 747.534241][T20101] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:19 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='ncpfs\x00', 0x802, &(0x7f0000000300)='}-\x91+\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f4d696c65302c75707065726469723d2e2f66696c65312c00cd30275e354e50626d3a3a7357ec624ea27ca53eccea115335992264c6b2984cb4275ddef1db530fe7237566984f60c14079d802bf5434224a0a098d0602b02a423a1f32d28d5455eff233"]) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='ncpfs\x00', 0x802, &(0x7f0000000300)='}-\x91+\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f4d696c65302c75707065726469723d2e2f66696c65312c00cd30275e354e50626d3a3a7357ec624ea27ca53eccea115335992264c6b2984cb4275ddef1db530fe7237566984f60c14079d802bf5434224a0a098d0602b02a423a1f32d28d5455eff233"]) (async) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file1\x00') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) [ 747.619430][T20109] overlayfs: failed to resolve './file0': -2 [ 747.872988][T20116] overlayfs: failed to resolve './Mile0': -2 20:35:19 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdb4, 0x5) 20:35:19 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:19 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x8cffffff00000000, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:19 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x7c5883, 0x20) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x124) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:19 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:19 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdbf, 0x5) [ 748.127428][T20131] loop1: detected capacity change from 0 to 65 20:35:19 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x4200, 0xbb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065defa88fbd147e469722300000000"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8c810, &(0x7f0000000280)={[{@metacopy_on}, {@metacopy_on}, {@xino_off}, {@index_off}, {@metacopy_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!*-^{[#(/'}}]}) unlink(&(0x7f0000000040)='./bus\x00') mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000140)={[{@metacopy_off}, {@metacopy_off}], [], 0x5c}) 20:35:19 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="d034bb5acd34ad2eb7c5a9a3d3793f14d9714aa34eba689b3938752b5920efac8cc3d8d3e7accce8331c57e14d7e9d6bb4f2728456cdbe0fb0f2d9b82d4cb16b948686e63c0d2f19ce2f2f428b4fce029661171bbcfd0b5dd3da5b3b8ec4442b96f07ac582299005018cc83a98a1879161d7ae42d0d9015b56d72613038f59e9eb7ddfed9105957f7a361a32db18fdb3f616b41356d43239f4dab2aafb3652763a4c043d2bbba60e3c80841df3faaf97f38b69ac8b8d5e1eac783b4fca226ef8d118248ac99f76531bfac017ebefae2367400c3c6dee234159e89c710807548f16b4ce8da44a2e85b5490e7411aaeb674f3edc248c174bfb983c8cf21e2668a8193955206dd52e0c3052e22bd92d9ed52412aff2818656b65180b46dc2d1d75facead5166a5076d8620c8bdcc179328f047d6efce4177bed157cb3bdfb56026729e235c345cec69b08cc82f11a9ad6603c31f4c2e470885c7e2350a9e4bd8c45d1d66024e23ba3abd533d732d14fd8d72b1aee6586c75817c99962feea3276d153c0dcf9f5183d8d4020ef09ed08e406934ffcc88651d91d04b7ef20e0711f5a6c65bebe373c7e69c86c06b651e7588d5bfbd4f5d972cfa2110993a62913ac3c971985757dbe8500f76f185d6e799a94eb5b5b87a3a3dbe0823d83a37b7c81bf25e24a2c4849040c18b0d4eaa009db0844f31e49bada84efb59e1abe1a9e1070ce4b9e26488b90f0a993b1bf6ee40f36b704949ee7ffb574b967cd32178c9c8059624c36a619d8599435d4cf00d6e251f710ab6a95dcabcdc83987db2efde9d7fa8700e897aaf47bb9839717fed8a8979ffbad9995d92c947a5274fb5c396da794f88cc1f6919f402228c7242323d265b71b7aaedf4ad7dce44b5f3052c1fc659a03eed61152af8c34217bb07d879d2ac3c54433c7b427ed7f1ad91d559e74788d1a3639d6b56ba74c33fa7b70af74b6bb83807abb4299514324a8947b9513ee7dd6c1571f6a78d12fda432b47b0a40e14465b554e7f1adcd81d831cedc8628511ca49ed8c392255179c705fbb783078d6daf5a1007b83f8e6cb5bcf20f280165449304a0561e9c17039bb0eb9c93603fc37f829b3a7aa3c68e4e27be2dddde14fdb8f5e3d5e52d16e7a7fb821c6b004c1659eba25ca5b314130a7ddd65465f905c59e50b5c4616017d7ae998619653916d7ac8dffe2a58cb74676b53e6681c2d0f41b1a6ec4e65de65c7d4e29fa0f92b944ea0e474c47f0c1d6958af6fb837e508d32e4fe55233ae9702721aa855101e20900d2ed8d40c508e7df76067feec60df9898a028d5030ba020cf3b82cfeb0a981dd1aa95f12e9ca9dddde39fcf4458d1ca862b65fed6f851b5679e4546c3e086c3c471e7782426a91d82e5ebd81f7cef03f506e8b0c5afdc8277025d1cff6d50e93cf3e6556270d07bc50d0dbd39ddd94992cdd7fe44b64ec81adb77980dc12293e09bdd403faca03e0e4216606ce1d82ac76e839a8a2ac814250f57d72c83caa633201183fd40ef21efa35a386d6e60c92e70329d773e2151b48e7b25daaec240e582b3ab417ff3196c838978a3385b4fdf4198fd24e1f6906e4994e9d39c66592031a2338a0c4b48e95dbc57b68f4067a912820a5dc2595a59660d94c7a8ffbf7c8c1aa23ec74704c551f935d4b88e3f1977ce109fa499fffdd4eaf178dc2ba921e642e22ca822efd682d25d493a93643d3ac499f341192c201020b62ab6007cb87ad8d3bd2bae54ca93be1b90742f7424d9ace04b663e54156b5fbe845bd1324060595798c75d6e67d0f994a5c110c476a85a90ca35a07822cff44918f205e0f556e77d028700c81fd42ca68feb3d3805d7436a532d50e2f2895c5751b1478d8faf6021681bf2f9d2f18580383938698ef6b246e56717f51da73651b5cb0dbad93628622bd3f3ee53c3a67c9b1f31c6e14b914fb2451ba3f50926e9b866b7edeb19cc4cc3b3202e4e8c1772fec1455c3d0626cf5a71b436cb05c8bca3cce92c09f5c8352e70dcd737cebc6d252402e4cad8c230a3ac3220ad26e84cd73223470f179216ec140bf553d44cf71e881ddd501e34b8b0927007d26623db88ed794448b20f33a600ba71cb8fc858ab23893ebcaddd0c82442e206f62e8ce29c1142c930dbda930c9e425c48d6a4c2f53f469e269455c5338e81c99ea90e4af4ddee27f1c99892d74038e6bb29f4891eabc9c1c5b45ce75644c7866651af09706aef1b9fd5f67810c3ae3c8de616bd440b54c94686025d134ae79fc200e74ed8922756d654c24b7c5e2ecf21b54602f9f14a088b1247d287aac1eb9cb6bb44dbdb31262ce8bc0fc528319f60b6993cb80917f4c7eb446678bd7552d965343f6c967788c5e9a2410499393da153e261b049617ac4c933f635fc29155a2f4870bf764e8677e7403a0a6b59eb426af8b7522820298a814c708e2a46a3ef8be108384d14e1ef251beb4fbdb59658ecdea5ac9452256cabc6d060f6b03d7c9249001aad305bad7400bc3c958e37258a8cd86b8003d94612e4d4dcac9d20aaf8ed3184b0d1650354b72048618ce9f7c47ea1f32a20c2d33a68cda4690339e8c78ba0ea2676506e53ef2fa13b9070c1470bb74c68ad3cb66ed9addcf60504f189ce5c7a582f5bcedbff8fd3ea3064ae5c4a4360e5d991db806165a584e05acf6647d62357009f7603e37043942cbe2e671eb9f7af5b8f9b628eefe4d3575935262cb45130e112eaca02c526a85aa46b3168b7d2f22f67f4e957f9b383ea13b1076f3f128cf7f4dc4bebf13573e16550c2f8f964dce562408be2658bc5abaa7db0057f23d106d2c54e4d88a2900e2e6566bacd1d8e11e4445c1ac307932965f2e4b61b743f55f282effdaddd2d692d2843659c4048f9dee8d07e3b805e9f61a6aa57fffa9ff1f4536780a6149c01da647a69d5b36285d3484ee0c04748deb24c347c0c79876eabe2c774c9d84b86bc366e513dd97e12402e3f1b14718442869f4e29a8c88e31de189002e64b1e524eda964cc49bc1f655f024a1321e54b4ce0ebca63e214f0cca5a741339a6de6a9c83c4f06681ed19c653d3ea39b40a1a9210de718f24e6cbfb6591da9fb3920fe5404ce370c0a6fa2898ed27160f0d471da453804149fa4805bcb634d457e1530cc9f70a69315c948207241d729bf65f7e1b0b07d4d49603114bfd9aa88dbd650c6116edbe893ac5cdbe09b5c64518e2e89499a626649516d6cde69e1e5d40d1cbb9d5456664d5b91abcb5e632aa0742c45d70b424138fce71c5280b89a7da49e2cc9f62aa281bc97b759fd70ed05a3ff1654683a223c84474f8643a307dfddf379e2ada28a1ccadda57a997d4bf8988034e806e6bea09d9bfb42efc57aa00bc68102b269428cb6877f0fd65df92e83efd46c7c8d1746d27faaaa744e994aa3eab928c5e99684211df05c341b7a3a91752630e64db8cf83d881943028c75447adcd91b95bdf7d22381693f3eb696b896016e0ea85ec8f001c804987dfa004072f679ef97e126238b24861e1cda58373c227310ce2ec131fb0b85ea946007c7b58de639c5fe8430259e73daec7f7ce5179a328dcb3fef6b4cb097c0cfdb6ea0bc4e1afd51791993fd0bbf25df51a1475482d3291558f35bc99665a7a61ba68b6c9386566a1801f8f20ffda88e964e5284c793d11f857b2eed8fcac3287a9edf89a5581f13a13035ac88d1132841c3a763d11b55454e67f7be30ca5456750229b7b046b31caeb3e4e8c18f336a7cb64a626212682b21341abfbbdf70a37a7b94c2a377b09d7b33f94070498b678b32735c8be00f99d821d7eef4a67a8c1a0229654ec1b44c3d599e386cc735577410b7cb192b03c45d4b28b03c126c2589d5e9077198bad24320bf46f2eca5ca9b4fb40e80b31f2db83033ede6989957c2b8c2d4c0e663764f1bdaf74fdf6f24486a2259c56b57c8e9e54f2c8b2f4e7aa0128cca57e616fd8be5e993e59ebfd6dfe9b6bd61a19b3f9b736199b9c2f4f93633f4541d7add9346b487ded1ba821a4212050a889e8d2a3fae040a3d0c98501b54b35fe5de8090a8bf41fcac997f896d9381c81e3efe467836470b7a6e6f31858294731ca761bbaa2321117ae5b087007c44ee1421fbd82f3d8256adea9abc1156002c2e027413533cfe95355bb77f73d4ba8527e9fb52c143786e38d583bbe58811abfbb6ba373aa4cfb1459e3e4f4ca38a2cb3ce2f203647335ded9ac38c0274cc1fdb455297ec28b4a0a039774bb77114e64d39608b46b147b9f099318f5f458e5fa10d12b996fa4212f3a9d951fa6cd01537ce4b3e034759621192e1fc998ce5fe33e10114c0bb09d196ca6e051058a98d38658f74c57be7b1977d1bbad71f5bad3750387c66beff8520d7dece526e6f17c72e480c5477b09263bb4ee32109c793f0c2638caf6fd4a27e18f917cc006b4e9172a9c07f130cf1946c685bf80d4fcfe21b90775f0c3452cba04ec1d3cdd7174646bcbaaf05edb776228ccb2d8ce9d7746a8b14da283092535678310b64dac8c00021f98e822a8d60f983321e535e60dd47fd9c83f6f0003f4bfdc57f8cebe3c650fb089f3163ff7b9af4b351765a3b7367eaded41b2ff4ed21053f434cd72e31447073cc06e86f8011ddf1c64b34b75efdd7dbbf40f1b7027b01bcc1d2a2193fb0a6eadb6de837b96d36f35324d11ed6ec1a8897a180c52946ea560c5057ff2a36a55e60e86c46e302f0f7dbf9601a25f338d29484c1d99e3d48b70a8b2edb61567ef0ac99ace51db92ea18614422ffe2aa598272e6fff71d3e0964e43638dff488b4d72fe9c60d2cc92992958cbc334a76f35a568a7f29054434844afcbb0717d5a2bebc1a6ed15bf9a84f4c821f59224d9026f36e3be71f93dcede339772760295cac2de326e9feba69485bfc3c0a64090cab9d07ed626e083f0c59f1b7c9edb8e76d3ca026a6fae7d834814ff088a280ca62cc142dee52b21f53096646f5c6e401a1c5772dddf88de169644790530a557c4b0cb9c1ecb389050c681d15ba05950981f37ae2a8d8637e645d37d9dcffae8e08eaa1f2ed5f7bc8297de5085ed060d51d0cbff6e60edd3eccbd87033447cce918714890d7f5b4ea769efe0ad53867f7e83dc3db272cfcca8fd98ebcfe8731015ebefab9f8ef70b290e562a7afe4969a8e08191809253cf79233342976e005c4b097ccf322b40d2a3f2d2e60429c31c35b08c1a3e70ab0f1a679f5c0201a9f9c0e9ea46c6c5f48decf263e0e923da302e7a1fc9477ac0dc5fd8a6c78734da8e443a9781b08698037395f10d553250010fddc6c213438e3b7bfe156ffe982e53ed82071dcd0bbd6f50501f2b464f46e2bbab1a78b80071f74f82196ed9d9e8821a424ce9c53358b9e97a710c3905529fe646da58fc174e6baea425e1aea39ef5d38f0f38ed758a4bb67331b644eecb028711f2aa9bc8c9ab0df9f21ac4edd8e4e16dffc0ec8f652d1639a207a178b5ef9b9870840a1e5c4c14f39da63eab2a613fbe7593402e748c8e7b9fb12a808f5eeb82d426650dc5eb5e4de075016719d2014a6146bbc77caadcca7b336dcd135fbd3475c2b3351b38ad9d52ed0cf76196b0ba7265b87bb96219a6957bbe597f9aa65a96cf6480f49514013493de14c973585dea1f3b1b5a572aa33c33c6cfbf270143d7f8547d19322ccc60b541fda285a67784b8526887d7802ac9c6e07bf25a3eae28f5328da54163197214bd6a294951f28fd8eab23e3fd682198be4db6eb245f974ba88b1daed3fa83d31b37a951c58b6c5", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) [ 748.172373][T20131] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:19 executing program 3: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:19 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 748.404587][T20138] overlay: Unknown parameter 'uppeÞúˆûÑGäir#' 20:35:19 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xffffffeb, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 748.454874][T20142] overlay: filesystem on ./bus not supported as upperdir [ 748.477031][T20143] loop1: detected capacity change from 0 to 65 20:35:20 executing program 5: r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="9a3f314ebfa1808a3114c89e927aa79cf30d94ca723a406dfa712f4854d08fc7eabfdba45d6176332ef20139e0dc9f746d7bc35bb2a73847d07aa066358e4f42afad1396c4f94797fbc381776d9f20c6655ad161f83d8025686fed96a202fb5cc948823d9e656208746ba2cc49cfa7a89a6975b43aaf78e99ca5e6d2bd82410e83c3a29d7d00419277e01a8cf824d88748615fb1916564326994869505355e5c8b1da46b2baf92287d7253daee6ab28febd47a5ee6d3a2c72c0b307d130923944fbd24ffb365de0519d7363291c329fd77a23e1f87cbc78a75b34328f5efba261b9134c7f95b38989b57c371bcd753aa8e9d187c4aa1c0be6ab3eddd7a244121b44d8331b59264037ba4fa1e79d8f50d18163d46bebd39afde1f96d0bc6086640b445eb3f6b9898750b61c49c10dd101bf3941f512373b5fb648344d22a50ff82e56f63467ebad8ae7b6c07abe32a69eae5e523877739de58dcf5391af5a15ab121ccd03173d2b4b27f081df403ecbc507d741755763533aed56d9a18c355e0dd6b1a217bcdc272ed9373e5656c8a19e5b98b74043bbab6cf4b79f8f2038534d13d6dcff62bce5f39055175bbc6b432347e96b84e02d16abfa7fbcb421a9322e39c89ef69253a1b526ea3fa63fc63e3fcdfd5a77edc05d3f9bca92a898493fe2609048d49b452447251c0dd9f85a6faebc2f92685bd770020bf4b4ad91f8f3ae01b94054b0117180e66bf6c4d5cea25a53e11ae4e6f7900689211c7fd7cb417ce49941070d9e392c091ccebfc5efed2ba56f5dd1c8b424b3d0a2a8ac22abbf0f4195bc5b81f612aa12fc42a908ab56eae56eff33661a6642a73f6d852c3d0f40dedfad11daf8fecffa556de50c56f708b9a6e7403d58aa26bd5739d6b0d005b585e27b9fd6ce96812cee8fb97e2caacc88990c55bff524f7a8799d73e5a60b504c6f2e7b3a8b53a62f762e0c2f41ffb8a7e537d53ce3e14e637eebba5db7c70d6bca2709e942358b179c4b0583c852cc98af7dd9a60a3d3d5b0dbcfd2981d5c202709ad8772e53d420b6578acc71d18744c041d93aff778edcabb2130f56b6facb609abe18edffed745fcfa3184388de827c18262752d89e8b17e809cef963f21878e0ce49c4fca9debf54ae4200c9b81f23b8c8d2d429afe04d45c4ae7f1608bcd937572d014dc00a9413658475564eac591106fc41b57c5dffdabdce49cc0a37699fb5c6ca1ee1e7a15ee65e214a28571c266bcf14a7dcef91252a4592ba024d185addf9c7dffbdcdaa0fae381d2c4eec6d88ed6112d4dca613cb25f8e24d9237fce73416c800bae68f45ca58b44b9af9ea8a6efd771e0758307dd6744ed11d575e94e13682f093fe45e2cf8297dcee4ad407f6d3d7d22e1f13ed83be2d5287d3ac739b6ce381675996413c5cb20305abab0de93229b478bbf4577c320bee55d21bfa4951ff208e3f4066e7e527afee437e47beb2e99fa6d3013f04c4a72c1a72172aa7ac808ff88cabe28d00d3831ef72efce8ea60498737067edf882e3294867f7540ef71b4ecced273d1e1e2dd3384e42922f9d0358b4bf42a55d77245707edadc2176dc19ce754c4b08c70a420eb524d86ac57d0a703042136b29f9e2fc19823330a0941b0f9bd50eb1932bd6072abe922921d7bb09d8586c2a6a390135aab215985e9bb40490c0b445eb5780a4722b3358ea7af274b1cee2099b5cc23995cb0829eeda76b36e36813335e4da6b7bcb627a6be8eec6078ba0efcfede02b1604d164e04beaa1071aabc04e6ae5ec28a8f862edac6e090130d49b9d01c6c9f8935ea6ae7c9cbbeb9cc75b9c2d866ca95f6fc87766e5587cfae6425465fe6c90b41cebd20bab196b83697b99f170a7124fb19b4b706640c45c8e7a9a5cf3ba18a4a67fde17a244ecbfb345fc90927ea8a4131538686f8fa7e013794d418f933d20d5b7f2f8b77b884625be9e556a6d42014d514f00b4db3d05e92a9f062bc98cc20964ba800af6657b264377b58be527a60f60833b921fe3e82ff6a2f3b793aa9021624dfdd8544b1ea0a38fcf13d6c6bb21e9b3a65194023cad98e2bc0b073e7d77affac8997c9a9034d42e3dd233fc0c7809746ca96fc5c0dada5ee619abe129aafee86b96bc600739e90cfc2cdc88aef23287c51890b4c24094a29bfd1dd91fed1f3aee57449856fb3d4fe89cb0a482f25c2dbc73f4ec59733b9a6d3aedbb3e30a65b680ad3ae5fba68da3144494098bae0c3b439ca2d59071798ec89545385db1e7edce7bfd70588db2c9d62af55269de8a982906e49442be541dae6749a92ed651458f6aec01ec80890fd2fc30184ef88a1929f8a8cb74afa65ca7fdc847ca8e9e1def941771f82ea0e221522f889baf3c5041741fcd45aae61aa5a0254ace6fed2482850f257ca01d980273c87d3c31b427379245875648825d54f82b1a2ec98b5dd64d6d04d3564a324cac02c06e84d1d0538c9beae0b5ede1139ebc62f3d189d8f7c3544d4727e0624fd445a8342ccd6a3656f14cc3194120e21c79eae3740de4bc9b96179183bfc33306f491c78c78a3d6309137a50868a1212327bbcace126947fd22b6d8cb92064d8b6a91da8ac8f4a2e026f5f4f8a46ca5c6a5e11fd9b2cae5530d4d91955728ed8b1fd5be8c8badce5f8e0bba125ecf3676b32b3dd3c55363e7c0b009fc802d8379fc40a6b64dc09b16399a6512c6e9f59b0871e70c1944cac0b1de632d4ebd671821c3607f46a481fcd9e059a2d46f1ec3dd79f09891b7758f3f1b02a474f0428f2a677c21f5741c7d03105c117436913646d5d8bc603f9ff016a7e2402dd80328183fef43b997aa8a1dcb977d46adefe5792356b92dd27fbae44e4e173045a065181c59fb0542faf502d64cb1571bdc8a7d48bf580babf07b07db57fc16325e4f882b087eae72fdfcbf60f11fae8073a7eecc0bc739013a9fda9485e8ec45c561e3ef3b6214dd00445930647ebaf4a10c9d0441c911815f69e1999384c7673a6e50940548550354f1a03256dcbe17f9cb1d1ea6b23a702217e4febe8f10e89a41bee351ffaf8d92b2ad57e4c2a353db5f2de04a0b6ccd6dd5fb3441f3b5db2e89a49320f3475ce06c954250dcbc1752ac507f74476c15207f6d316d0c6cab9a141647587a30bbbd592382d956c223588b39593ecd6784de087eef91e6204732c24f94ce62d58a3847bb8b56889cd5d5cc6fe3ce8d60a92bc2fc16fa376068001e6d14d393096e469f8729f83431d6e5c6afe68b462088c7091a7e766a495a8fa508ba797380433d35035d24d9596a2b8969b7f494db85c06a0192b63c52fa2c76675c50dc978d8dd689ba4972caffe381c3d7c1c43a0ba05491a15844e109c8e7b4d2310e3347d750b5a5b3d5a5aa84b3593408122c119fea0832b5169ff21eee5ce4aa1e5511a1b34f8a062630320bc2fc89b16469f68bb568852276c9f0df46f1086b12ff0fae93cbf02de6605ba1d46bc46dd2be2cb0edb926d7a805aaa372820f0b00f53a74af8a2743cbdba2214d40531a1dcd94a37e092d7f5983469c55cbe00f8b8e039a17a2e40257d015e33b3437a0e7a7a04ae9261eb8a54603eef78fcf621532e1a605a256b9cea77e2cde975dac644a7ffd86ba89ce6c257365102d2b0881bb3c05cb1a768feba0db91d57ae176dab31f3354dce59e52b25d9344c959faae2c8610de369810fde941dfa599be167dae17477224d8d179b76a65fc9e1dd3c6073401a22bde52af5fbd94462f742b3cba24c3de2c0da1c90803f90ddf62b3b785290d5e4afa51639612990cba68abe42090b07b47d473f36cf593eeb137ebc641693ae5e6cc04dc6a6bfd7c4b33d27c935f788f2d5e74f54d9bc9f269700cc2d6131e5120100395bfff75c19028c24670175259ad49b654b376e3e0309152c9ab604650d5edef22ad5fa5ca3515eb7c59fbd9964ce4d8b832fe9f87cf552be843870cdf2b76fb75bd99b03e760417cf2a536113370f63257941924225efd8dd1f08d8210994e0908f7dff9f6a6bf97005994483bbab5cb032d39ee06a49444b64eb67eedf336e3a27872a022797e75a5858480df530d07065ea5f4db96c5120ecf5b7ce9b1c0d024f9d3014e32964f34ecf3e1b21a1499c09ee639c00a9e8ab7ff859c63c50e7fb34338d63c4d3f78f3d45940ef10136a45ec28800680a444371ae663a3690463ef3507657c573fc26d2e1becb863e10e5e63352b14e7c4205c46bb02e34e034199fd24e2226728239d375fd2683d527a387ddedd2a53b47175712cba1e3b46fe687bf38e069e2f5bcc03616afd6f864b9138ca697d2a128eb8b088fa48679ca3913d4d30a4c3c27ea14f475c606021e001f600c324e81040c099f03eb3b7adb3ec79b8fd2953f0da672c387e24e88ed64d62cd2ca7f79f78773a0b0e768bd032dc6160fd3180b30ebebafd58d0d98d9b43e157eb9d289ac193cfe5dea63aefe78ee91c8f7ab65d19c9fea7b72586a893276b5ad5e40ecab1f2f539a5892b18de9779ac4de7e76839bcbb24c36acdaa29959c77756bcbe8223154e24caa701fe1fe53e6822bf7f88f35bb8208a12070afea8584c14749839035bd384e9aad8ed70a37b79812679b9fc2a8849dd3cd6a93c1d99df2e85d92a0763e1d44721d539bdb521e9a73a511f68a7078e127656a8dbdc1baeea1855a93725fa1cfc7cdad5cf241009f1caa41ebb4b0497bd03fb6f18d4dcc63c7b59fffefd324595d70998ddff95219c5a10c775245bf8b034f1cf8fb5ab7bc064e809b906b8135cd03eaa9bc37cf608e06bf651834c37fdcb4075352b659ede2843f37472f88e0003090e964eee54f4bee958d66c9d1294fac6d378ba81d4ede78343f1a5770b850638fa19af755417c93a5cb0b874d75504ef61c0bd167b2e27c2c2e88732a12c691a15ca2083ca9eeda319db7b5d5b19fa7772640a448b218f119f74e91386bca71f0a5a9bd96d303ed88b88d299efa58bf375f75f06177a2a0e2538f4834e862d23d2dd70aafca4027c68684df7f0c549577998803e2252b27f9590160e42c4a3bd949b2b5372735d147c7b18e4c6a23b8dc0bc0277c2586e0caae226fb32cc9d37140eeb23ffedaefd92d274fa59c86bfeac20baec67c7d8a2281f87effddc65a4d8574eee8ce5a25aa4caf01d68ea5534f8be276914c9a90856825913f0bd779679890aff70ea1b502e0868e7bf940322092df75a20a276c3f6627670894d0fd6059b134954692df529b5b42c595a0df49cd1458140d491c0c2cf51695b3f12071c27d6cce9933a57aeae975cbfafc542cf53df9f3d9c289abd56dad948bfc7f9ef61f5d23b368761ad3e5f6585df26305180104937ae1ce9f8bbdc6df2815719dded9124e496f0aeaaf0eb41b9fa61d0bc2ba5e701b963849f7eb671c297c747775ed6e861e1d13b72f048369854cbadbb3df37867e70c9718d74f9dcd717b28fd63377cf8e8d12709d46a70d86fa3477432a7cb5184c7d805f5b448427a9ea5bc6241a494a119f80ad027150173330e80b572fdd9a43a4b91c9c40c1ae4c42b041cce315bde6dc7c4a286f1d0f4b9e6ae4e65d13beb441a4e2b3aad7d979e9bff09c219f67bb33e381abe6f20be3fdf65ba478f09b85137ae306ec8892a99b88f604e3c89203f8711451c88662780883d488d74ab12d72dcb20a7265dc3b8d3d91d423494fb8681712af3ec6d42859a72a9e2cac023baca5253b66aea8c18214a01f6646101e8789ab02fb3c2f670b8d99a030d530b58b39731228d6d2215769addaf6f86ef", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) (async) pwritev2(r0, &(0x7f0000002540)=[{&(0x7f0000000100)="bb3bc08302c227cbc6a41c4ea3725c78d28503e131b534b551417a3626b8220922c9eec31efd5d20971064ccc701bb70c6d3536696", 0x35}, {&(0x7f0000000240)="57f0ab231030cf212c489666190883c9bd2e4351c178f9ddf91c8f18616c8aaed19c6e3bfd347b2d6455217aa2313c76ce3fff0dc67fa5a07860fdd695c11392ff84feebc0442e87c397d536b099d54ac25e054ab347638be5c917e3d90554acaa647fe999bfd387843db905ad95065db86ea70923e5a9368f772b03a6ec223be5c188f09c4713fb03cc12220c1fb18d0025f90bd133f8a2d8c3a0221faf77", 0x9f}, {&(0x7f0000000480)="436218d93c692f2188e263919111027a0a1f0bdc15e8d757ec4e2e01d4b3b5dc697b2d353ac02fe8d1b0a58d658566fb604a24ff79a5aefa75337cc5e9ce0eea5b49c792df45ad367a4fecb36ee2833d3a86b4985202dde4541b921411799764c1957f715b57f0d67b4f523b70a56a8383799ac5dc00cb6e1b6440dd529438d2ca63d2945dcdde4aa878", 0x8a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000000380)="1bdb128abd0f39ab81a3610af1f271b05b03cff24074d608571761a8a6c0981fea713e435964f11f5d694ff623f6f760fd57b9f606927524e4dca46f5300304053eda40d8bd2173d3ca163f74720ae8920de69d9a431c8a9ac08e57037b8b6c7", 0x60}], 0x6, 0x2, 0x8, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 748.509214][T20143] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 748.783023][T20151] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:35:20 executing program 3: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0xedc0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:20 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x4200, 0xbb) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065defa88fbd147e469722300000000"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8c810, &(0x7f0000000280)={[{@metacopy_on}, {@metacopy_on}, {@xino_off}, {@index_off}, {@metacopy_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!*-^{[#(/'}}]}) unlink(&(0x7f0000000040)='./bus\x00') mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000140)={[{@metacopy_off}, {@metacopy_off}], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x4200, 0xbb) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065defa88fbd147e469722300000000"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8c810, &(0x7f0000000280)={[{@metacopy_on}, {@metacopy_on}, {@xino_off}, {@index_off}, {@metacopy_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!*-^{[#(/'}}]}) (async) unlink(&(0x7f0000000040)='./bus\x00') (async) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000140)={[{@metacopy_off}, {@metacopy_off}], [], 0x5c}) (async) 20:35:20 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:20 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0000002}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="000000002e2f83939fd1577766696c65312c007dced08e16477bfd2b7d6fe71e838c795af1f4ec155b762861b4a0009c64c3ea86c3eecca10b690f148d51adfd5f8accfac728ac84d50b2f7e95e3cca8b18177aff7a4bfc6ab68ba760a62ae45e8264173fbed38905c2901ffc46c49771883e9a3e2b13170e085fd59fbe5cbc3e96ede8a49f797a256bb"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73796e632c003733ee18e480077f10c5f780b5f38f833739f2c1aa48ec198af3d5fd8de0af67eda18d6306612e8ee23d3265e5ca7a7dec0baf891ac33af424d151b6ff9aa154df989152a0af0fc089af1970c55718a04f0fc490b853fc5763c09a7241deb1814ee5e7d2a1e74c3e11b458d7"]) 20:35:20 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdec, 0x5) 20:35:20 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdb9, 0x5) 20:35:20 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0000002}) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0000002}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="000000002e2f83939fd1577766696c65312c007dced08e16477bfd2b7d6fe71e838c795af1f4ec155b762861b4a0009c64c3ea86c3eecca10b690f148d51adfd5f8accfac728ac84d50b2f7e95e3cca8b18177aff7a4bfc6ab68ba760a62ae45e8264173fbed38905c2901ffc46c49771883e9a3e2b13170e085fd59fbe5cbc3e96ede8a49f797a256bb"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73796e632c003733ee18e480077f10c5f780b5f38f833739f2c1aa48ec198af3d5fd8de0af67eda18d6306612e8ee23d3265e5ca7a7dec0baf891ac33af424d151b6ff9aa154df989152a0af0fc089af1970c55718a04f0fc490b853fc5763c09a7241deb1814ee5e7d2a1e74c3e11b458d7"]) 20:35:20 executing program 3: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xc9b, 0x5) [ 749.113851][T20161] overlayfs: missing 'lowerdir' [ 749.119713][T20159] overlay: Unknown parameter 'uppeÞúˆûÑGäir#' [ 749.131649][T20162] loop1: detected capacity change from 0 to 65 [ 749.186032][T20162] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:20 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 749.229952][T20168] overlay: Unknown parameter 'uppeÞúˆûÑGäir#' 20:35:20 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x4200, 0xbb) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065defa88fbd147e469722300000000"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000240), 0x8c810, &(0x7f0000000280)={[{@metacopy_on}, {@metacopy_on}, {@xino_off}, {@index_off}, {@metacopy_on}], [{@smackfsfloor={'smackfsfloor', 0x3d, '!*-^{[#(/'}}]}) (async) unlink(&(0x7f0000000040)='./bus\x00') (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x10000, &(0x7f0000000140)={[{@metacopy_off}, {@metacopy_off}], [], 0x5c}) (rerun: 32) [ 749.320875][T20177] loop1: detected capacity change from 0 to 65 [ 749.332392][T20177] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 749.353989][T20173] overlayfs: missing 'lowerdir' 20:35:20 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:20 executing program 5: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0xa0000002}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0x10}) (async, rerun: 32) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000340), 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="000000002e2f83939fd1577766696c65312c007dced08e16477bfd2b7d6fe71e838c795af1f4ec155b762861b4a0009c64c3ea86c3eecca10b690f148d51adfd5f8accfac728ac84d50b2f7e95e3cca8b18177aff7a4bfc6ab68ba760a62ae45e8264173fbed38905c2901ffc46c49771883e9a3e2b13170e085fd59fbe5cbc3e96ede8a49f797a256bb"]) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73796e632c003733ee18e480077f10c5f780b5f38f833739f2c1aa48ec198af3d5fd8de0af67eda18d6306612e8ee23d3265e5ca7a7dec0baf891ac33af424d151b6ff9aa154df989152a0af0fc089af1970c55718a04f0fc490b853fc5763c09a7241deb1814ee5e7d2a1e74c3e11b458d7"]) [ 749.560144][T20183] overlay: Unknown parameter 'uppeÞúˆûÑGäir#' [ 749.561710][T20186] loop1: detected capacity change from 0 to 65 [ 749.588788][T20188] overlayfs: missing 'lowerdir' [ 749.619704][T20186] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 749.633015][T20188] overlayfs: missing 'lowerdir' [ 749.658741][T20188] overlayfs: missing 'lowerdir' [ 749.674014][T20188] overlayfs: missing 'lowerdir' [ 749.686665][T20188] overlayfs: missing 'lowerdir' [ 749.699276][T20188] overlayfs: missing 'lowerdir' [ 749.714579][T20188] overlayfs: missing 'lowerdir' [ 749.723357][T20188] overlayfs: missing 'lowerdir' [ 749.740645][T20188] overlayfs: missing 'lowerdir' [ 749.761145][T20188] overlayfs: missing 'lowerdir' 20:35:21 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 749.774335][T20188] overlayfs: missing 'lowerdir' [ 749.791389][T20188] overlayfs: missing 'lowerdir' [ 749.804279][T20188] overlayfs: missing 'lowerdir' [ 749.817592][T20188] overlayfs: missing 'lowerdir' [ 749.856894][T20188] overlayfs: missing 'lowerdir' [ 749.881753][T20188] overlayfs: missing 'lowerdir' [ 749.889206][T20194] loop1: detected capacity change from 0 to 65 [ 749.905242][T20188] overlayfs: missing 'lowerdir' [ 749.921994][T20188] overlayfs: missing 'lowerdir' [ 749.934822][T20188] overlayfs: missing 'lowerdir' 20:35:21 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe06, 0x5) [ 749.969572][T20188] overlayfs: missing 'lowerdir' 20:35:21 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdbe, 0x5) [ 749.994904][T20188] overlayfs: missing 'lowerdir' [ 750.008526][T20194] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 750.033955][T20188] overlayfs: missing 'lowerdir' [ 750.062096][T20188] overlayfs: missing 'lowerdir' [ 750.087998][T20188] overlayfs: missing 'lowerdir' [ 750.095126][T20188] overlayfs: missing 'lowerdir' [ 750.105200][T20188] overlayfs: missing 'lowerdir' [ 750.123017][T20188] overlayfs: missing 'lowerdir' [ 750.135668][T20188] overlayfs: missing 'lowerdir' [ 750.168352][T20188] overlayfs: missing 'lowerdir' 20:35:21 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 750.194716][T20188] overlayfs: missing 'lowerdir' [ 750.219052][T20188] overlayfs: missing 'lowerdir' [ 750.240651][T20188] overlayfs: missing 'lowerdir' [ 750.254388][T20188] overlayfs: missing 'lowerdir' 20:35:21 executing program 3: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:21 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:21 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000000)='./bus\x00') [ 750.333078][T20206] loop1: detected capacity change from 0 to 65 [ 750.413038][T20206] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 750.451634][T20210] loop3: detected capacity change from 0 to 65 [ 750.475108][T20210] BFS-fs: bfs_fill_super(): Last block not available on loop3: 311431 20:35:22 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 750.562204][T20213] overlayfs: missing 'lowerdir' 20:35:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 1) 20:35:22 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:35:22 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[]) (rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) chdir(&(0x7f0000000000)='./bus\x00') [ 750.676520][T20216] loop1: detected capacity change from 0 to 65 [ 750.699543][T20216] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 2) 20:35:22 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 750.814858][T20223] overlayfs: missing 'lowerdir' [ 750.902046][T20226] FAULT_INJECTION: forcing a failure. [ 750.902046][T20226] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:35:22 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe0e, 0x5) [ 750.942827][T20228] loop1: detected capacity change from 0 to 65 [ 750.957738][T20226] CPU: 1 PID: 20226 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 750.968340][T20226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 750.978406][T20226] Call Trace: [ 750.981684][T20226] [ 750.984613][T20226] dump_stack_lvl+0x1e7/0x2d0 [ 750.989304][T20226] ? nf_tcp_handle_invalid+0x650/0x650 [ 750.994775][T20226] ? panic+0x850/0x850 [ 750.998843][T20226] ? __lock_acquire+0x1fd0/0x1fd0 [ 751.003877][T20226] should_fail_ex+0x3aa/0x4e0 [ 751.008644][T20226] _copy_from_user+0x2f/0xe0 [ 751.013316][T20226] memdup_user+0x64/0xc0 [ 751.017581][T20226] strndup_user+0x68/0xc0 [ 751.021946][T20226] __se_sys_mount+0x9f/0x3c0 [ 751.026550][T20226] ? print_irqtrace_events+0x220/0x220 [ 751.032014][T20226] ? __x64_sys_mount+0xc0/0xc0 [ 751.036776][T20226] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 751.042762][T20226] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 751.048742][T20226] ? __x64_sys_mount+0x20/0xc0 [ 751.053503][T20226] do_syscall_64+0x45/0x110 [ 751.058011][T20226] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 751.064004][T20226] RIP: 0033:0x7f7bf527cce9 [ 751.068504][T20226] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 751.088206][T20226] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.096802][T20226] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 751.104875][T20226] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 751.112853][T20226] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 751.120824][T20226] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 751.128901][T20226] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 751.136882][T20226] [ 751.193730][T20228] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:22 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdbf, 0x5) 20:35:22 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:22 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) chdir(&(0x7f0000000000)='./bus\x00') 20:35:22 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 3) 20:35:22 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 751.339548][T20241] overlayfs: missing 'lowerdir' 20:35:22 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='ufs\x00', 0x2000, &(0x7f00000001c0)='workdir') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 751.437750][T20246] loop1: detected capacity change from 0 to 65 20:35:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 4) [ 751.478892][T20246] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 751.479106][T20250] overlayfs: failed to resolve './file1': -2 20:35:23 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:23 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 751.683865][T20258] FAULT_INJECTION: forcing a failure. [ 751.683865][T20258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.703697][T20259] overlayfs: failed to resolve './file1': -2 20:35:23 executing program 4: mkdir(&(0x7f0000000400)='./file0\x00', 0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 751.734012][T20262] loop1: detected capacity change from 0 to 65 [ 751.778343][T20262] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 751.858783][T20258] CPU: 0 PID: 20258 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 751.869266][T20258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 751.879324][T20258] Call Trace: [ 751.882603][T20258] [ 751.885530][T20258] dump_stack_lvl+0x1e7/0x2d0 [ 751.890219][T20258] ? nf_tcp_handle_invalid+0x650/0x650 [ 751.895771][T20258] ? panic+0x850/0x850 [ 751.899851][T20258] ? __lock_acquire+0x1fd0/0x1fd0 [ 751.904880][T20258] should_fail_ex+0x3aa/0x4e0 [ 751.909564][T20258] _copy_from_user+0x2f/0xe0 [ 751.914188][T20258] memdup_user+0x64/0xc0 [ 751.918436][T20258] strndup_user+0x68/0xc0 [ 751.922789][T20258] __se_sys_mount+0xe2/0x3c0 [ 751.927464][T20258] ? print_irqtrace_events+0x220/0x220 [ 751.932922][T20258] ? __x64_sys_mount+0xc0/0xc0 [ 751.937774][T20258] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 751.943846][T20258] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 751.949832][T20258] ? __x64_sys_mount+0x20/0xc0 [ 751.954605][T20258] do_syscall_64+0x45/0x110 [ 751.959110][T20258] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 751.965006][T20258] RIP: 0033:0x7f7bf527cce9 [ 751.969509][T20258] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 751.989376][T20258] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 751.997792][T20258] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 752.005763][T20258] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 752.013822][T20258] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 752.021791][T20258] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 752.029847][T20258] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 752.037841][T20258] [ 752.070451][T20265] overlayfs: failed to resolve './file1': -2 20:35:23 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe16, 0x5) 20:35:23 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xdec, 0x5) 20:35:23 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='ufs\x00', 0x2000, &(0x7f00000001c0)='workdir') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:23 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 5) 20:35:23 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x210000, 0x20) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[{@xino_auto}], [], 0x5c}) [ 752.345802][T20275] overlayfs: failed to resolve './file0': -2 [ 752.371373][T20277] loop1: detected capacity change from 0 to 65 20:35:23 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x210000, 0x20) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[{@xino_auto}], [], 0x5c}) [ 752.395367][T20275] overlay: filesystem on ./bus not supported as upperdir [ 752.419712][T20277] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 752.431422][T20281] FAULT_INJECTION: forcing a failure. [ 752.431422][T20281] name failslab, interval 1, probability 0, space 0, times 0 [ 752.455035][T20281] CPU: 0 PID: 20281 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 752.465515][T20281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 752.475598][T20281] Call Trace: [ 752.478905][T20281] [ 752.481865][T20281] dump_stack_lvl+0x1e7/0x2d0 [ 752.486680][T20281] ? nf_tcp_handle_invalid+0x650/0x650 [ 752.492183][T20281] ? panic+0x850/0x850 [ 752.496293][T20281] ? __might_sleep+0xe0/0xe0 [ 752.500927][T20281] should_fail_ex+0x3aa/0x4e0 [ 752.505653][T20281] ? getname_flags+0xbc/0x4f0 [ 752.510377][T20281] should_failslab+0x9/0x20 [ 752.514919][T20281] kmem_cache_alloc+0x6d/0x2b0 [ 752.519729][T20281] getname_flags+0xbc/0x4f0 [ 752.524285][T20281] user_path_at_empty+0x2c/0x60 [ 752.529273][T20281] __se_sys_mount+0x29a/0x3c0 [ 752.533994][T20281] ? __x64_sys_mount+0xc0/0xc0 [ 752.539069][T20281] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 752.545057][T20281] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 752.551061][T20281] ? __x64_sys_mount+0x20/0xc0 [ 752.555844][T20281] do_syscall_64+0x45/0x110 [ 752.560361][T20281] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 752.566272][T20281] RIP: 0033:0x7f7bf527cce9 [ 752.570713][T20281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 752.590515][T20281] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 752.598938][T20281] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 752.606904][T20281] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 752.614882][T20281] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 752.622860][T20281] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 752.630829][T20281] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 752.638815][T20281] 20:35:24 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='ufs\x00', 0x2000, &(0x7f00000001c0)='workdir') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000140)='ufs\x00', 0x2000, &(0x7f00000001c0)='workdir') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:35:24 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x3}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 752.783524][T20288] overlayfs: failed to resolve './file0': -2 20:35:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 6) 20:35:24 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x4}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 752.824282][T20290] loop1: detected capacity change from 0 to 65 [ 752.844033][T20290] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 752.960649][T20294] loop1: detected capacity change from 0 to 65 20:35:24 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x210000, 0x20) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[{@xino_auto}], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x210000, 0x20) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[{@xino_auto}], [], 0x5c}) (async) [ 753.043772][T20294] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 753.084954][T20296] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 753.140004][T20298] FAULT_INJECTION: forcing a failure. [ 753.140004][T20298] name fail_usercopy, interval 1, probability 0, space 0, times 0 20:35:24 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe1b, 0x5) [ 753.236896][T20298] CPU: 0 PID: 20298 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 753.247417][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 753.257509][T20298] Call Trace: [ 753.260808][T20298] [ 753.263767][T20298] dump_stack_lvl+0x1e7/0x2d0 [ 753.268480][T20298] ? nf_tcp_handle_invalid+0x650/0x650 [ 753.273964][T20298] ? panic+0x850/0x850 [ 753.278148][T20298] should_fail_ex+0x3aa/0x4e0 [ 753.282940][T20298] strncpy_from_user+0x36/0x2e0 [ 753.287921][T20298] getname_flags+0xf9/0x4f0 [ 753.292464][T20298] user_path_at_empty+0x2c/0x60 [ 753.297340][T20298] __se_sys_mount+0x29a/0x3c0 [ 753.302056][T20298] ? __x64_sys_mount+0xc0/0xc0 [ 753.306851][T20298] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 753.312920][T20298] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 753.318922][T20298] ? __x64_sys_mount+0x20/0xc0 [ 753.323799][T20298] do_syscall_64+0x45/0x110 [ 753.328339][T20298] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 753.334279][T20298] RIP: 0033:0x7f7bf527cce9 [ 753.338722][T20298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 753.358358][T20298] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 753.366823][T20298] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 753.374923][T20298] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 753.382935][T20298] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 753.390944][T20298] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 753.399038][T20298] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 753.407064][T20298] 20:35:24 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe06, 0x5) 20:35:24 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x5}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:24 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="73796e632c04"]) chdir(&(0x7f0000000040)='./bus/file0\x00') 20:35:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 7) [ 753.532019][T20302] overlay: filesystem on ./bus not supported as upperdir [ 753.578406][T20307] loop1: detected capacity change from 0 to 65 [ 753.595669][T20309] overlayfs: failed to resolve './file1': -2 20:35:25 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x320001, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) linkat(r0, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x400) unlink(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x80) [ 753.636757][T20307] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 753.671981][T20313] FAULT_INJECTION: forcing a failure. [ 753.671981][T20313] name failslab, interval 1, probability 0, space 0, times 0 [ 753.726118][T20313] CPU: 1 PID: 20313 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 753.736710][T20313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 753.746890][T20313] Call Trace: [ 753.750213][T20313] [ 753.753183][T20313] dump_stack_lvl+0x1e7/0x2d0 [ 753.757904][T20313] ? nf_tcp_handle_invalid+0x650/0x650 [ 753.763401][T20313] ? panic+0x850/0x850 [ 753.767597][T20313] ? __might_sleep+0xe0/0xe0 [ 753.772247][T20313] should_fail_ex+0x3aa/0x4e0 [ 753.776970][T20313] ? tomoyo_encode+0x26f/0x530 [ 753.781767][T20313] should_failslab+0x9/0x20 [ 753.786474][T20313] __kmem_cache_alloc_node+0x6d/0x300 [ 753.792028][T20313] ? arch_stack_walk+0x162/0x1a0 [ 753.796994][T20313] ? tomoyo_encode+0x26f/0x530 [ 753.801943][T20313] __kmalloc+0xa2/0x1a0 [ 753.806105][T20313] tomoyo_encode+0x26f/0x530 [ 753.810699][T20313] tomoyo_mount_permission+0x356/0xb80 [ 753.816160][T20313] ? __stack_depot_save+0x20/0x650 [ 753.821270][T20313] ? tomoyo_mount_permission+0x295/0xb80 [ 753.826904][T20313] ? tomoyo_get_name+0x510/0x510 [ 753.831869][T20313] ? hook_sb_mount+0x128/0x3c0 [ 753.836723][T20313] security_sb_mount+0x8c/0xc0 [ 753.841492][T20313] path_mount+0xb9/0xfa0 [ 753.845730][T20313] ? kmem_cache_free+0x299/0x470 [ 753.850691][T20313] __se_sys_mount+0x2d9/0x3c0 [ 753.855405][T20313] ? __x64_sys_mount+0xc0/0xc0 [ 753.860231][T20313] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 753.866223][T20313] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 753.872246][T20313] ? __x64_sys_mount+0x20/0xc0 [ 753.877127][T20313] do_syscall_64+0x45/0x110 [ 753.881743][T20313] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 753.887653][T20313] RIP: 0033:0x7f7bf527cce9 [ 753.892161][T20313] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 753.911946][T20313] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 753.920359][T20313] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 753.928504][T20313] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 753.936556][T20313] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 753.944580][T20313] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 753.952586][T20313] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 753.960587][T20313] 20:35:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 8) 20:35:25 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x6}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:25 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="73796e632c04"]) (async) chdir(&(0x7f0000000040)='./bus/file0\x00') [ 754.186965][T20318] FAULT_INJECTION: forcing a failure. [ 754.186965][T20318] name failslab, interval 1, probability 0, space 0, times 0 [ 754.210992][T20320] loop1: detected capacity change from 0 to 65 20:35:25 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x320001, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) linkat(r0, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x400) unlink(&(0x7f0000000140)='./bus\x00') open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x80) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x320001, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) (async) linkat(r0, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x400) (async) unlink(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x80) (async) [ 754.233269][T20318] CPU: 0 PID: 20318 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 754.243754][T20318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 754.253936][T20318] Call Trace: [ 754.257248][T20318] [ 754.260233][T20318] dump_stack_lvl+0x1e7/0x2d0 [ 754.264953][T20318] ? nf_tcp_handle_invalid+0x650/0x650 [ 754.270455][T20318] ? panic+0x850/0x850 [ 754.274661][T20318] should_fail_ex+0x3aa/0x4e0 [ 754.279039][T20324] overlayfs: failed to resolve './file0': -2 [ 754.279363][T20318] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 754.279393][T20318] should_failslab+0x9/0x20 [ 754.295642][T20318] __kmem_cache_alloc_node+0x6d/0x300 [ 754.301059][T20318] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 754.306820][T20318] __kmalloc+0xa2/0x1a0 [ 754.311011][T20318] ? rcu_is_watching+0x15/0xb0 [ 754.315811][T20318] tomoyo_realpath_from_path+0xcf/0x5e0 [ 754.321418][T20318] tomoyo_mount_permission+0x3bc/0xb80 [ 754.326926][T20318] ? tomoyo_mount_permission+0x295/0xb80 [ 754.327759][T20320] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 754.332610][T20318] ? tomoyo_get_name+0x510/0x510 [ 754.332680][T20318] ? hook_sb_mount+0x128/0x3c0 [ 754.350549][T20318] security_sb_mount+0x8c/0xc0 [ 754.355351][T20318] path_mount+0xb9/0xfa0 [ 754.359631][T20318] ? kmem_cache_free+0x299/0x470 [ 754.364625][T20318] __se_sys_mount+0x2d9/0x3c0 [ 754.369340][T20318] ? __x64_sys_mount+0xc0/0xc0 [ 754.374140][T20318] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 754.380162][T20318] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 754.386175][T20318] ? __x64_sys_mount+0x20/0xc0 [ 754.390982][T20318] do_syscall_64+0x45/0x110 [ 754.395523][T20318] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 754.401449][T20318] RIP: 0033:0x7f7bf527cce9 [ 754.405866][T20318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 754.425475][T20318] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 20:35:25 executing program 5: mkdir(&(0x7f0000000180)='./bus\x00', 0x0) rename(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140)='./file0\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="73796e632c04"]) (async, rerun: 64) chdir(&(0x7f0000000040)='./bus/file0\x00') (rerun: 64) [ 754.433888][T20318] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 754.442141][T20318] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 754.450129][T20318] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 754.458194][T20318] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000001 [ 754.466276][T20318] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 754.474723][T20318] 20:35:26 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0xf}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:26 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe1c, 0x5) 20:35:26 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe0e, 0x5) 20:35:26 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x320001, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@default_permissions}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) linkat(r0, &(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x400) (async) unlink(&(0x7f0000000140)='./bus\x00') (async) open(&(0x7f00000001c0)='./bus\x00', 0x0, 0x80) 20:35:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 9) [ 754.572296][T20335] loop1: detected capacity change from 0 to 65 [ 754.579320][T20318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.603815][T20335] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:26 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80000, 0x64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:26 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x22}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 754.777746][T20347] syz-executor.3: attempt to access beyond end of device [ 754.777746][T20347] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 754.785692][T20350] overlayfs: failed to resolve './file0': -2 [ 754.809334][T20347] VFS: could not find a valid V7 on loop3. 20:35:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 10) [ 754.844881][T20350] overlayfs: failed to resolve './file1': -2 [ 754.854495][T20350] overlayfs: failed to resolve './file1': -2 [ 754.866782][T20354] loop1: detected capacity change from 0 to 65 [ 754.891886][T20350] overlayfs: failed to resolve './file1': -2 [ 754.922078][T20350] overlayfs: failed to resolve './file1': -2 [ 754.929843][T20350] overlayfs: failed to resolve './file1': -2 [ 754.940457][T20357] FAULT_INJECTION: forcing a failure. [ 754.940457][T20357] name failslab, interval 1, probability 0, space 0, times 0 [ 754.952890][T20354] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 754.964141][T20357] CPU: 0 PID: 20357 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 754.974706][T20357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 754.977656][T20350] overlayfs: failed to resolve './file1': -2 [ 754.984767][T20357] Call Trace: [ 754.994076][T20357] [ 754.997037][T20357] dump_stack_lvl+0x1e7/0x2d0 [ 755.001788][T20357] ? nf_tcp_handle_invalid+0x650/0x650 [ 755.007314][T20357] ? panic+0x850/0x850 [ 755.011475][T20357] ? __might_sleep+0xe0/0xe0 [ 755.016134][T20357] should_fail_ex+0x3aa/0x4e0 [ 755.020861][T20357] ? getname_kernel+0x59/0x2e0 [ 755.025662][T20357] should_failslab+0x9/0x20 [ 755.030193][T20357] kmem_cache_alloc+0x6d/0x2b0 [ 755.034997][T20357] getname_kernel+0x59/0x2e0 [ 755.039637][T20357] kern_path+0x1d/0x50 [ 755.043735][T20357] tomoyo_mount_permission+0x8db/0xb80 [ 755.049235][T20357] ? tomoyo_mount_permission+0x295/0xb80 [ 755.054905][T20357] ? tomoyo_get_name+0x510/0x510 [ 755.059927][T20357] ? hook_sb_mount+0x128/0x3c0 [ 755.064740][T20357] security_sb_mount+0x8c/0xc0 [ 755.069628][T20357] path_mount+0xb9/0xfa0 [ 755.073903][T20357] ? kmem_cache_free+0x299/0x470 [ 755.078892][T20357] __se_sys_mount+0x2d9/0x3c0 [ 755.083620][T20357] ? __x64_sys_mount+0xc0/0xc0 [ 755.088460][T20357] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 755.094479][T20357] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 755.100506][T20357] ? __x64_sys_mount+0x20/0xc0 [ 755.105309][T20357] do_syscall_64+0x45/0x110 [ 755.109845][T20357] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 755.115763][T20357] RIP: 0033:0x7f7bf527cce9 [ 755.120176][T20357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 755.139797][T20357] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.148246][T20357] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 755.156249][T20357] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 755.164252][T20357] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 755.172339][T20357] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 755.180339][T20357] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 755.188365][T20357] [ 755.194236][T20350] overlayfs: failed to resolve './file1': -2 [ 755.208577][T20350] overlayfs: failed to resolve './file1': -2 20:35:26 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x41}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 11) [ 755.227191][T17924] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 755.240225][T17924] Buffer I/O error on dev loop1, logical block 2, async page read [ 755.249723][T20350] overlayfs: failed to resolve './file1': -2 20:35:26 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80000, 0x64) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 755.288012][T17924] udevd: attempt to access beyond end of device [ 755.288012][T17924] loop1: rw=0, sector=3, nr_sectors = 1 limit=0 [ 755.288790][T20350] overlayfs: failed to resolve './file1': -2 [ 755.345047][T17924] Buffer I/O error on dev loop1, logical block 3, async page read [ 755.353089][T20361] loop1: detected capacity change from 0 to 65 [ 755.355155][T20361] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 755.371659][T20350] overlayfs: failed to resolve './file1': -2 [ 755.395204][T20360] FAULT_INJECTION: forcing a failure. [ 755.395204][T20360] name failslab, interval 1, probability 0, space 0, times 0 [ 755.409714][T20350] overlayfs: failed to resolve './file1': -2 [ 755.419523][T20360] CPU: 0 PID: 20360 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 755.429987][T20360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 755.440135][T20360] Call Trace: [ 755.443411][T20360] [ 755.446340][T20360] dump_stack_lvl+0x1e7/0x2d0 [ 755.451053][T20360] ? nf_tcp_handle_invalid+0x650/0x650 [ 755.456511][T20360] ? panic+0x850/0x850 [ 755.460843][T20360] should_fail_ex+0x3aa/0x4e0 [ 755.465543][T20360] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 755.471531][T20360] should_failslab+0x9/0x20 [ 755.476177][T20360] __kmem_cache_alloc_node+0x6d/0x300 [ 755.481581][T20360] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 755.487321][T20360] __kmalloc+0xa2/0x1a0 [ 755.491478][T20360] ? rcu_is_watching+0x15/0xb0 [ 755.496244][T20360] tomoyo_realpath_from_path+0xcf/0x5e0 [ 755.501839][T20360] tomoyo_mount_permission+0xa5d/0xb80 [ 755.507310][T20360] ? tomoyo_mount_permission+0x295/0xb80 [ 755.512964][T20360] ? tomoyo_get_name+0x510/0x510 [ 755.517941][T20360] ? hook_sb_mount+0x128/0x3c0 [ 755.522707][T20360] security_sb_mount+0x8c/0xc0 [ 755.527475][T20360] path_mount+0xb9/0xfa0 [ 755.531715][T20360] ? kmem_cache_free+0x299/0x470 [ 755.536703][T20360] __se_sys_mount+0x2d9/0x3c0 [ 755.541379][T20360] ? __x64_sys_mount+0xc0/0xc0 [ 755.546262][T20360] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 755.552267][T20360] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 755.558251][T20360] ? __x64_sys_mount+0x20/0xc0 [ 755.563023][T20360] do_syscall_64+0x45/0x110 [ 755.567528][T20360] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 755.573430][T20360] RIP: 0033:0x7f7bf527cce9 [ 755.577931][T20360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 755.597731][T20360] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 755.606153][T20360] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 755.614153][T20360] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 755.622134][T20360] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 755.630101][T20360] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 755.638071][T20360] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 755.646109][T20360] [ 755.685215][T20350] overlayfs: failed to resolve './file1': -2 20:35:27 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0xffffffffffffffff, 0x208001, 0x389f5716da9ecbca) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0lupperdir=./File1,\x00']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:27 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x82}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:27 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe16, 0x5) 20:35:27 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe49, 0x5) 20:35:27 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80000, 0x64) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x80000, 0x64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 755.815134][T20360] ERROR: Out of memory at tomoyo_realpath_from_path. 20:35:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 12) [ 755.905335][T20371] loop1: detected capacity change from 0 to 65 [ 755.938107][T20371] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:27 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}], [], 0x89}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 756.032276][T20378] FAULT_INJECTION: forcing a failure. [ 756.032276][T20378] name failslab, interval 1, probability 0, space 0, times 0 [ 756.070040][T20380] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.101892][T20378] CPU: 1 PID: 20378 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 756.112378][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 756.122552][T20378] Call Trace: [ 756.125877][T20378] [ 756.128836][T20378] dump_stack_lvl+0x1e7/0x2d0 [ 756.133559][T20378] ? nf_tcp_handle_invalid+0x650/0x650 [ 756.139065][T20378] ? panic+0x850/0x850 [ 756.143187][T20378] ? __might_sleep+0xe0/0xe0 [ 756.147853][T20378] ? prepend_path+0xa10/0xbe0 [ 756.152578][T20378] should_fail_ex+0x3aa/0x4e0 [ 756.157304][T20378] ? tomoyo_encode+0x26f/0x530 [ 756.162100][T20378] should_failslab+0x9/0x20 [ 756.166671][T20378] __kmem_cache_alloc_node+0x6d/0x300 [ 756.172083][T20378] ? d_absolute_path+0x1c6/0x300 [ 756.177067][T20378] ? tomoyo_encode+0x26f/0x530 [ 756.181884][T20378] __kmalloc+0xa2/0x1a0 [ 756.186086][T20378] tomoyo_encode+0x26f/0x530 [ 756.190735][T20378] tomoyo_realpath_from_path+0x598/0x5e0 [ 756.196429][T20378] tomoyo_mount_permission+0xa5d/0xb80 [ 756.201940][T20378] ? tomoyo_mount_permission+0x295/0xb80 [ 756.203207][T20385] loop1: detected capacity change from 0 to 65 [ 756.207599][T20378] ? tomoyo_get_name+0x510/0x510 [ 756.207677][T20378] ? hook_sb_mount+0x128/0x3c0 [ 756.207708][T20378] security_sb_mount+0x8c/0xc0 [ 756.207733][T20378] path_mount+0xb9/0xfa0 [ 756.207751][T20378] ? kmem_cache_free+0x299/0x470 [ 756.207784][T20378] __se_sys_mount+0x2d9/0x3c0 [ 756.207808][T20378] ? __x64_sys_mount+0xc0/0xc0 [ 756.207828][T20378] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 756.207853][T20378] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 756.207869][T20378] ? __x64_sys_mount+0x20/0xc0 [ 756.207892][T20378] do_syscall_64+0x45/0x110 [ 756.207918][T20378] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 756.207943][T20378] RIP: 0033:0x7f7bf527cce9 [ 756.207962][T20378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 20:35:27 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(0xffffffffffffffff, 0x208001, 0x389f5716da9ecbca) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0lupperdir=./File1,\x00']) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 756.207979][T20378] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 756.208003][T20378] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 756.208017][T20378] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 756.208031][T20378] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 756.208044][T20378] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 756.208057][T20378] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 20:35:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 13) [ 756.208085][T20378] [ 756.214785][T20378] ERROR: Out of memory at tomoyo_realpath_from_path. 20:35:27 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}, {@dont_measure}], 0x5c}) [ 756.465975][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.510355][T20385] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:28 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}, {@dont_measure}], 0x5c}) [ 756.553564][T20391] FAULT_INJECTION: forcing a failure. [ 756.553564][T20391] name failslab, interval 1, probability 0, space 0, times 0 [ 756.585468][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 20:35:28 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x2, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 756.613373][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.646963][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.668432][T20391] CPU: 0 PID: 20391 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 756.678909][T20391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 756.688968][T20391] Call Trace: [ 756.692247][T20391] [ 756.695172][T20391] dump_stack_lvl+0x1e7/0x2d0 [ 756.699872][T20391] ? nf_tcp_handle_invalid+0x650/0x650 [ 756.705366][T20391] ? panic+0x850/0x850 [ 756.709451][T20391] should_fail_ex+0x3aa/0x4e0 [ 756.714134][T20391] ? alloc_fs_context+0x63/0x800 [ 756.719074][T20391] should_failslab+0x9/0x20 [ 756.723838][T20391] __kmem_cache_alloc_node+0x6d/0x300 [ 756.729224][T20391] ? alloc_fs_context+0x63/0x800 [ 756.734163][T20391] kmalloc_trace+0x2a/0x60 [ 756.738590][T20391] alloc_fs_context+0x63/0x800 [ 756.743383][T20391] ? do_raw_read_unlock+0x3c/0x80 [ 756.748874][T20391] ? _raw_read_unlock+0x28/0x40 [ 756.753734][T20391] ? get_fs_type+0x3fd/0x470 [ 756.758341][T20391] do_new_mount+0x162/0xae0 [ 756.762849][T20391] ? do_move_mount_old+0x170/0x170 [ 756.767990][T20391] __se_sys_mount+0x2d9/0x3c0 [ 756.772688][T20391] ? __x64_sys_mount+0xc0/0xc0 [ 756.777539][T20391] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 756.783521][T20391] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 756.789499][T20391] ? __x64_sys_mount+0x20/0xc0 [ 756.794268][T20391] do_syscall_64+0x45/0x110 [ 756.798773][T20391] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 756.804670][T20391] RIP: 0033:0x7f7bf527cce9 [ 756.809171][T20391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 756.828791][T20391] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 756.837299][T20391] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 756.845264][T20391] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 756.853240][T20391] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 756.861210][T20391] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 756.869290][T20391] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 756.877270][T20391] [ 756.903818][T20396] overlay: filesystem on ./bus not supported as upperdir [ 756.938957][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.947397][T20396] overlay: filesystem on ./bus not supported as upperdir [ 756.955265][T20396] overlay: filesystem on ./bus not supported as upperdir [ 756.963338][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 756.977157][T20396] overlay: filesystem on ./bus not supported as upperdir 20:35:28 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe1b, 0x5) 20:35:28 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe5f, 0x5) [ 756.993836][T20400] loop1: detected capacity change from 0 to 65 [ 757.022350][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.038765][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.039913][T20400] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 757.062056][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 20:35:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 14) [ 757.088109][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.099820][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.136627][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.152634][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 20:35:28 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x4, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 757.186760][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.214580][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.246130][T20389] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.254119][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.278473][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.279628][T20406] FAULT_INJECTION: forcing a failure. [ 757.279628][T20406] name failslab, interval 1, probability 0, space 0, times 0 [ 757.303066][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.322127][T20406] CPU: 0 PID: 20406 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 757.332587][T20406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 757.342715][T20406] Call Trace: [ 757.346029][T20406] [ 757.348996][T20406] dump_stack_lvl+0x1e7/0x2d0 [ 757.353725][T20406] ? nf_tcp_handle_invalid+0x650/0x650 [ 757.359235][T20406] ? panic+0x850/0x850 [ 757.363346][T20406] should_fail_ex+0x3aa/0x4e0 [ 757.368069][T20406] ? alloc_fs_context+0x63/0x800 [ 757.373048][T20406] should_failslab+0x9/0x20 [ 757.377588][T20406] __kmem_cache_alloc_node+0x6d/0x300 [ 757.383014][T20406] ? alloc_fs_context+0x63/0x800 [ 757.387996][T20406] kmalloc_trace+0x2a/0x60 20:35:28 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(0xffffffffffffffff, 0x208001, 0x389f5716da9ecbca) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0lupperdir=./File1,\x00']) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 757.392450][T20406] alloc_fs_context+0x63/0x800 [ 757.397259][T20406] ? do_raw_read_unlock+0x3c/0x80 [ 757.400934][T20414] overlayfs: failed to resolve './file0lupperdir=./File1': -2 [ 757.402307][T20406] ? _raw_read_unlock+0x28/0x40 [ 757.402337][T20406] ? get_fs_type+0x3fd/0x470 [ 757.402367][T20406] do_new_mount+0x162/0xae0 [ 757.424031][T20406] ? do_move_mount_old+0x170/0x170 [ 757.429178][T20406] __se_sys_mount+0x2d9/0x3c0 [ 757.429947][T20410] loop1: detected capacity change from 0 to 65 [ 757.433876][T20406] ? __x64_sys_mount+0xc0/0xc0 [ 757.433908][T20406] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 757.433934][T20406] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 757.433953][T20406] ? __x64_sys_mount+0x20/0xc0 [ 757.433980][T20406] do_syscall_64+0x45/0x110 [ 757.466439][T20406] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 757.472380][T20406] RIP: 0033:0x7f7bf527cce9 [ 757.476817][T20406] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 757.496436][T20406] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 757.504862][T20406] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 757.512920][T20406] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 757.520974][T20406] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 757.528958][T20406] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 757.536944][T20406] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 20:35:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 15) 20:35:29 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lerdir=./file0,upperdir=./file1,\x00']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 757.544929][T20406] [ 757.551215][T20396] overlay: filesystem on ./bus not supported as upperdir [ 757.562310][T20410] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:29 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)={[], [{@context={'context', 0x3d, 'root'}}, {@dont_measure}], 0x5c}) 20:35:29 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x6, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:29 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lerdir=./file0,upperdir=./file1,\x00']) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 757.722577][T20418] loop1: detected capacity change from 0 to 65 [ 757.756759][T20419] overlay: Unknown parameter 'lerdir' [ 757.787885][T20420] FAULT_INJECTION: forcing a failure. [ 757.787885][T20420] name failslab, interval 1, probability 0, space 0, times 0 [ 757.817747][T20418] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 757.847077][T20420] CPU: 1 PID: 20420 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 757.857559][T20420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 757.867651][T20420] Call Trace: [ 757.870965][T20420] [ 757.873931][T20420] dump_stack_lvl+0x1e7/0x2d0 [ 757.878659][T20420] ? nf_tcp_handle_invalid+0x650/0x650 [ 757.884166][T20420] ? panic+0x850/0x850 [ 757.888279][T20420] ? __might_sleep+0xe0/0xe0 [ 757.892930][T20420] should_fail_ex+0x3aa/0x4e0 [ 757.897654][T20420] ? vfs_parse_fs_string+0x11d/0x230 [ 757.902982][T20420] should_failslab+0x9/0x20 [ 757.907525][T20420] __kmem_cache_alloc_node+0x6d/0x300 [ 757.912956][T20420] ? vfs_parse_fs_string+0x11d/0x230 [ 757.914840][T20425] overlay: Unknown parameter 'lerdir' [ 757.918258][T20420] __kmalloc_node_track_caller+0xa0/0x190 [ 757.918291][T20420] kmemdup_nul+0x30/0xa0 [ 757.918318][T20420] vfs_parse_fs_string+0x11d/0x230 [ 757.918344][T20420] ? vfs_parse_fs_param+0x410/0x410 [ 757.918367][T20420] ? alloc_fs_context+0x69c/0x800 [ 757.949103][T20420] ? module_put+0x13a/0x2b0 [ 757.953649][T20420] do_new_mount+0x232/0xae0 [ 757.958193][T20420] ? do_move_mount_old+0x170/0x170 [ 757.963347][T20420] __se_sys_mount+0x2d9/0x3c0 [ 757.968053][T20420] ? __x64_sys_mount+0xc0/0xc0 [ 757.972834][T20420] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 757.978824][T20420] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 757.984805][T20420] ? __x64_sys_mount+0x20/0xc0 [ 757.989569][T20420] do_syscall_64+0x45/0x110 [ 757.994072][T20420] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 758.000022][T20420] RIP: 0033:0x7f7bf527cce9 [ 758.004520][T20420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 758.024159][T20420] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 758.032681][T20420] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 758.040650][T20420] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 758.048638][T20420] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 758.056611][T20420] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 758.064579][T20420] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 758.072567][T20420] 20:35:29 executing program 5: mkdir(&(0x7f0000000400)='./file0\x00', 0x20) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lerdir=./file0,upperdir=./file1,\x00']) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:29 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe67, 0x5) 20:35:29 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe1c, 0x5) 20:35:29 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x41, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 16) 20:35:29 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x14) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@nfs={0x90, 0x24, {0x5, 0x8001, 0x4, 0x80, "d7036b342b8690d160e2fad938c71399c977e3a207e293ead6f549c0dc66e720cca82ca34e2d94871d44312538da24312acd6d12c2351e01419c70ce0428d713537cc7da64343e019313e787a44444c22d3b7dfdd9b8d4fdda70a6197682cbd1fff9835181b1bc619f4b4fffccfd9c0dcb244b02b87a213b1425546bdfda8513"}}, &(0x7f0000000140), 0x1000) [ 758.325710][T20432] loop1: detected capacity change from 0 to 65 [ 758.357494][T20437] FAULT_INJECTION: forcing a failure. [ 758.357494][T20437] name failslab, interval 1, probability 0, space 0, times 0 [ 758.371052][T20437] CPU: 1 PID: 20437 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 758.381684][T20437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 758.391826][T20437] Call Trace: [ 758.395111][T20437] [ 758.398055][T20437] dump_stack_lvl+0x1e7/0x2d0 [ 758.402770][T20437] ? nf_tcp_handle_invalid+0x650/0x650 [ 758.408242][T20437] ? panic+0x850/0x850 [ 758.412326][T20437] ? __might_sleep+0xe0/0xe0 [ 758.416945][T20437] should_fail_ex+0x3aa/0x4e0 [ 758.421666][T20437] ? getname_kernel+0x59/0x2e0 [ 758.426451][T20437] should_failslab+0x9/0x20 [ 758.431062][T20437] kmem_cache_alloc+0x6d/0x2b0 [ 758.435966][T20437] getname_kernel+0x59/0x2e0 [ 758.440570][T20437] kern_path+0x1d/0x50 [ 758.444683][T20437] lookup_bdev+0xc5/0x290 [ 758.449019][T20437] ? blkdev_get_by_path+0x3f0/0x3f0 [ 758.454315][T20437] ? legacy_parse_param+0x3ee/0x8a0 [ 758.459579][T20437] mount_bdev+0xab/0x300 [ 758.463867][T20437] ? v7_mount+0x40/0x40 [ 758.468064][T20437] ? get_tree_bdev+0x5b0/0x5b0 [ 758.472837][T20437] ? vfs_parse_fs_string+0x190/0x230 [ 758.478134][T20437] ? vfs_parse_fs_param+0x410/0x410 [ 758.483367][T20437] ? cap_capable+0x1b4/0x240 [ 758.487979][T20437] legacy_get_tree+0xef/0x190 [ 758.492674][T20437] ? detected_v7+0x3e0/0x3e0 [ 758.497276][T20437] vfs_get_tree+0x8c/0x2a0 [ 758.501696][T20437] do_new_mount+0x28f/0xae0 [ 758.506232][T20437] ? do_move_mount_old+0x170/0x170 [ 758.511353][T20437] __se_sys_mount+0x2d9/0x3c0 [ 758.516037][T20437] ? __x64_sys_mount+0xc0/0xc0 [ 758.520901][T20437] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 758.527147][T20437] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 758.533231][T20437] ? __x64_sys_mount+0x20/0xc0 [ 758.538088][T20437] do_syscall_64+0x45/0x110 [ 758.542596][T20437] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 758.548496][T20437] RIP: 0033:0x7f7bf527cce9 [ 758.552909][T20437] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 758.573003][T20437] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 758.581616][T20437] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 758.589623][T20437] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 758.597632][T20437] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 758.605811][T20437] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 758.613976][T20437] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 758.621967][T20437] 20:35:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 17) 20:35:30 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x42) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1) [ 758.638927][T20432] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:30 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x82, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 758.771496][T20444] FAULT_INJECTION: forcing a failure. [ 758.771496][T20444] name failslab, interval 1, probability 0, space 0, times 0 [ 758.786281][T20444] CPU: 1 PID: 20444 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 758.796760][T20444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 758.806855][T20444] Call Trace: [ 758.810163][T20444] [ 758.813131][T20444] dump_stack_lvl+0x1e7/0x2d0 [ 758.817860][T20444] ? nf_tcp_handle_invalid+0x650/0x650 [ 758.823453][T20444] ? panic+0x850/0x850 [ 758.827571][T20444] ? __might_sleep+0xe0/0xe0 [ 758.832200][T20444] should_fail_ex+0x3aa/0x4e0 [ 758.837106][T20444] ? alloc_super+0x5a/0x8f0 [ 758.841644][T20444] should_failslab+0x9/0x20 [ 758.846193][T20444] __kmem_cache_alloc_node+0x6d/0x300 [ 758.851615][T20444] ? do_raw_spin_lock+0x14e/0x370 [ 758.856700][T20444] ? mount_bdev+0x300/0x300 [ 758.861244][T20444] ? alloc_super+0x5a/0x8f0 [ 758.865783][T20444] kmalloc_trace+0x2a/0x60 [ 758.870254][T20444] alloc_super+0x5a/0x8f0 [ 758.874890][T20444] ? mount_bdev+0x300/0x300 [ 758.879448][T20444] sget+0x1f6/0x4d0 [ 758.883295][T20444] ? test_bdev_super+0xf0/0xf0 [ 758.888188][T20444] mount_bdev+0xef/0x300 [ 758.892471][T20444] ? v7_mount+0x40/0x40 [ 758.896750][T20444] ? get_tree_bdev+0x5b0/0x5b0 [ 758.901544][T20444] ? vfs_parse_fs_string+0x190/0x230 [ 758.906841][T20444] ? vfs_parse_fs_param+0x410/0x410 [ 758.912046][T20444] ? cap_capable+0x1b4/0x240 [ 758.916654][T20444] legacy_get_tree+0xef/0x190 [ 758.921353][T20444] ? detected_v7+0x3e0/0x3e0 [ 758.925960][T20444] vfs_get_tree+0x8c/0x2a0 [ 758.930385][T20444] do_new_mount+0x28f/0xae0 [ 758.934890][T20444] ? do_move_mount_old+0x170/0x170 [ 758.940018][T20444] __se_sys_mount+0x2d9/0x3c0 [ 758.944793][T20444] ? __x64_sys_mount+0xc0/0xc0 [ 758.949556][T20444] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 758.955550][T20444] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 758.961525][T20444] ? __x64_sys_mount+0x20/0xc0 [ 758.966325][T20444] do_syscall_64+0x45/0x110 [ 758.970845][T20444] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 758.976831][T20444] RIP: 0033:0x7f7bf527cce9 [ 758.981251][T20444] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 759.000950][T20444] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 759.009366][T20444] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 759.017340][T20444] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 759.025309][T20444] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 759.033285][T20444] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 759.041256][T20444] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 759.049263][T20444] [ 759.091119][T20450] loop1: detected capacity change from 0 to 65 20:35:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 18) 20:35:30 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe49, 0x5) 20:35:30 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async, rerun: 32) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x14) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@nfs={0x90, 0x24, {0x5, 0x8001, 0x4, 0x80, "d7036b342b8690d160e2fad938c71399c977e3a207e293ead6f549c0dc66e720cca82ca34e2d94871d44312538da24312acd6d12c2351e01419c70ce0428d713537cc7da64343e019313e787a44444c22d3b7dfdd9b8d4fdda70a6197682cbd1fff9835181b1bc619f4b4fffccfd9c0dcb244b02b87a213b1425546bdfda8513"}}, &(0x7f0000000140), 0x1000) 20:35:30 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe6f, 0x5) 20:35:30 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x42) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1) [ 759.199177][T20450] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 759.277439][T20455] FAULT_INJECTION: forcing a failure. [ 759.277439][T20455] name failslab, interval 1, probability 0, space 0, times 0 [ 759.295116][T20455] CPU: 1 PID: 20455 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 759.305589][T20455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 759.315655][T20455] Call Trace: [ 759.318933][T20455] [ 759.321859][T20455] dump_stack_lvl+0x1e7/0x2d0 [ 759.326633][T20455] ? nf_tcp_handle_invalid+0x650/0x650 [ 759.332092][T20455] ? panic+0x850/0x850 [ 759.336594][T20455] ? __might_sleep+0xe0/0xe0 [ 759.341190][T20455] should_fail_ex+0x3aa/0x4e0 [ 759.345877][T20455] ? security_sb_alloc+0x3e/0x120 [ 759.350944][T20455] should_failslab+0x9/0x20 [ 759.355442][T20455] __kmem_cache_alloc_node+0x6d/0x300 [ 759.360862][T20455] ? __down_write_common+0x161/0x200 [ 759.366150][T20455] ? security_sb_alloc+0x3e/0x120 [ 759.371166][T20455] __kmalloc+0xa2/0x1a0 [ 759.375326][T20455] ? __raw_spin_lock_init+0x45/0x100 [ 759.380616][T20455] security_sb_alloc+0x3e/0x120 [ 759.385464][T20455] alloc_super+0x216/0x8f0 [ 759.389880][T20455] ? mount_bdev+0x300/0x300 [ 759.394379][T20455] sget+0x1f6/0x4d0 [ 759.398276][T20455] ? test_bdev_super+0xf0/0xf0 [ 759.403037][T20455] mount_bdev+0xef/0x300 [ 759.407287][T20455] ? v7_mount+0x40/0x40 [ 759.411437][T20455] ? get_tree_bdev+0x5b0/0x5b0 [ 759.416189][T20455] ? vfs_parse_fs_string+0x190/0x230 [ 759.421471][T20455] ? vfs_parse_fs_param+0x410/0x410 [ 759.426663][T20455] ? cap_capable+0x1b4/0x240 [ 759.431254][T20455] legacy_get_tree+0xef/0x190 [ 759.436132][T20455] ? detected_v7+0x3e0/0x3e0 [ 759.440737][T20455] vfs_get_tree+0x8c/0x2a0 [ 759.445247][T20455] do_new_mount+0x28f/0xae0 [ 759.449754][T20455] ? do_move_mount_old+0x170/0x170 [ 759.454914][T20455] __se_sys_mount+0x2d9/0x3c0 [ 759.459590][T20455] ? __x64_sys_mount+0xc0/0xc0 [ 759.464875][T20455] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 759.470861][T20455] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 759.477006][T20455] ? __x64_sys_mount+0x20/0xc0 [ 759.482234][T20455] do_syscall_64+0x45/0x110 [ 759.486771][T20455] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 759.492678][T20455] RIP: 0033:0x7f7bf527cce9 [ 759.497097][T20455] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 759.516894][T20455] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 759.525308][T20455] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 759.533276][T20455] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 759.541415][T20455] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 759.549486][T20455] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 759.557557][T20455] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 759.565570][T20455] 20:35:31 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x89, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") [ 759.635031][T20461] loop1: detected capacity change from 0 to 65 [ 759.656926][T20461] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:31 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1Nw1AUx9G/n5EFlSnoKNiAFRAbsAJyCZ0rEAXJPlklI3iDFGnTOLLyIQ8QKVJ0TvWefvdKd71bPT+WZGwXD0nGuf7n9+vzu/+f3lM8uws3oiR5T/KRJi/LvD0l1aY5tOo0kGQY227Y/nWpj4v1tS4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMsreU1yP/+Xed8HAAD///KEILk=") 20:35:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 19) 20:35:31 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8008, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000040)='./file1\x00', 0x42) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) faccessat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x1) 20:35:31 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x14) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=@nfs={0x90, 0x24, {0x5, 0x8001, 0x4, 0x80, "d7036b342b8690d160e2fad938c71399c977e3a207e293ead6f549c0dc66e720cca82ca34e2d94871d44312538da24312acd6d12c2351e01419c70ce0428d713537cc7da64343e019313e787a44444c22d3b7dfdd9b8d4fdda70a6197682cbd1fff9835181b1bc619f4b4fffccfd9c0dcb244b02b87a213b1425546bdfda8513"}}, &(0x7f0000000140), 0x1000) [ 759.884443][T20475] loop1: detected capacity change from 0 to 65 [ 759.906237][T20478] FAULT_INJECTION: forcing a failure. [ 759.906237][T20478] name failslab, interval 1, probability 0, space 0, times 0 [ 759.969161][T20478] CPU: 1 PID: 20478 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 759.979642][T20478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 759.989758][T20478] Call Trace: [ 759.993077][T20478] [ 759.996032][T20478] dump_stack_lvl+0x1e7/0x2d0 [ 760.000928][T20478] ? nf_tcp_handle_invalid+0x650/0x650 [ 760.001591][T20475] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 760.006406][T20478] ? panic+0x850/0x850 [ 760.006482][T20478] ? __might_sleep+0xe0/0xe0 [ 760.006507][T20478] ? __mutex_unlock_slowpath+0x21c/0x750 [ 760.027685][T20478] should_fail_ex+0x3aa/0x4e0 [ 760.032518][T20478] ? shrinker_alloc+0x5a/0x9f0 [ 760.037316][T20478] should_failslab+0x9/0x20 [ 760.041856][T20478] __kmem_cache_alloc_node+0x6d/0x300 [ 760.047268][T20478] ? lockdep_init_map_type+0xa1/0x900 [ 760.052756][T20478] ? shrinker_alloc+0x5a/0x9f0 [ 760.057536][T20478] kmalloc_trace+0x2a/0x60 [ 760.061969][T20478] shrinker_alloc+0x5a/0x9f0 [ 760.066572][T20478] ? call_rcu_zapped+0xc0/0xc0 [ 760.071356][T20478] ? lockdep_softirqs_off+0x430/0x430 [ 760.076740][T20478] ? __raw_spin_lock_init+0x45/0x100 [ 760.082047][T20478] alloc_super+0x69b/0x8f0 [ 760.086465][T20478] ? mount_bdev+0x300/0x300 [ 760.090972][T20478] sget+0x1f6/0x4d0 [ 760.094790][T20478] ? test_bdev_super+0xf0/0xf0 [ 760.099562][T20478] mount_bdev+0xef/0x300 [ 760.103812][T20478] ? v7_mount+0x40/0x40 [ 760.107966][T20478] ? get_tree_bdev+0x5b0/0x5b0 [ 760.112818][T20478] ? vfs_parse_fs_string+0x190/0x230 [ 760.118106][T20478] ? vfs_parse_fs_param+0x410/0x410 [ 760.123300][T20478] ? cap_capable+0x1b4/0x240 [ 760.127993][T20478] legacy_get_tree+0xef/0x190 [ 760.132668][T20478] ? detected_v7+0x3e0/0x3e0 [ 760.137261][T20478] vfs_get_tree+0x8c/0x2a0 [ 760.141675][T20478] do_new_mount+0x28f/0xae0 [ 760.146184][T20478] ? do_move_mount_old+0x170/0x170 [ 760.151299][T20478] __se_sys_mount+0x2d9/0x3c0 [ 760.155976][T20478] ? __x64_sys_mount+0xc0/0xc0 [ 760.160735][T20478] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 760.166810][T20478] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 760.172807][T20478] ? __x64_sys_mount+0x20/0xc0 [ 760.177603][T20478] do_syscall_64+0x45/0x110 [ 760.182107][T20478] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 760.188000][T20478] RIP: 0033:0x7f7bf527cce9 [ 760.192414][T20478] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 760.212123][T20478] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.220635][T20478] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 760.228700][T20478] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 760.236672][T20478] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 760.244645][T20478] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 760.252613][T20478] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 760.260595][T20478] 20:35:31 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x501040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8040e, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:31 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x7077) r1 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0x4}) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) sendfile(r1, r1, 0x0, 0x9f09) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") mount$fuse(0x0, 0x0, 0x0, 0x308b0c8, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 20) [ 760.473232][T20487] FAULT_INJECTION: forcing a failure. [ 760.473232][T20487] name failslab, interval 1, probability 0, space 0, times 0 [ 760.524742][T20487] CPU: 1 PID: 20487 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 760.535584][T20487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 760.545843][T20487] Call Trace: [ 760.549160][T20487] [ 760.552123][T20487] dump_stack_lvl+0x1e7/0x2d0 [ 760.556851][T20487] ? nf_tcp_handle_invalid+0x650/0x650 [ 760.562359][T20487] ? panic+0x850/0x850 [ 760.566562][T20487] ? idr_alloc+0x104/0x1a0 [ 760.571029][T20487] should_fail_ex+0x3aa/0x4e0 [ 760.575768][T20487] ? __list_lru_init+0xad/0x5e0 [ 760.580653][T20487] should_failslab+0x9/0x20 [ 760.585200][T20487] __kmem_cache_alloc_node+0x6d/0x300 [ 760.590642][T20487] ? __list_lru_init+0xad/0x5e0 [ 760.596025][T20487] __kmalloc+0xa2/0x1a0 [ 760.600181][T20487] ? lockdep_softirqs_off+0x430/0x430 [ 760.605559][T20487] __list_lru_init+0xad/0x5e0 [ 760.610251][T20487] ? __raw_spin_lock_init+0x45/0x100 [ 760.615549][T20487] alloc_super+0x776/0x8f0 [ 760.620051][T20487] ? mount_bdev+0x300/0x300 [ 760.624562][T20487] sget+0x1f6/0x4d0 [ 760.628473][T20487] ? test_bdev_super+0xf0/0xf0 [ 760.633497][T20487] mount_bdev+0xef/0x300 [ 760.637735][T20487] ? v7_mount+0x40/0x40 [ 760.641894][T20487] ? get_tree_bdev+0x5b0/0x5b0 [ 760.646657][T20487] ? vfs_parse_fs_string+0x190/0x230 [ 760.651949][T20487] ? vfs_parse_fs_param+0x410/0x410 [ 760.657146][T20487] ? cap_capable+0x1b4/0x240 [ 760.661740][T20487] legacy_get_tree+0xef/0x190 [ 760.666418][T20487] ? detected_v7+0x3e0/0x3e0 [ 760.671007][T20487] vfs_get_tree+0x8c/0x2a0 [ 760.675420][T20487] do_new_mount+0x28f/0xae0 [ 760.679928][T20487] ? do_move_mount_old+0x170/0x170 [ 760.685049][T20487] __se_sys_mount+0x2d9/0x3c0 [ 760.689733][T20487] ? __x64_sys_mount+0xc0/0xc0 [ 760.694495][T20487] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 760.700476][T20487] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 760.706452][T20487] ? __x64_sys_mount+0x20/0xc0 [ 760.711262][T20487] do_syscall_64+0x45/0x110 [ 760.715795][T20487] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 760.721705][T20487] RIP: 0033:0x7f7bf527cce9 [ 760.726128][T20487] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 760.745736][T20487] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 760.754325][T20487] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 760.764114][T20487] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 20:35:32 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe5f, 0x5) 20:35:32 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9G/7chKKqdIlyIbZIUoG2SFyGXSuQJRAPuwCiN4AwpaGiOLD3kAJCR0TvWefvdKd3vYvOc1GZrVS5JhqpvN/37/u+X4HuPVU3gQZZLvJD+p87HO11tS7OpTKy4DSfqhafv9ok11XqzudTEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3F6ZzyTP03857ccAAAD//+4vILc=") 20:35:32 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe74, 0x5) 20:35:32 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x12) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x501040, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x501040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8040e, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 760.772190][T20487] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 760.780198][T20487] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 760.788512][T20487] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 760.796513][T20487] 20:35:32 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x12) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x501040, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8040e, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file1\x00', 0x12) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x501040, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8040e, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) [ 760.884846][T20495] loop1: detected capacity change from 0 to 65 [ 760.940104][T20495] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:32 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="d72284eb455c"]) 20:35:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 21) 20:35:32 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pwwAQBeAnKYikUpMuRTbICiEbZIWgMu5U2biwvY9X8QjawIVbNzLCP2gAg8F8Hxzc8e7gdsftx9Cs38ZKMkx188X/36xbjf0Y3ryEJ1Em+Unymzqfm3y/J8W+PmfFdSFJPzRtf1i2qS6H1aM+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID7K/OV5HU6l9P8FAAA//8zqyI/") [ 761.181262][T20509] overlayfs: missing 'lowerdir' 20:35:32 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="d72284eb455c"]) [ 761.233025][T20510] FAULT_INJECTION: forcing a failure. [ 761.233025][T20510] name failslab, interval 1, probability 0, space 0, times 0 [ 761.256332][T20512] loop1: detected capacity change from 0 to 65 [ 761.278283][T20512] BFS-fs: bfs_fill_super(): Impossible last inode number 2491448 > 513 on loop1 [ 761.311719][T20510] CPU: 0 PID: 20510 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 761.322204][T20510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 761.332287][T20510] Call Trace: [ 761.335593][T20510] [ 761.338552][T20510] dump_stack_lvl+0x1e7/0x2d0 [ 761.343277][T20510] ? nf_tcp_handle_invalid+0x650/0x650 [ 761.348868][T20510] ? panic+0x850/0x850 [ 761.352975][T20510] ? __mutex_lock+0x2ee/0xd60 [ 761.357710][T20510] ? __mutex_unlock_slowpath+0x21c/0x750 [ 761.363566][T20510] should_fail_ex+0x3aa/0x4e0 [ 761.368298][T20510] ? __list_lru_init+0xad/0x5e0 [ 761.373194][T20510] should_failslab+0x9/0x20 [ 761.377773][T20510] __kmem_cache_alloc_node+0x6d/0x300 [ 761.383193][T20510] ? __list_lru_init+0xad/0x5e0 [ 761.388088][T20510] __kmalloc+0xa2/0x1a0 [ 761.392280][T20510] ? __raw_spin_lock_init+0x45/0x100 [ 761.397612][T20510] __list_lru_init+0xad/0x5e0 [ 761.402341][T20510] alloc_super+0x7c4/0x8f0 [ 761.406797][T20510] ? mount_bdev+0x300/0x300 [ 761.411360][T20510] sget+0x1f6/0x4d0 [ 761.415214][T20510] ? test_bdev_super+0xf0/0xf0 [ 761.420054][T20510] mount_bdev+0xef/0x300 [ 761.424340][T20510] ? v7_mount+0x40/0x40 [ 761.428544][T20510] ? get_tree_bdev+0x5b0/0x5b0 [ 761.433354][T20510] ? vfs_parse_fs_string+0x190/0x230 [ 761.439035][T20510] ? vfs_parse_fs_param+0x410/0x410 [ 761.444451][T20510] ? cap_capable+0x1b4/0x240 [ 761.449177][T20510] legacy_get_tree+0xef/0x190 [ 761.453983][T20510] ? detected_v7+0x3e0/0x3e0 [ 761.458623][T20510] vfs_get_tree+0x8c/0x2a0 [ 761.463076][T20510] do_new_mount+0x28f/0xae0 [ 761.467639][T20510] ? do_move_mount_old+0x170/0x170 [ 761.472797][T20510] __se_sys_mount+0x2d9/0x3c0 [ 761.477519][T20510] ? __x64_sys_mount+0xc0/0xc0 [ 761.482328][T20510] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 761.488353][T20510] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 761.494368][T20510] ? __x64_sys_mount+0x20/0xc0 [ 761.499167][T20510] do_syscall_64+0x45/0x110 [ 761.503803][T20510] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 761.509738][T20510] RIP: 0033:0x7f7bf527cce9 [ 761.514271][T20510] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 761.533911][T20510] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 761.542448][T20510] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 761.550465][T20510] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 761.558671][T20510] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 761.566678][T20510] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 761.574682][T20510] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 761.582794][T20510] 20:35:33 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="d72284eb455c"]) [ 761.605492][T20514] overlayfs: missing 'lowerdir' [ 761.670398][T20517] overlayfs: missing 'lowerdir' [ 761.865293][T20490] loop5: detected capacity change from 0 to 32768 [ 761.902006][T20490] BTRFS: device /dev/loop5 using temp-fsid 22dc00d6-9097-4b9e-9575-944f89725482 [ 761.912587][T20490] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (20490) [ 761.940178][T20490] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 761.952014][T20490] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 761.961675][T20490] BTRFS info (device loop5): turning on sync discard [ 761.968759][T20490] BTRFS info (device loop5): using free space tree [ 762.074521][T20490] BTRFS info (device loop5): enabling ssd optimizations [ 762.103843][ T28] audit: type=1800 audit(1703968533.563:1026): pid=20490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 762.168194][ T28] audit: type=1800 audit(1703968533.593:1027): pid=20490 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 762.305291][T20490] overlay: ./bus is not a directory 20:35:33 executing program 4: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={[{@nfs_export_off}, {@nfs_export_on}], [{@flag='silent'}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 22) 20:35:33 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszj1qAmEQBuB3f1iSKk26FLlBrhByg1whbBm7rRQL8T5exSPsDSxsbVb8g+8AgiDPAwMzvDMw28PmI21yrmQqDfPF/99sWJ361xTa8CTqJD9JftPlc53v96TadZesui0kGae3ftwv+zTXw+ZRHwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/dX5SvJSznWZHwMAAP//e9YfFw==") 20:35:33 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe67, 0x5) 20:35:33 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe79, 0x5) 20:35:33 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x7077) (async) r1 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0x4}) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) (async) sendfile(r1, r1, 0x0, 0x9f09) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$eJzs3UFv2+YZAOBXjtN6HlAM21AUQZqybg8JkDqS3Dowehg0mbbZyqJAykWCHYqicYagTjs0G7B4h66XbjvsJ+zQ6/5E/8Ru+w297zQPpCTHTmzZS1K7CJ5HiPmJfMnv/WiBr6lQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0eiuNputRvSy/tat5Hjd1SLfnLJ8sr3vDk2m9BvRqP7F3Fy8Npr12i8fLX61+rEQl0fPLsdcNZmL3Z+++rP3fzE7M1l/SkJn4sHD3c8+2dnZ/vK8Ezkn62k/K/Nss7OeJlmZJyvLy80bG2tlspb10vJ2OUw3k26RdoZ5kVztXktaKytLSbp4O9/qr692eulk5s132s3mcvLB4iDtFGXev/HBYtndyHq9rL9ex1SLq5ibyW+/KD7Mhskw7Wwmyd17O9tLJyVZBbVOE9Q+KajdbLdbrXa7tfzeyns3m83ZdnMuDs1oPiYOrZI0m7OTF21j/Eo/9b4+4F9PsxI/mJlDz+LP03+zz+vQDc9sZlz/oxdZ9GMrbkVy5KMbq1FEHpvHLB/7LuJPdeNGOrXfg/V/UuVfe7T4UvVjYW787Mpx9f+YXM7u8SAexm58Fp/ETuzEdnx57hmd7WM90uhHFmXkkcVmdOo5yXhOEiuxHMvRjI9jI9aijCTWIotepFHG7ShjGGn9iupGEWl0Yhh5FJHE1ejGtUiiFSuxEkuRRBqLcTvy2Ip+rMdqdOqt3I179X5fmpLjflDrNEHtKUGTYv7S+HU5+8QfBNPr/839+v+Puj48ePsMihM/Dhcmjed7AIdnsDep/7G399+9ynlnBAAAADxvjfrd98aVl/afr2W99DfnnBUAAADwPNWXIV+uJher1uvRqM7/m+edFgAAAPAcNeLK+F2A+Xhj1Jp8EsqbAAAAAPCCqP///0o1ma9ab0TD+T8AAAC8aP766B77u3HkPXbLwUxEzEZE4+vBrbcb9ztVXOf+hdF6Fx7f4nDtUuOV8UbqyfLs+Fk3vdwY3/1y/yaY348nd0+613+jKC4+awIRM+OYN++Mpnf2l9S9zK9lvXSxm/feb0Wn88rMML01/MPn9/4YUfX+t/7mK424e29ne/HTL3bu1Ll8XW3l6/vju7k3/o9cfh+vj2JefzmeGPFuNC7WH8QY9zs/6rd5cPzjsUyG9JNT9PnNJGZhfjSdPzz+uarP1uJxo59vvDxe/5lG/s0k+K2rb40mR2TRnpJFvS/aB/f/Y/viVFnEWydnsXRSFkvPmAXAebm7X4UO192L+/X/ibr7FEe5s6nu38TVUczVS/WBdfbSEUf05pFH9L0Lj9XYp69u/4xro5hrk+Djamw15r/v99uq+/22WuHbY/ste5Mdcv93cWPm4e479+rY7c/b7aXl5rvN5nvtuFgPYzypMv2P2gPAYQv19f/TvmPn6IgLES9Nave78eYo4tFZdVWT9ivez/cvKViMT+OL2Ik7cb3+tEF9xcGR/c4fuAzheiyMkz36rHX+wDe8XD/hrG4UO/nb5TSxo6+XAYAXycIJdXi//k++i28SUZfQUf2/fuC8e+6I8+7DtXz62fHBWg4A/DDS4vvG/PAvjaLIBh+3VlZaneFGmhR598OkyFbX0yTrD9Oiu9Hpr6fJoMiHeTfvVY2PstW0TMqtwSAvhslaXiSDvMxu/SqyXpqMv/q9TDc7/WHWLQe9tFOmSTfvDzvdYbKald1ksPXrXlZ+tbe3V61cDtJutpZ1O8Ms7ydlvlV008UkKdN0HLiRFkm2mvaH2VpWNfvJoMhejuJ28lHe29pMk9W07BbZYJgXdTaTvrL+Wl5s1ptdPO+dDQA/Eg8e7n72yc7O9pdHN+bi2EV149/TVx81znuMAMBh06r0E1efAQAAAAAAAAAAAAAA5+KEz/89faPx2JyZiPih+nrhGntfnUlfkw94+O082fj2wJzkR5DPmTfO+cAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEf4XwAAAP//pPJP3Q==") (async) mount$fuse(0x0, 0x0, 0x0, 0x308b0c8, 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 762.389192][T20541] FAULT_INJECTION: forcing a failure. [ 762.389192][T20541] name failslab, interval 1, probability 0, space 0, times 0 [ 762.406729][T20540] loop1: detected capacity change from 0 to 65 [ 762.431248][T20540] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop1 [ 762.440101][T20546] overlayfs: failed to resolve './file1': -2 [ 762.449163][T20541] CPU: 0 PID: 20541 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 762.459630][T20541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 762.464309][ T5102] BTRFS info (device loop5): last unmount of filesystem 22dc00d6-9097-4b9e-9575-944f89725482 [ 762.469776][T20541] Call Trace: [ 762.469787][T20541] [ 762.469796][T20541] dump_stack_lvl+0x1e7/0x2d0 [ 762.469830][T20541] ? nf_tcp_handle_invalid+0x650/0x650 [ 762.469855][T20541] ? panic+0x850/0x850 [ 762.469875][T20541] ? __might_sleep+0xe0/0xe0 [ 762.469896][T20541] ? lockdep_init_map_type+0xa1/0x900 [ 762.469926][T20541] should_fail_ex+0x3aa/0x4e0 [ 762.469955][T20541] ? bdev_open_by_dev+0x5b/0x140 [ 762.469972][T20541] should_failslab+0x9/0x20 [ 762.469989][T20541] __kmem_cache_alloc_node+0x6d/0x300 [ 762.470018][T20541] ? bdev_open_by_dev+0x5b/0x140 [ 762.535501][T20541] kmalloc_trace+0x2a/0x60 [ 762.540036][T20541] bdev_open_by_dev+0x5b/0x140 [ 762.544819][T20541] setup_bdev_super+0x5d/0x630 [ 762.549596][T20541] mount_bdev+0x1e0/0x300 [ 762.553925][T20541] ? v7_mount+0x40/0x40 [ 762.558178][T20541] ? get_tree_bdev+0x5b0/0x5b0 [ 762.562938][T20541] ? vfs_parse_fs_string+0x190/0x230 [ 762.568408][T20541] ? vfs_parse_fs_param+0x410/0x410 [ 762.573806][T20541] ? cap_capable+0x1b4/0x240 [ 762.578418][T20541] legacy_get_tree+0xef/0x190 [ 762.583196][T20541] ? detected_v7+0x3e0/0x3e0 [ 762.587797][T20541] vfs_get_tree+0x8c/0x2a0 [ 762.592215][T20541] do_new_mount+0x28f/0xae0 [ 762.596720][T20541] ? do_move_mount_old+0x170/0x170 [ 762.601839][T20541] __se_sys_mount+0x2d9/0x3c0 [ 762.606518][T20541] ? __x64_sys_mount+0xc0/0xc0 [ 762.611366][T20541] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 762.617444][T20541] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 762.623508][T20541] ? __x64_sys_mount+0x20/0xc0 [ 762.628271][T20541] do_syscall_64+0x45/0x110 [ 762.632918][T20541] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 762.638870][T20541] RIP: 0033:0x7f7bf527cce9 [ 762.643299][T20541] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 762.663000][T20541] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 762.671600][T20541] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 762.679662][T20541] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 762.687660][T20541] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 762.695982][T20541] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 762.704105][T20541] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 762.712110][T20541] 20:35:34 executing program 4: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={[{@nfs_export_off}, {@nfs_export_on}], [{@flag='silent'}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 23) 20:35:34 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszj1qAgEQBeC3PyzZapt0KXKDXCHkBrlC2DLptkpIod7Hq3iEvYGFrc2KqLBYC4J8XzXDm4G32a9fUidTt2ynK8Pv3/fXz7A4zm1m6vAgyiQfST7T5HWV9+ek2DanrLgcJBmnrh93/32q82N1r8YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHtl3pI8zfdynh8CAAD//54jI6g=") [ 762.823240][T20553] overlayfs: failed to resolve './file0': -2 [ 762.865833][T20557] FAULT_INJECTION: forcing a failure. [ 762.865833][T20557] name failslab, interval 1, probability 0, space 0, times 0 [ 762.880161][T20557] CPU: 1 PID: 20557 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 762.890622][T20557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 762.900711][T20557] Call Trace: [ 762.903992][T20557] [ 762.906919][T20557] dump_stack_lvl+0x1e7/0x2d0 [ 762.911606][T20557] ? nf_tcp_handle_invalid+0x650/0x650 [ 762.917093][T20557] ? panic+0x850/0x850 [ 762.921169][T20557] should_fail_ex+0x3aa/0x4e0 [ 762.925852][T20557] ? v7_fill_super+0x5a/0x3e0 [ 762.930528][T20557] should_failslab+0x9/0x20 [ 762.935111][T20557] __kmem_cache_alloc_node+0x6d/0x300 [ 762.940489][T20557] ? __down_write_common+0x161/0x200 [ 762.945951][T20557] ? v7_fill_super+0x5a/0x3e0 [ 762.950628][T20557] kmalloc_trace+0x2a/0x60 [ 762.955039][T20557] v7_fill_super+0x5a/0x3e0 [ 762.959557][T20557] mount_bdev+0x237/0x300 [ 762.963930][T20557] ? v7_mount+0x40/0x40 [ 762.968192][T20557] ? get_tree_bdev+0x5b0/0x5b0 [ 762.973041][T20557] ? vfs_parse_fs_string+0x190/0x230 [ 762.978329][T20557] ? vfs_parse_fs_param+0x410/0x410 [ 762.983526][T20557] ? cap_capable+0x1b4/0x240 [ 762.988129][T20557] legacy_get_tree+0xef/0x190 [ 762.992805][T20557] ? detected_v7+0x3e0/0x3e0 [ 762.997393][T20557] vfs_get_tree+0x8c/0x2a0 [ 763.001813][T20557] do_new_mount+0x28f/0xae0 [ 763.006411][T20557] ? do_move_mount_old+0x170/0x170 [ 763.011530][T20557] __se_sys_mount+0x2d9/0x3c0 [ 763.016206][T20557] ? __x64_sys_mount+0xc0/0xc0 [ 763.021055][T20557] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 763.027033][T20557] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 763.033180][T20557] ? __x64_sys_mount+0x20/0xc0 [ 763.037959][T20557] do_syscall_64+0x45/0x110 [ 763.042557][T20557] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 763.048458][T20557] RIP: 0033:0x7f7bf527cce9 [ 763.052877][T20557] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 763.072750][T20557] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 763.081175][T20557] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 763.089153][T20557] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 763.097150][T20557] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 763.105116][T20557] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 763.113082][T20557] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 763.121150][T20557] 20:35:34 executing program 4: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x80000, &(0x7f00000001c0)={[{@nfs_export_off}, {@nfs_export_on}], [{@flag='silent'}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 24) 20:35:34 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe6f, 0x5) [ 763.232157][T20559] loop1: detected capacity change from 0 to 65 20:35:34 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe7a, 0x5) [ 763.312366][T20559] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 763.394793][T20566] overlayfs: failed to resolve './file1': -2 [ 763.402441][T20567] syz-executor.3: attempt to access beyond end of device [ 763.402441][T20567] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 763.465614][T20567] VFS: could not find a valid V7 on loop3. 20:35:35 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0b9pw3AQBeCnP4ikUpMuRTbICiEbZIWgMulUJaSIvY9X8QjawIVbNzLCNvwGMBjM91V3vDs4uO1h85w2mfvVY5K5NP78fn1+j/9LXafQhjux/PU9yUe6vKzz9pRUu+6UVZeBJNPcD9P+b0hzXmxudTEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXF+d1yQPZV+X+TEAAP//RpwgpA==") 20:35:35 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x181) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x280c0, 0x30) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f066d65302c75f07065726469723d2e2f66696c65312c00"/49]) mount$overlay(0x0, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 25) [ 763.588000][T20574] FAULT_INJECTION: forcing a failure. [ 763.588000][T20574] name failslab, interval 1, probability 0, space 0, times 0 [ 763.640763][T20574] CPU: 0 PID: 20574 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 763.651250][T20574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 763.661860][T20574] Call Trace: [ 763.665156][T20574] [ 763.668096][T20574] dump_stack_lvl+0x1e7/0x2d0 [ 763.672828][T20574] ? nf_tcp_handle_invalid+0x650/0x650 [ 763.678334][T20574] ? panic+0x850/0x850 [ 763.682468][T20574] should_fail_ex+0x3aa/0x4e0 [ 763.687191][T20574] ? v7_fill_super+0x5a/0x3e0 [ 763.691905][T20574] should_failslab+0x9/0x20 [ 763.696440][T20574] __kmem_cache_alloc_node+0x6d/0x300 [ 763.701929][T20574] ? __down_write_common+0x161/0x200 [ 763.707234][T20574] ? v7_fill_super+0x5a/0x3e0 [ 763.711932][T20574] kmalloc_trace+0x2a/0x60 [ 763.716370][T20574] v7_fill_super+0x5a/0x3e0 [ 763.720916][T20574] mount_bdev+0x237/0x300 [ 763.725288][T20574] ? v7_mount+0x40/0x40 [ 763.729584][T20574] ? get_tree_bdev+0x5b0/0x5b0 [ 763.734472][T20574] ? vfs_parse_fs_string+0x190/0x230 [ 763.739798][T20574] ? vfs_parse_fs_param+0x410/0x410 [ 763.745036][T20574] ? cap_capable+0x1b4/0x240 [ 763.749756][T20574] legacy_get_tree+0xef/0x190 [ 763.754468][T20574] ? detected_v7+0x3e0/0x3e0 [ 763.759270][T20574] vfs_get_tree+0x8c/0x2a0 [ 763.763740][T20574] do_new_mount+0x28f/0xae0 [ 763.768289][T20574] ? do_move_mount_old+0x170/0x170 [ 763.773544][T20574] __se_sys_mount+0x2d9/0x3c0 [ 763.778263][T20574] ? __x64_sys_mount+0xc0/0xc0 [ 763.783063][T20574] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 763.789254][T20574] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 763.795274][T20574] ? __x64_sys_mount+0x20/0xc0 [ 763.799531][T20576] loop1: detected capacity change from 0 to 65 [ 763.800058][T20574] do_syscall_64+0x45/0x110 [ 763.810773][T20574] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 763.816706][T20574] RIP: 0033:0x7f7bf527cce9 [ 763.821166][T20574] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 763.840889][T20574] RSP: 002b:00007f7bf5f740c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 763.849321][T20574] RAX: ffffffffffffffda RBX: 00007f7bf539bf80 RCX: 00007f7bf527cce9 [ 763.857291][T20574] RDX: 0000000020000140 RSI: 0000000020000100 RDI: 0000000020000040 [ 763.865265][T20574] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 763.873237][T20574] R10: 0000000000008008 R11: 0000000000000246 R12: 0000000000000002 [ 763.881306][T20574] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 20:35:35 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszj9KA3EQBeC3f1gUhG3sLLyBVxBv4BVkS+22UiyS3CdXyRH2BinSptkQksDvAIFA+L5qhjcDb7Nfv6RN5n75mGQujb9/318/4+I4P6XQhjtRJ/lI8pkur6u8PyfVtjtl1eUgyTT3w7T7H9KcH5tbNQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA66vzluSh3OsyPwQAAP//Wpcgrg==") [ 763.889578][T20574] [ 763.908246][T20578] overlay: Unknown parameter 'lome0' [ 763.924457][T20576] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 764.014189][ T28] audit: type=1800 audit(1703968535.473:1028): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 764.035343][ T28] audit: type=1800 audit(1703968535.473:1029): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="sda1" ino=1955 res=0 errno=0 20:35:35 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) fallocate(r0, 0x0, 0x0, 0x7077) r1 = open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0x4}) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) sendfile(r1, r1, 0x0, 0x9f09) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$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") mount$fuse(0x0, 0x0, 0x0, 0x308b0c8, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="646973636172642c0008fd346f1fe0c7b977cf98b0dfc801ecf9a88e1ae482"], 0x1, 0x559d, &(0x7f0000005680)="$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") (async) open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0) (async) fallocate(r0, 0x0, 0x0, 0x7077) (async) open(&(0x7f0000000180)='./file2\x00', 0x1cd842, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x4020940d, &(0x7f0000000000)={0x4}) (async) read$FUSE(0xffffffffffffffff, &(0x7f000000ac40)={0x2020}, 0x2020) (async) sendfile(r1, r1, 0x0, 0x9f09) (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x18, &(0x7f0000000080)=ANY=[], 0x1, 0x6fd, &(0x7f0000000880)="$eJzs3UFv2+YZAOBXjtN6HlAM21AUQZqybg8JkDqS3Dowehg0mbbZyqJAykWCHYqicYagTjs0G7B4h66XbjvsJ+zQ6/5E/8Ru+w297zQPpCTHTmzZS1K7CJ5HiPmJfMnv/WiBr6lQVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0eiuNputRvSy/tat5Hjd1SLfnLJ8sr3vDk2m9BvRqP7F3Fy8Npr12i8fLX61+rEQl0fPLsdcNZmL3Z+++rP3fzE7M1l/SkJn4sHD3c8+2dnZ/vK8Ezkn62k/K/Nss7OeJlmZJyvLy80bG2tlspb10vJ2OUw3k26RdoZ5kVztXktaKytLSbp4O9/qr692eulk5s132s3mcvLB4iDtFGXev/HBYtndyHq9rL9ex1SLq5ibyW+/KD7Mhskw7Wwmyd17O9tLJyVZBbVOE9Q+KajdbLdbrXa7tfzeyns3m83ZdnMuDs1oPiYOrZI0m7OTF21j/Eo/9b4+4F9PsxI/mJlDz+LP03+zz+vQDc9sZlz/oxdZ9GMrbkVy5KMbq1FEHpvHLB/7LuJPdeNGOrXfg/V/UuVfe7T4UvVjYW787Mpx9f+YXM7u8SAexm58Fp/ETuzEdnx57hmd7WM90uhHFmXkkcVmdOo5yXhOEiuxHMvRjI9jI9aijCTWIotepFHG7ShjGGn9iupGEWl0Yhh5FJHE1ejGtUiiFSuxEkuRRBqLcTvy2Ip+rMdqdOqt3I179X5fmpLjflDrNEHtKUGTYv7S+HU5+8QfBNPr/839+v+Puj48ePsMihM/Dhcmjed7AIdnsDep/7G399+9ynlnBAAAADxvjfrd98aVl/afr2W99DfnnBUAAADwPNWXIV+uJher1uvRqM7/m+edFgAAAPAcNeLK+F2A+Xhj1Jp8EsqbAAAAAPCCqP///0o1ma9ab0TD+T8AAAC8aP766B77u3HkPXbLwUxEzEZE4+vBrbcb9ztVXOf+hdF6Fx7f4nDtUuOV8UbqyfLs+Fk3vdwY3/1y/yaY348nd0+613+jKC4+awIRM+OYN++Mpnf2l9S9zK9lvXSxm/feb0Wn88rMML01/MPn9/4YUfX+t/7mK424e29ne/HTL3bu1Ll8XW3l6/vju7k3/o9cfh+vj2JefzmeGPFuNC7WH8QY9zs/6rd5cPzjsUyG9JNT9PnNJGZhfjSdPzz+uarP1uJxo59vvDxe/5lG/s0k+K2rb40mR2TRnpJFvS/aB/f/Y/viVFnEWydnsXRSFkvPmAXAebm7X4UO192L+/X/ibr7FEe5s6nu38TVUczVS/WBdfbSEUf05pFH9L0Lj9XYp69u/4xro5hrk+Djamw15r/v99uq+/22WuHbY/ste5Mdcv93cWPm4e479+rY7c/b7aXl5rvN5nvtuFgPYzypMv2P2gPAYQv19f/TvmPn6IgLES9Nave78eYo4tFZdVWT9ivez/cvKViMT+OL2Ik7cb3+tEF9xcGR/c4fuAzheiyMkz36rHX+wDe8XD/hrG4UO/nb5TSxo6+XAYAXycIJdXi//k++i28SUZfQUf2/fuC8e+6I8+7DtXz62fHBWg4A/DDS4vvG/PAvjaLIBh+3VlZaneFGmhR598OkyFbX0yTrD9Oiu9Hpr6fJoMiHeTfvVY2PstW0TMqtwSAvhslaXiSDvMxu/SqyXpqMv/q9TDc7/WHWLQe9tFOmSTfvDzvdYbKald1ksPXrXlZ+tbe3V61cDtJutpZ1O8Ms7ydlvlV008UkKdN0HLiRFkm2mvaH2VpWNfvJoMhejuJ28lHe29pMk9W07BbZYJgXdTaTvrL+Wl5s1ptdPO+dDQA/Eg8e7n72yc7O9pdHN+bi2EV149/TVx81znuMAMBh06r0E1efAQAAAAAAAAAAAAAA5+KEz/89faPx2JyZiPih+nrhGntfnUlfkw94+O082fj2wJzkR5DPmTfO+cAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEf4XwAAAP//pPJP3Q==") (async) mount$fuse(0x0, 0x0, 0x0, 0x308b0c8, 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:35:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (fail_nth: 26) 20:35:35 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x181) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x280c0, 0x30) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f066d65302c75f07065726469723d2e2f66696c65312c00"/49]) (async) mount$overlay(0x0, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:35 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe74, 0x5) [ 764.211914][T20587] loop1: detected capacity change from 0 to 65 [ 764.239141][T20587] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:35 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xea7, 0x5) [ 764.341469][T20595] overlay: Unknown parameter 'lome0' [ 764.351982][T20593] syz-executor.3: attempt to access beyond end of device [ 764.351982][T20593] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:35 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0b1pwwAQBeCnH0RSqUmXIhtkhZANskJQmXSqElzY3sereARt4MKtGxlhG2sAg8F8X3XHu4OD2x42r6mTsV09Jxnn+r//n+/ffjnVRZmrOjyI6a2fSb7S5G2dj5ek2DWnrLgMJBnGthv2iy7VebG618UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHtl3pM8zftynh8DAAD//8iSIKU=") 20:35:35 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x181) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x280c0, 0x30) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f066d65302c75f07065726469723d2e2f66696c65312c00"/49]) mount$overlay(0x0, &(0x7f0000000100)='./file1/file0\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 764.461642][T20593] VFS: could not find a valid V7 on loop3. [ 764.498930][T20593] FAULT_INJECTION: forcing a failure. [ 764.498930][T20593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 764.572483][T20593] CPU: 1 PID: 20593 Comm: syz-executor.3 Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 764.582969][T20593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 764.593151][T20593] Call Trace: [ 764.596465][T20593] [ 764.599437][T20593] dump_stack_lvl+0x1e7/0x2d0 [ 764.604166][T20593] ? nf_tcp_handle_invalid+0x650/0x650 [ 764.609770][T20593] ? panic+0x850/0x850 [ 764.610984][T20608] overlay: Unknown parameter 'lome0' [ 764.613863][T20593] ? __lock_acquire+0x1fd0/0x1fd0 [ 764.624390][T20593] ? __lock_acquire+0x1345/0x1fd0 [ 764.629467][T20593] should_fail_ex+0x3aa/0x4e0 [ 764.634189][T20593] _copy_from_user+0x2f/0xe0 [ 764.638822][T20593] kstrtouint_from_user+0xc6/0x190 [ 764.643983][T20593] ? kstrtol_from_user+0x190/0x190 [ 764.649145][T20593] ? read_lock_is_recursive+0x20/0x20 [ 764.654574][T20593] proc_fail_nth_write+0xaa/0x2d0 [ 764.655489][T20604] loop1: detected capacity change from 0 to 65 [ 764.659629][T20593] ? rcu_read_lock_bh_held+0x120/0x120 [ 764.659669][T20593] ? proc_fail_nth_read+0x250/0x250 [ 764.659699][T20593] ? proc_fail_nth_read+0x250/0x250 [ 764.659723][T20593] vfs_write+0x290/0xb20 [ 764.659757][T20593] ? file_end_write+0x250/0x250 [ 764.659783][T20593] ? __fget_files+0x3fe/0x480 [ 764.670257][T20604] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 764.671364][T20593] ? __fget_files+0x29/0x480 [ 764.671407][T20593] ? __fdget_pos+0x2b0/0x340 [ 764.671430][T20593] ? ksys_write+0x7b/0x2c0 [ 764.671455][T20593] ksys_write+0x1a0/0x2c0 [ 764.721548][T20593] ? print_irqtrace_events+0x220/0x220 [ 764.727022][T20593] ? __ia32_sys_read+0x90/0x90 [ 764.731797][T20593] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 764.737952][T20593] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 764.744052][T20593] do_syscall_64+0x45/0x110 [ 764.748581][T20593] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 764.754485][T20593] RIP: 0033:0x7f7bf527ba2f [ 764.758899][T20593] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48 [ 764.778699][T20593] RSP: 002b:00007f7bf5f740c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 764.787203][T20593] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7bf527ba2f [ 764.795176][T20593] RDX: 0000000000000001 RSI: 00007f7bf5f74130 RDI: 0000000000000003 [ 764.803235][T20593] RBP: 00007f7bf5f74120 R08: 0000000000000000 R09: 0000000000000000 [ 764.811209][T20593] R10: 0000000000008008 R11: 0000000000000293 R12: 0000000000000002 20:35:36 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x40, 0x8001) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/vp_vdpa', 0x40000, 0x1f1) linkat(r0, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x1000) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f0000000240)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66690300000000000000726469723d2e2f66696c65312c00"]) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x5) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="dc3d8c5bc84e221873170b131f11b72a1a008e13bfd4957fb4beac39ab0faa4535af1a2f3f90ad99af18a403e98e8c3a121d3e479430d4ec38b213f5beb518e7dc062b942e61a0efdffd3f9477bf657a6d1acf34ddab40a05f07bac3142cf28907896f7800003586d840b63a25fb5c1014f4689bbb2a558c1fbdc9c1bb77263f2a79a3983572387c21d645e64201c0bb72c239bd"]) [ 764.819180][T20593] R13: 000000000000000b R14: 00007f7bf539bf80 R15: 00007ffdbf3ffd28 [ 764.827165][T20593] 20:35:36 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0bFpwwAQBdAvKYikUop0KbJBVgjZICsElUmnysaF7X28ikfQBi7cupERtkADGAzmveqOfwcHtz/t3vOUDM3mJckw1y2Wf7//3Xqsx3DyWoYHMb7yO8lP6nxs8/WWFIf6khXTQJJ+aNr+uGpTXRere10MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALdX5jPJ87wv5/k5AAD//+/kILk=") 20:35:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:36 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x40, 0x8001) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/vp_vdpa', 0x40000, 0x1f1) linkat(r0, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x1000) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) chdir(&(0x7f0000000240)='./file1\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66690300000000000000726469723d2e2f66696c65312c00"]) (async) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x5) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="dc3d8c5bc84e221873170b131f11b72a1a008e13bfd4957fb4beac39ab0faa4535af1a2f3f90ad99af18a403e98e8c3a121d3e479430d4ec38b213f5beb518e7dc062b942e61a0efdffd3f9477bf657a6d1acf34ddab40a05f07bac3142cf28907896f7800003586d840b63a25fb5c1014f4689bbb2a558c1fbdc9c1bb77263f2a79a3983572387c21d645e64201c0bb72c239bd"]) [ 765.118946][T20614] loop1: detected capacity change from 0 to 65 [ 765.134411][T20615] syz-executor.3: attempt to access beyond end of device [ 765.134411][T20615] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 765.151438][T20614] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 765.169004][T20615] VFS: could not find a valid V7 on loop3. 20:35:36 executing program 4: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0x40, 0x8001) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/vp_vdpa', 0x40000, 0x1f1) linkat(r0, &(0x7f0000000140)='./file1\x00', 0xffffffffffffffff, &(0x7f00000001c0)='./bus\x00', 0x1000) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) chdir(&(0x7f0000000240)='./file1\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66690300000000000000726469723d2e2f66696c65312c00"]) (async, rerun: 32) mknod(&(0x7f0000000040)='./file1\x00', 0x4, 0x5) (rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="dc3d8c5bc84e221873170b131f11b72a1a008e13bfd4957fb4beac39ab0faa4535af1a2f3f90ad99af18a403e98e8c3a121d3e479430d4ec38b213f5beb518e7dc062b942e61a0efdffd3f9477bf657a6d1acf34ddab40a05f07bac3142cf28907896f7800003586d840b63a25fb5c1014f4689bbb2a558c1fbdc9c1bb77263f2a79a3983572387c21d645e64201c0bb72c239bd"]) [ 765.211993][T20594] loop5: detected capacity change from 0 to 32768 [ 765.228873][T20594] BTRFS: device /dev/loop5 using temp-fsid a19764ec-7103-40bc-bb39-b799697eb91d [ 765.246055][T20594] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz-executor.5 (20594) [ 765.315677][T20624] overlayfs: failed to resolve './fi': -2 [ 765.326721][T20594] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 765.367974][T20594] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 765.424341][T20594] BTRFS info (device loop5): turning on sync discard [ 765.437615][T20594] BTRFS info (device loop5): using free space tree [ 765.482515][T20594] BTRFS info (device loop5): enabling ssd optimizations [ 765.509437][ T28] audit: type=1800 audit(1703968536.973:1030): pid=20594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 765.532411][ T28] audit: type=1800 audit(1703968536.973:1031): pid=20594 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 765.627329][T20642] overlay: ./bus is not a directory 20:35:37 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:37 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xec1, 0x5) 20:35:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:37 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./fine1,\x00']) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:37 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe79, 0x5) 20:35:37 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9G/7chKKqdIlyIbZIUoG2SFyGXSuQJRAPuwCiN4AwpaGiOLD3kAJCR0TvWefvdKd3vYvOcpGZrVS5JhqpvN/37/u+X4HuPVa3gQZZLvJD+p87HO11tS7OpTKy4DSfqhafv9ok11XqzudTEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3F6ZzyTP03857ccAAAD//+vvILc=") [ 765.649039][ T28] audit: type=1800 audit(1703968537.113:1032): pid=20642 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 765.676311][ T28] audit: type=1800 audit(1703968537.113:1033): pid=20642 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.5" name="file2" dev="loop5" ino=261 res=0 errno=0 [ 765.737617][T20652] loop1: detected capacity change from 0 to 65 [ 765.749647][T20655] syz-executor.3: attempt to access beyond end of device [ 765.749647][T20655] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 765.772976][T20655] VFS: could not find a valid V7 on loop3. [ 765.780135][T20652] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 765.783889][T20657] overlayfs: failed to resolve './fine1': -2 [ 765.796141][ T5102] BTRFS info (device loop5): last unmount of filesystem a19764ec-7103-40bc-bb39-b799697eb91d 20:35:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0, 0x4}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:37 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpwwAQBdAvKYikUpMuRTbICiEbZIWgMulUxbiwvY9X8QjawIVbNzLCEmgAg8G8V93x/8Edzvu3PCVDs31JMix1/6vfn79uM85jOJu6PIAyyVeS79R53+XzNSmO9TUr5kKSfmja/rRuU02H1b0+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDbK/OR5Hm5l8v8EgAA///n3CI/") 20:35:37 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./fine1,\x00']) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64ffff2f6c6f6f703000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 766.037151][T20667] loop1: detected capacity change from 0 to 65 20:35:37 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./fine1,\x00']) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 766.148452][T20669] overlayfs: failed to resolve './fine1': -2 [ 766.170915][T20667] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:37 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 766.263692][ T28] audit: type=1800 audit(1703968537.723:1034): pid=20674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 20:35:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64ffff2f6c6f6f703000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64ffff2f6c6f6f703000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) (async) sendfile(r0, r0, 0x0, 0x108000015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 766.338019][ T28] audit: type=1800 audit(1703968537.743:1035): pid=20674 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 766.458315][T20678] overlayfs: failed to resolve './fine1': -2 20:35:38 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xec9, 0x5) 20:35:38 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAcxdHrD1lJ5SZdimyQFaJskBUil0nnKhEFsA+rMII3oKClMbJA4AGQkNA51X366Un/7WHzmjoZ29VzknGu//v/+f7tl9Oe4kUdHkSR5DPJV5q8rfPxkhS75tpSnvYwtt2wX3Spzh+re10MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALdX5j3J0/xdzvsxAAD//1RxIKo=") 20:35:38 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f64ffff2f6c6f6f703000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) 20:35:38 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@sg0, r0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:38 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xe7a, 0x5) 20:35:38 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x2016, &(0x7f0000000480)=ANY=[@ANYBLOB='workdir=./bus,default_permissions,xino=off,rootcontext=user_u,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsfloor=lowerdir,rootcontext=unconfined_u,subj_type=overlay\x00,dont_appraise,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c664a253dd246494c455f4d4d41502c61707072616973655f747970653d696d617369672c00159a7273ba22dcb8e69acc5526bb13b16043b56d68477184caf8e94d10669fa6b7399a80d83cfe279fcc99a52428e04ccb7c7cb09e53a6926f0057dc2f6fe692ea8c03c0184d9293a11f55ceda1cec6c04ed4c940de4d7b3a79bbc26d733511ae9991315318d4cf3278b34fb611eedcc50bd5b42189ee3be20efe5be06cfd1afed9a2dbd4578927fdc0f23fa90fbede34479dc894d79c637cadca48759f72747ef0556d5cc"]) 20:35:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/lev/loop0\x00'], &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x8008, 0x0) 20:35:38 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@sg0, r0, 0x0) (async) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@sg0, r0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 766.827539][T20693] loop1: detected capacity change from 0 to 65 [ 766.892726][T20693] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/lev/loop0\x00'], &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x8008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/lev/loop0\x00'], &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x8008, 0x0) (async) 20:35:38 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pwwAQBeCnH4RSqUmXIhtkhZANskJQmXSqElIk3sereARt4MKtGxkhYzSAwWC+rzje8Ti43XH7lDqZuv+HJNPa8P3z+fE1/M15Li/qcCfaJG9J3tPkeZPXx6TYN0tXzKNc8jh1/Xj47VOdD6tbfQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA11fmJUm73st1fwoAAP//1X4gsQ==") 20:35:38 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) fstat(0xffffffffffffffff, &(0x7f0000000100)) (async) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@sg0, r0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 767.135353][T20711] loop1: detected capacity change from 0 to 65 [ 767.168380][T20711] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 767.357040][T20716] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:35:39 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed1, 0x5) 20:35:39 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x2016, &(0x7f0000000480)=ANY=[@ANYBLOB='workdir=./bus,default_permissions,xino=off,rootcontext=user_u,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsfloor=lowerdir,rootcontext=unconfined_u,subj_type=overlay\x00,dont_appraise,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c664a253dd246494c455f4d4d41502c61707072616973655f747970653d696d617369672c00159a7273ba22dcb8e69acc5526bb13b16043b56d68477184caf8e94d10669fa6b7399a80d83cfe279fcc99a52428e04ccb7c7cb09e53a6926f0057dc2f6fe692ea8c03c0184d9293a11f55ceda1cec6c04ed4c940de4d7b3a79bbc26d733511ae9991315318d4cf3278b34fb611eedcc50bd5b42189ee3be20efe5be06cfd1afed9a2dbd4578927fdc0f23fa90fbede34479dc894d79c637cadca48759f72747ef0556d5cc"]) 20:35:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=ANY=[@ANYBLOB='/lev/loop0\x00'], &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='v7\x00', 0x8008, 0x0) 20:35:39 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0T1KA1EUBeAzPwxaTWNn4Q7cgrgDtyBTajeVYqHuJ1vJEmYHKdKmmfCYEGYBgUD4vuJxHocLF+72sHlMm8z9332SeW38+v54/xx/Sy7lWRtuRLnra5K3dHn6z8tDUu26pavKUy95mvth2v8MaU6DzbU2BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDLq/Oc5G79r9f9MQAA//9VrSCy") 20:35:39 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(0xfffffffffffffffc, 0x125400, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:39 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xea7, 0x5) 20:35:39 executing program 3: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="000100000000000000ff00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x909408, 0x0) 20:35:39 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000100), 0x2016, &(0x7f0000000480)=ANY=[@ANYBLOB='workdir=./bus,default_permissions,xino=off,rootcontext=user_u,fowner=', @ANYRESDEC, @ANYBLOB=',smackfsfloor=lowerdir,rootcontext=unconfined_u,subj_type=overlay\x00,dont_appraise,euid=', @ANYRESDEC=0xee00, @ANYBLOB="2c664a253dd246494c455f4d4d41502c61707072616973655f747970653d696d617369672c00159a7273ba22dcb8e69acc5526bb13b16043b56d68477184caf8e94d10669fa6b7399a80d83cfe279fcc99a52428e04ccb7c7cb09e53a6926f0057dc2f6fe692ea8c03c0184d9293a11f55ceda1cec6c04ed4c940de4d7b3a79bbc26d733511ae9991315318d4cf3278b34fb611eedcc50bd5b42189ee3be20efe5be06cfd1afed9a2dbd4578927fdc0f23fa90fbede34479dc894d79c637cadca48759f72747ef0556d5cc"]) [ 767.687679][T20721] overlayfs: failed to resolve './file0': -2 20:35:39 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(0xfffffffffffffffc, 0x125400, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) open(0xfffffffffffffffc, 0x125400, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) [ 767.743989][T20729] loop1: detected capacity change from 0 to 65 [ 767.777308][T20729] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:39 executing program 3: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="000100000000000000ff00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x909408, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) (async) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="000100000000000000ff00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x909408, 0x0) (async) 20:35:39 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUBeCjH0RSqUmXIhtkhZANskJQmXSqElLE3sereARt4MKtGxkhYTSAwWC+D97jXA4X7v60e06djO3mMcm41v/8fn1+9/9TnsqLOtyJ9+V9pMnLNm9PSXFo5q6YvnLOw9h2w/GvS7UsVre6GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACur8xrkof1XK77cwAAAP//XlEg6g==") 20:35:39 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(0xfffffffffffffffc, 0x125400, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) open(0xfffffffffffffffc, 0x125400, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) [ 767.909572][T20737] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 768.038214][T20749] loop1: detected capacity change from 0 to 65 [ 768.116717][T20749] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:40 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed6, 0x5) 20:35:40 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="7379193d5def67161232ae0729f89e6e0400005fb409a088dbe373c3720e289f8b8809659a23010c001246b9c32749760d574716dbdd1f69cf3115ef4f42a99f4f45af8ffe63498e7a6e7213e9975d3ef424dc5c47623087bc14b00da32f30590c4e9b73fd9820c6ece62e1621d9cee54833fa2ef9f39513affb90dd2b371598fb9a3fc6fdfed994cc2d09a5a6dad1a955e832fb3e1d1404ab8ec3ab6f85b7d5f786453191bb22fd14"]) chdir(&(0x7f0000000140)='./file1\x00') 20:35:40 executing program 3: ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x1) (async) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) (async, rerun: 32) mount(&(0x7f0000000100)=ANY=[@ANYBLOB="000100000000000000ff00"], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='v7\x00', 0x909408, 0x0) (rerun: 32) 20:35:40 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:40 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr9Nw1AQBvDPf2RB5YaOgg1YgRVYAbmEzhWIArJPVskI3iBF2jSOrFjRWyCKFP1+zXt33510u+P2OW0y9/+PSebS+P3z+fE1/i3/Jbxow52o1/c9XV42eXtKqn137lXFwDT3w3T4HdKsC80trgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA66jzmuShrOsyPwUAAP//S5Ugag==") 20:35:40 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xec1, 0x5) 20:35:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) [ 768.659404][T20758] loop1: detected capacity change from 0 to 65 20:35:40 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="7379193d5def67161232ae0729f89e6e0400005fb409a088dbe373c3720e289f8b8809659a23010c001246b9c32749760d574716dbdd1f69cf3115ef4f42a99f4f45af8ffe63498e7a6e7213e9975d3ef424dc5c47623087bc14b00da32f30590c4e9b73fd9820c6ece62e1621d9cee54833fa2ef9f39513affb90dd2b371598fb9a3fc6fdfed994cc2d09a5a6dad1a955e832fb3e1d1404ab8ec3ab6f85b7d5f786453191bb22fd14"]) chdir(&(0x7f0000000140)='./file1\x00') 20:35:40 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 768.741257][T20758] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 768.790026][T20768] syz-executor.3: attempt to access beyond end of device [ 768.790026][T20768] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:40 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrttwlAUx+G/H7KSyk26FNkgK2SFrBC5TDpXQRTAPqzCCN6AgpbGyOIhD4CEhL6vule/c6SzO27fUydju35NMs71/4vfn79+Nb2neFOHJ1EmKZJ8p8nHJl9vSbFvzq24DiQZxrYbDssu1WWxetTFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/ZT6TvMz/5byfAgAA///LsSBr") [ 768.846095][T20768] VFS: could not find a valid V7 on loop3. [ 768.881493][T20775] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 20:35:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) 20:35:40 executing program 4: fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 769.036435][T20781] loop1: detected capacity change from 0 to 65 [ 769.081753][T20781] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000, 0x100) 20:35:41 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)) (async) stat(&(0x7f0000000100)='./bus\x00', &(0x7f0000000240)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000480)=ANY=[@ANYBLOB="7379193d5def67161232ae0729f89e6e0400005fb409a088dbe373c3720e289f8b8809659a23010c001246b9c32749760d574716dbdd1f69cf3115ef4f42a99f4f45af8ffe63498e7a6e7213e9975d3ef424dc5c47623087bc14b00da32f30590c4e9b73fd9820c6ece62e1621d9cee54833fa2ef9f39513affb90dd2b371598fb9a3fc6fdfed994cc2d09a5a6dad1a955e832fb3e1d1404ab8ec3ab6f85b7d5f786453191bb22fd14"]) chdir(&(0x7f0000000140)='./file1\x00') 20:35:41 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103000, 0xa0) 20:35:41 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pwwAQBeCnH0RSqUmXIhtkhayQFYLKpFOVkML2Pl7FI2gDF27dyAjLRgMYDOb74OCOdwe3O25fUydju35OMi71v3/fXz/9auqn8KoOD6Kc6zNN3jb5eEmKfXPOistCkmFsu+Hw36WaD6t7fQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAt1fmPcnTci6X+SkAAP//S9wgbA==") 20:35:41 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xec9, 0x5) 20:35:41 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed7, 0x5) [ 769.586475][T20795] loop1: detected capacity change from 0 to 65 [ 769.627331][T20797] syz-executor.3: attempt to access beyond end of device [ 769.627331][T20797] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 769.656536][T20795] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 769.662944][T20797] VFS: could not find a valid V7 on loop3. [ 769.672268][T20798] syz-executor.3: attempt to access beyond end of device [ 769.672268][T20798] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 769.695706][T20798] VFS: could not find a valid V7 on loop3. 20:35:41 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103000, 0xa0) 20:35:41 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000023c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f726f6c653d6b265d2dea5d2c61707072f9eb4b616973655f747970653d696d617369670c75c2ad3ff00b10d94bf4d906aebd788f24f522c4a6146e92d378255f9fb61dc13a72cd85767a055b1274024804abcb9bb00d18aee6f302150c8e5240e3af93f640b6b4afa912904af96db01cecffee14bd3cad58e8a5976920003d91205932e98f946ef724195723cedd6121874e1cc98861f5cdef983fa00d997b8b5f2128c8ce77b9c785ef28729cd01311a99fac16f2f275b49d7fe4b44815371aad46ab566e0f9034870293fdbf5ff433e28be6b086beb35d9d676a87cb66e5dc674b607b7369868ab509", @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=,obj_role=workdir,\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210200, 0x60) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) sendfile(r3, r3, 0x0, 0x108000015) renameat2(r3, &(0x7f00000001c0)='./bus\x00', r2, &(0x7f0000004500)='./file0\x00', 0x4) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='synC,\x00']) 20:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a8) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:41 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzsy71twlAcxdFrx7KSyk26FNkgK2SFrBC5hM4ViALYh1UYwRtQ0NIYmS95Buuc6j397v94OXylSoZm95FkmOpW68X/stuO7zG+VGEmyiRvSf5S53uf38+kONX3VjwHSfqhafvzpr2N8zgCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJko85Pkffovp/0aAAD//8v4IG0=") 20:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a8) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a8) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 769.851188][T20806] syz-executor.3: attempt to access beyond end of device [ 769.851188][T20806] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 769.864706][T20806] VFS: could not find a valid V7 on loop3. [ 769.952498][T20811] syz-executor.3: attempt to access beyond end of device [ 769.952498][T20811] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 769.968120][T20811] VFS: could not find a valid V7 on loop3. 20:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x1a8) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 769.997257][T20814] loop1: detected capacity change from 0 to 65 [ 770.031740][T20814] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:41 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x103000, 0xa0) [ 770.043516][T20816] overlay: Unknown parameter 'fowner>00000000000000060928' 20:35:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) 20:35:41 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0b1pwwAQBeCnH0RSqUmXIhtkhayQFYLKpFOVkML2Pl7FI2gDF27dyAjLRgMYDOb7qjveHRzc7rh9TZ2M7fo5ybjU//59f/30q6mewqs6PIhyfudnmrxt8vGSFPvmnBWXgSTD2HbD4b9LNS9W97oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6vzHuSp2VfLvNTAAAA//9MIyBu") 20:35:41 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000023c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f726f6c653d6b265d2dea5d2c61707072f9eb4b616973655f747970653d696d617369670c75c2ad3ff00b10d94bf4d906aebd788f24f522c4a6146e92d378255f9fb61dc13a72cd85767a055b1274024804abcb9bb00d18aee6f302150c8e5240e3af93f640b6b4afa912904af96db01cecffee14bd3cad58e8a5976920003d91205932e98f946ef724195723cedd6121874e1cc98861f5cdef983fa00d997b8b5f2128c8ce77b9c785ef28729cd01311a99fac16f2f275b49d7fe4b44815371aad46ab566e0f9034870293fdbf5ff433e28be6b086beb35d9d676a87cb66e5dc674b607b7369868ab509", @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=,obj_role=workdir,\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210200, 0x60) (async, rerun: 64) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) (async) sendfile(r3, r3, 0x0, 0x108000015) renameat2(r3, &(0x7f00000001c0)='./bus\x00', r2, &(0x7f0000004500)='./file0\x00', 0x4) (async) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='synC,\x00']) [ 770.217854][T20823] syz-executor.3: attempt to access beyond end of device [ 770.217854][T20823] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 770.262483][T20828] loop1: detected capacity change from 0 to 65 [ 770.264525][T20823] VFS: could not find a valid V7 on loop3. [ 770.329642][T20833] overlay: Unknown parameter 'fowner>00000000000000060928' [ 770.346421][T20828] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:42 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed1, 0x5) 20:35:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20, 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) 20:35:42 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file2\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:42 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H1hQuaGjYANWYAVWQC6hcwVKkWSfrJIRvEGKtGkcWXnIA0SKFH1fda9+50hne9i8pU7GdvWSZJzr//5/vn/75fSe4lUdHkSZ5CnJV5q8r/P5mhS75tSKy0CSYWy7Yb/oUp0Xq3tdDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3V+YjyfP8X877MQAA///MPyBv") 20:35:42 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, &(0x7f00000023c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="2c7375626a5f726f6c653d6b265d2dea5d2c61707072f9eb4b616973655f747970653d696d617369670c75c2ad3ff00b10d94bf4d906aebd788f24f522c4a6146e92d378255f9fb61dc13a72cd85767a055b1274024804abcb9bb00d18aee6f302150c8e5240e3af93f640b6b4afa912904af96db01cecffee14bd3cad58e8a5976920003d91205932e98f946ef724195723cedd6121874e1cc98861f5cdef983fa00d997b8b5f2128c8ce77b9c785ef28729cd01311a99fac16f2f275b49d7fe4b44815371aad46ab566e0f9034870293fdbf5ff433e28be6b086beb35d9d676a87cb66e5dc674b607b7369868ab509", @ANYRESDEC=r1, @ANYBLOB=',smackfsroot=,obj_role=workdir,\x00']) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x210200, 0x60) (async) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) sendfile(r3, r3, 0x0, 0x108000015) (async) renameat2(r3, &(0x7f00000001c0)='./bus\x00', r2, &(0x7f0000004500)='./file0\x00', 0x4) (async) read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='synC,\x00']) 20:35:42 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf00, 0x5) [ 770.592601][T20836] overlay: Unknown parameter 'fowner>00000000000000060928' [ 770.604396][T20839] syz-executor.3: attempt to access beyond end of device [ 770.604396][T20839] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:42 executing program 5: r0 = open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x54) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 770.660459][T20843] loop1: detected capacity change from 0 to 65 [ 770.691797][T20845] overlayfs: conflicting lowerdir path [ 770.705150][T20839] VFS: could not find a valid V7 on loop3. 20:35:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x20, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async, rerun: 32) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x200) (async, rerun: 32) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x100) [ 770.756459][T20843] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:42 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrttwlAUx+G/H7KSyk26FNkgK2SFrBC5TDpXQRTAPqzCCN6AgpbGyOIhD4CEhL6vule/c6SzO27fUydju35NMs71/4vfn79+Nb2neFOHJ1EmaZJ8p8nHJl9vSbFvzq24DiQZxrYbDssu1WWxetTFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/ZT6TvMz/5byfAgAA//9MaiBw") 20:35:42 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) unlink(&(0x7f0000000040)='./file2\x00') (async) unlink(&(0x7f0000000040)='./file2\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:42 executing program 5: r0 = open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x54) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 770.913857][T20859] syz-executor.3: attempt to access beyond end of device [ 770.913857][T20859] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 770.928245][T20860] loop1: detected capacity change from 0 to 65 [ 770.960258][T20859] VFS: could not find a valid V7 on loop3. [ 770.971185][T20860] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 770.993839][T20859] syz-executor.3: attempt to access beyond end of device [ 770.993839][T20859] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 771.008953][T20859] VFS: could not find a valid V7 on loop3. [ 771.016908][T20863] overlayfs: conflicting lowerdir path [ 771.025229][T20859] syz-executor.3: attempt to access beyond end of device [ 771.025229][T20859] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 771.039819][T20859] VFS: could not find a valid V7 on loop3. [ 771.048919][T20859] VFS: could not find a valid V7 on loop3. [ 771.057116][T20859] VFS: could not find a valid V7 on loop3. 20:35:42 executing program 5: r0 = open(&(0x7f0000000140)='./file1\x00', 0x400000, 0x54) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='silent\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) rename(&(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='./file0\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 771.128433][T20859] VFS: could not find a valid V7 on loop3. [ 771.159541][T20859] VFS: could not find a valid V7 on loop3. [ 771.201672][T20859] VFS: could not find a valid V7 on loop3. [ 771.221000][T20859] VFS: could not find a valid V7 on loop3. [ 771.231930][T20859] VFS: could not find a valid V7 on loop3. [ 771.263574][T20859] VFS: could not find a valid V7 on loop3. [ 771.332780][T20859] VFS: could not find a valid V7 on loop3. [ 771.340400][T20859] VFS: could not find a valid V7 on loop3. [ 771.351293][T20859] VFS: could not find a valid V7 on loop3. [ 771.360394][T20859] VFS: could not find a valid V7 on loop3. [ 771.370291][T20859] VFS: could not find a valid V7 on loop3. [ 771.378680][T20859] VFS: could not find a valid V7 on loop3. [ 771.385610][T20859] VFS: could not find a valid V7 on loop3. [ 771.393048][T20859] VFS: could not find a valid V7 on loop3. [ 771.400940][T20859] VFS: could not find a valid V7 on loop3. [ 771.410601][T20859] VFS: could not find a valid V7 on loop3. [ 771.418513][T20859] VFS: could not find a valid V7 on loop3. [ 771.427931][T20859] VFS: could not find a valid V7 on loop3. [ 771.435255][T20859] VFS: could not find a valid V7 on loop3. [ 771.443100][T20859] VFS: could not find a valid V7 on loop3. [ 771.451005][T20859] VFS: could not find a valid V7 on loop3. [ 771.460089][T20859] VFS: could not find a valid V7 on loop3. [ 771.467864][T20859] VFS: could not find a valid V7 on loop3. [ 771.474917][T20859] VFS: could not find a valid V7 on loop3. 20:35:43 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed6, 0x5) 20:35:43 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/HzJQuaGjYANWYAVWQC6hcwVKkWSfrJIRvEGKtGkcWXnIA0SKFH1fda9+50hne9i8pU7GdvWSZJzr//5/vn/75fSe4lUdHkSZ5CnJV5q8r/P5mhS75tSKy0CSYWy7Yb/oUp0Xq3tdDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC3V+YjyfP8X877MQAA///MhiBx") 20:35:43 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) unlink(&(0x7f0000000040)='./file2\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:43 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="00dad56c8bea4b5d7f7f3e623163db406e856b3d00000000"]) 20:35:43 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf04, 0x5) [ 771.483148][T20859] VFS: could not find a valid V7 on loop3. [ 771.492474][T20859] VFS: could not find a valid V7 on loop3. [ 771.500705][T20859] VFS: could not find a valid V7 on loop3. [ 771.515493][T20859] VFS: could not find a valid V7 on loop3. 20:35:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="af6464762f0700000000000000690608000000000000002b72df3395ef4c7c3a541b219b9ff8630bea4bef676623a5741499b93cab4faff907dc329ada8e194427e18d2d6c27623f318bfc74c1848c24f451c9bde62af3be88e9a7677c02a578257698793c6c2e459035ca52"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4015c0, 0x11) [ 771.622747][T20880] loop1: detected capacity change from 0 to 65 [ 771.658891][T20883] overlayfs: conflicting lowerdir path 20:35:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="af6464762f0700000000000000690608000000000000002b72df3395ef4c7c3a541b219b9ff8630bea4bef676623a5741499b93cab4faff907dc329ada8e194427e18d2d6c27623f318bfc74c1848c24f451c9bde62af3be88e9a7677c02a578257698793c6c2e459035ca52"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4015c0, 0x11) (async) open(&(0x7f0000000040)='./file0\x00', 0x4015c0, 0x11) 20:35:43 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000040)='./file1\x00') 20:35:43 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./file0\x00') (async) chdir(&(0x7f0000000100)='./file0\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="00dad56c8bea4b5d7f7f3e623163db406e856b3d00000000"]) [ 771.677677][T20880] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="af6464762f0700000000000000690608000000000000002b72df3395ef4c7c3a541b219b9ff8630bea4bef676623a5741499b93cab4faff907dc329ada8e194427e18d2d6c27623f318bfc74c1848c24f451c9bde62af3be88e9a7677c02a578257698793c6c2e459035ca52"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4015c0, 0x11) (async) open(&(0x7f0000000040)='./file0\x00', 0x4015c0, 0x11) 20:35:43 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEYdgnO2SCjOANUqRN48jKQx4gUqTo+6p79TtHOpv96jl1MrV/j0mmpf775/Pjqx/m9xwv6nAnyiTDus57mrz85+0pKbbNsRXngSTj1Hbj7rdLdVqsbnUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxfmdckD8t/ueyHAAAA//93uyGu") 20:35:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 771.942659][T20899] loop1: detected capacity change from 0 to 65 [ 771.984076][T20899] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:43 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xed7, 0x5) 20:35:43 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf1a, 0x5) 20:35:43 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000040)='./file1\x00') 20:35:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (rerun: 64) 20:35:43 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) chdir(&(0x7f0000000100)='./file0\x00') (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000040)=ANY=[@ANYBLOB="00dad56c8bea4b5d7f7f3e623163db406e856b3d00000000"]) 20:35:43 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEgdknO2SCjOANUqRN48jKQx4gUqTo+6p79TtHOpv96jl1MrXDY5Jpqf/++fz46v/m9xwv6nAnyiTDus57mrz85+0pKbbNsRXngSTj1Hbj7rdLdVqsbnUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxfmdckD8t/ueyHAAAA///31yGv") [ 772.562741][T20910] loop1: detected capacity change from 0 to 65 20:35:44 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000040)='./file1\x00') (async) chdir(&(0x7f0000000040)='./file1\x00') 20:35:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) [ 772.603097][T20914] overlayfs: failed to resolve './file0': -2 [ 772.614187][T20910] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:44 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x4c00, &(0x7f0000000240)={[{@metacopy_on}, {@xino_on}, {@xino_off}, {@index_off}, {@metacopy_off}, {@index_off}], [{@obj_role={'obj_role', 0x3d, '])-*'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:44 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEAd4nO2SCjOANUqRN48jKQx4gUqTo+6p79TtHOpv96jl1MrX/j0mmpf775/Pjq/+b33O8qMOdKJMM6zrvafIy5O0pKbbNsRXngSTj1Hbj7rdLdVqsbnUxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFxfmdckD8t/ueyHAAAA//94AiGw") 20:35:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, 0xee01, &(0x7f00000000c0)) [ 772.877356][T20934] overlay: Unknown parameter 'obj_role' [ 772.884492][T20937] loop1: detected capacity change from 0 to 65 [ 772.910859][T20937] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:44 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469753d2e2f66696c65302c75707065726469723d2e2f66696c65312c00e6aa53ebaa0c0fad5895205c4bf21e99072d3ce7315f946b174c91f5eb368bef6721e5b83e1862155f521fde3df533"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x48cc00, 0x40) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="fe"]) [ 773.017393][T20939] VFS: could not find a valid V7 on loop3. 20:35:44 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x4c00, &(0x7f0000000240)={[{@metacopy_on}, {@xino_on}, {@xino_off}, {@index_off}, {@metacopy_off}, {@index_off}], [{@obj_role={'obj_role', 0x3d, '])-*'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:44 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf00, 0x5) 20:35:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, 0xee01, &(0x7f00000000c0)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, 0xee01, &(0x7f00000000c0)) (async) 20:35:44 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000040)='./file0\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469753d2e2f66696c65302c75707065726469723d2e2f66696c65312c00e6aa53ebaa0c0fad5895205c4bf21e99072d3ce7315f946b174c91f5eb368bef6721e5b83e1862155f521fde3df533"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x48cc00, 0x40) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="fe"]) 20:35:44 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf22, 0x5) 20:35:44 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEAck82SETZARvkCJtGkdWHvIAkSJF31fdq9850tnsV8+pk7H9f0wyzvXfP58fX/3f9J7iRR3uRJlkua7zniYvi7w9JcW2ObbiPJBkGNtu2P12qU6L1a0uBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDrK/Oa5GH+L+f9EAAA///4HiGx") 20:35:44 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./file0\x00') mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469753d2e2f66696c65302c75707065726469723d2e2f66696c65312c00e6aa53ebaa0c0fad5895205c4bf21e99072d3ce7315f946b174c91f5eb368bef6721e5b83e1862155f521fde3df533"]) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x48cc00, 0x40) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="fe"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="fe"]) 20:35:45 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x4c00, &(0x7f0000000240)={[{@metacopy_on}, {@xino_on}, {@xino_off}, {@index_off}, {@metacopy_off}, {@index_off}], [{@obj_role={'obj_role', 0x3d, '])-*'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 773.522771][T20952] VFS: could not find a valid V7 on loop3. [ 773.556863][T20955] loop1: detected capacity change from 0 to 65 20:35:45 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000140)='./file0\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000080)=@nullb, 0xee01, &(0x7f00000000c0)) [ 773.588057][T20960] VFS: could not find a valid V7 on loop3. [ 773.623232][T20955] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 773.667670][T20967] overlay: Unknown parameter 'obj_role' 20:35:45 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f627573526c6f7765726469afd0eca5ced3198d65302c75f13065726469723d2e2f6665312c009564392c779c7a4255170e634ee3b261497ea29efb36150b566437f6f6a64042df6f5d32c635016c99953ae3e1f0785e22e6f88d10a0a3d4247407b5ac0ec95d235bcf92115c5405aa818c267303e6f6480000"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:45 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEAVHWyQ6ZICN4gxRp0ziy8pAHiBQp+r7qXv3Okc5mv3pOnYzt/2OSca7//vn8+Or/pvcUL+pwJ8oky3Wd9zR5WeTtKSm2zbEV54Ekw9h2w+63S3VarG51MQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcX5nXJA/zfznvhwAAAP//eEkhsg==") [ 773.769386][T20975] overlayfs: failed to resolve './file1': -2 [ 773.785615][T20977] VFS: could not find a valid V7 on loop3. 20:35:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/loop'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f00000002c0)="58167e85a5722b705562ee540a184e249dd5e725e1318e4f3d93c2743fd9541f2e1bfe724f1699b2851782b391090b3e16708681e178897129cf8b29a543e2b8fc4bc94136be13f9e955771ce92c41358c1c6fb29732df3096204ae6ef80") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x4) [ 773.937815][T20980] overlayfs: failed to resolve './busRlowerdi¯Ðì¥ÎÓe0': -2 [ 773.954831][T20983] loop1: detected capacity change from 0 to 65 [ 773.972163][T20984] bio_check_eod: 34 callbacks suppressed [ 773.972181][T20984] syz-executor.3: attempt to access beyond end of device [ 773.972181][T20984] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 773.991767][T20983] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 774.002242][T20984] VFS: could not find a valid V7 on loop3. [ 774.015559][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 774.015576][ T28] audit: type=1800 audit(1703968545.473:1040): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 774.095614][ T28] audit: type=1800 audit(1703968545.543:1041): pid=20984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1952 res=0 errno=0 20:35:45 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf04, 0x5) 20:35:45 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000140)='./file0\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000100)='./file1\x00') (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) (async) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000140)='./file0\x00', 0x14) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) 20:35:45 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f627573526c6f7765726469afd0eca5ced3198d65302c75f13065726469723d2e2f6665312c009564392c779c7a4255170e634ee3b261497ea29efb36150b566437f6f6a64042df6f5d32c635016c99953ae3e1f0785e22e6f88d10a0a3d4247407b5ac0ec95d235bcf92115c5405aa818c267303e6f6480000"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:45 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbIClkhKwSVSacqIUVi8DjewRN4BG3gwq0bGeEHGsBgMN9X3cvvHDib/eo5dTK2/49Jxrn+++fz46v/m95TvKjDnSiTLNd13tPkZZG3p6TYNsdWnAeSDGPbDbvfLtVpsbrVxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfWVekzzM/+W8HwIAAP//+GUhsw==") 20:35:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/loop'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f00000002c0)="58167e85a5722b705562ee540a184e249dd5e725e1318e4f3d93c2743fd9541f2e1bfe724f1699b2851782b391090b3e16708681e178897129cf8b29a543e2b8fc4bc94136be13f9e955771ce92c41358c1c6fb29732df3096204ae6ef80") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x4) 20:35:45 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf2a, 0x5) [ 774.470504][T20987] overlayfs: failed to resolve './busRlowerdi¯Ðì¥ÎÓe0': -2 [ 774.474286][T20990] overlayfs: failed to resolve './file1': -2 [ 774.479803][T20996] syz-executor.3: attempt to access beyond end of device [ 774.479803][T20996] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 774.498357][T20991] loop1: detected capacity change from 0 to 65 20:35:46 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000100)='./file1\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) move_mount(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', r0, &(0x7f0000000140)='./file0\x00', 0x14) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 774.520866][ T28] audit: type=1800 audit(1703968545.963:1042): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1977 res=0 errno=0 [ 774.527201][T20996] VFS: could not find a valid V7 on loop3. [ 774.550564][T20991] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:46 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f627573526c6f7765726469afd0eca5ced3198d65302c75f13065726469723d2e2f6665312c009564392c779c7a4255170e634ee3b261497ea29efb36150b566437f6f6a64042df6f5d32c635016c99953ae3e1f0785e22e6f88d10a0a3d4247407b5ac0ec95d235bcf92115c5405aa818c267303e6f6480000"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 774.565619][ T28] audit: type=1800 audit(1703968546.023:1043): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1984 res=0 errno=0 20:35:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/loop'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f00000002c0)="58167e85a5722b705562ee540a184e249dd5e725e1318e4f3d93c2743fd9541f2e1bfe724f1699b2851782b391090b3e16708681e178897129cf8b29a543e2b8fc4bc94136be13f9e955771ce92c41358c1c6fb29732df3096204ae6ef80") r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x1000, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions}, {@default_permissions}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/loop'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@uid_gt}]}}, 0x1, 0x0, &(0x7f00000002c0)="58167e85a5722b705562ee540a184e249dd5e725e1318e4f3d93c2743fd9541f2e1bfe724f1699b2851782b391090b3e16708681e178897129cf8b29a543e2b8fc4bc94136be13f9e955771ce92c41358c1c6fb29732df3096204ae6ef80") (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async) renameat2(r0, &(0x7f0000000340)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x4) (async) 20:35:46 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEASmyTXbIBBnBG6RIm8aRlYc8QKRI0fdV9+p3jnQ2+9Vz6mRs/x+TjHP998/nx1f/N72neFGHO1EmWa7rvKfJyyJvT0mxbY6tOA8kGca2G3a/XarTYnWriwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+sq8JnmY/8t5PwQAAP//eJAhtA==") [ 774.699258][ T28] audit: type=1800 audit(1703968546.073:1044): pid=20992 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1984 res=0 errno=0 [ 774.730921][T21009] overlayfs: failed to resolve './file0': -2 [ 774.774740][T21010] overlayfs: failed to resolve './busRlowerdi¯Ðì¥ÎÓe0': -2 [ 774.798953][T21013] syz-executor.3: attempt to access beyond end of device [ 774.798953][T21013] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:46 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00']) 20:35:46 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x140) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 774.826497][T21013] VFS: could not find a valid V7 on loop3. [ 774.832803][T21015] loop1: detected capacity change from 0 to 65 [ 774.834376][ T28] audit: type=1800 audit(1703968546.293:1045): pid=21013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 774.907812][T21015] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 774.971854][ T28] audit: type=1800 audit(1703968546.343:1046): pid=21013 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 775.080803][T21023] overlayfs: failed to resolve './file0': -2 20:35:46 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf1a, 0x5) 20:35:46 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtNw1AUx+G/H7KgckNHwQaswAqsgFxC5wpEAWkyTXbIBBnBG6RIm8aRlYc8QKRI0fdV9+p3jnQ2+9Vz6mRs/x+TjHP998/nx1f/N72neFGHO1EmWa7rvKfJyyJvT0mxbY6tOA8kGca2G3a/XarTYnWriwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+sq8JnmY/8t5PwQAAP//+KwhtQ==") 20:35:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0xcaae1, 0x106) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:46 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x140) (async) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:46 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00']) (rerun: 64) 20:35:46 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf2f, 0x5) [ 775.447512][T21028] syz-executor.3: attempt to access beyond end of device [ 775.447512][T21028] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 775.449240][T21034] loop1: detected capacity change from 0 to 65 20:35:47 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f00000000c0)='./bus/file0\x00', 0x140) mount$overlay(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0xcaae1, 0x106) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 775.489958][T21036] overlayfs: failed to resolve './file0': -2 [ 775.509618][T21028] VFS: could not find a valid V7 on loop3. [ 775.551799][T21034] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 775.591550][T21045] syz-executor.3: attempt to access beyond end of device [ 775.591550][T21045] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 775.593849][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.605738][T21045] VFS: could not find a valid V7 on loop3. 20:35:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0xcaae1, 0x106) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0xcaae1, 0x106) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) 20:35:47 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/Hoik0gApskFWCNkgKwSVSacqxoXtfbyKR9AGLty6kRF+oAEMBvN91b38zoGzO27fUidju35NMs71/4vfn79+Nb2neFOHJ1Em+UrynSbvm3wWSfbNuRXXgSTD2HbDYdmluixWj7oYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO6vzEeSl/m/nPdTAAAA///SviCX") [ 775.660094][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.707886][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.717041][T21047] overlayfs: failed to resolve './file0': -2 20:35:47 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2ae902, 0x240) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f00000001c0)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_off}, {@xino_off}, {@xino_on}, {@metacopy_off}, {@metacopy_on}], [{@flag='sync'}]}) [ 775.763902][T21051] syz-executor.3: attempt to access beyond end of device [ 775.763902][T21051] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 775.783473][T21051] VFS: could not find a valid V7 on loop3. [ 775.790441][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.803692][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.804743][T21051] syz-executor.3: attempt to access beyond end of device [ 775.804743][T21051] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 775.813519][T21053] loop1: detected capacity change from 0 to 65 [ 775.849465][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.858155][T21051] VFS: could not find a valid V7 on loop3. 20:35:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@index_on}, {@metacopy_on}, {@xino_auto}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@default_permissions}, {@metacopy_on}, {@metacopy_off}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@obj_user={'obj_user', 0x3d, '.#{&#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'v7\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}]}) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f04b5e9dcee5d54676465"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 775.871690][T21053] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 775.899092][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.976261][T21029] overlay: filesystem on ./bus not supported as upperdir [ 775.993239][T21059] overlay: Bad value for 'redirect_dir' [ 776.023897][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.051520][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.076977][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.091899][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.100873][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.110130][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.132192][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.141191][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.150873][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.159615][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.171358][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.179560][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.189165][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.197869][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.205835][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.214436][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.225509][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.233980][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.242244][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.250979][T21029] overlay: filesystem on ./bus not supported as upperdir [ 776.259719][T21029] overlay: filesystem on ./bus not supported as upperdir 20:35:47 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2ae902, 0x240) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f00000001c0)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_off}, {@xino_off}, {@xino_on}, {@metacopy_off}, {@metacopy_on}], [{@flag='sync'}]}) 20:35:47 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twgAQBeAX27KSygOkyAZZIcoGWSFyCZ0rEAWwD6swgjegoKUxsviRB0BCQt9X3dO7k25/2n2mSoZm85FkmOoWy9n/vFuP81jeVeFFFEl+k/ylztc2P2M+1Jfu7baQpB+atj+u2pTXw/JZHwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4xX5TvI+zcW0PwcAAP//Ut0gmA==") 20:35:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@index_on}, {@metacopy_on}, {@xino_auto}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@default_permissions}, {@metacopy_on}, {@metacopy_off}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@obj_user={'obj_user', 0x3d, '.#{&#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'v7\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}]}) (async) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f04b5e9dcee5d54676465"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:47 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='\x00']) 20:35:47 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf34, 0x5) 20:35:47 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf22, 0x5) [ 776.469702][T21070] overlay: Bad value for 'redirect_dir' [ 776.476492][T21067] overlayfs: failed to resolve './file0': -2 [ 776.497023][T21069] overlayfs: failed to resolve './file0': -2 20:35:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x100) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') (async) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{@index_on}, {@metacopy_on}, {@xino_auto}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}, {@default_permissions}, {@metacopy_on}, {@metacopy_off}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x8001}}, {@obj_user={'obj_user', 0x3d, '.#{&#'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'v7\x00'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@dont_hash}]}) (async) mount(&(0x7f0000000040)=ANY=[@ANYBLOB="2f04b5e9dcee5d54676465"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:48 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:48 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) open(&(0x7f0000000140)='./file0\x00', 0x2ae902, 0x240) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4030, &(0x7f00000001c0)={[{@index_on}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@nfs_export_on}, {@index_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@nfs_export_off}, {@xino_off}, {@xino_on}, {@metacopy_off}, {@metacopy_on}], [{@flag='sync'}]}) [ 776.530957][T21078] loop1: detected capacity change from 0 to 65 [ 776.591627][T21078] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 776.652225][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.659369][T21082] overlay: Bad value for 'redirect_dir' [ 776.696476][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFtwgAQBdAf27KSyk26FNkgK0TZICsgl9C5AlEA+7AKI3gDCloaI0sIWfQICb1X3d2/4h/O+69UydBsP5IMU91yNZ8tus04j+FNFV5EkeQvyX/qfO/y+5m8Heu7hyT90LT9ad2mvN7LZ7QFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMco8pPkfboX0/wSAAD//1SNIKo=") 20:35:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ftruncate(r0, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 776.760774][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.800125][T21090] overlay: Unknown parameter '18446744073709551615' [ 776.813424][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.851569][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 776.875513][T21094] loop1: detected capacity change from 0 to 65 [ 776.876631][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.923500][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.923621][T21095] syz-executor.3: attempt to access beyond end of device [ 776.923621][T21095] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 776.951755][T21086] overlay: filesystem on ./bus not supported as upperdir [ 776.961663][T21094] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 776.978184][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.000558][T21095] VFS: could not find a valid V7 on loop3. [ 777.016223][T21098] overlay: Unknown parameter '18446744073709551615' 20:35:48 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 777.030519][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszjFqwmAYx+F/kxDaKUu3Dr1Br1B6g16hZKxbJsVBvY9X8Qi5gYOrSyQomgMIgjzP8PG9/Hjh3R23H6mSoVm/JRmmuvni/2/Wrcb/GK+q8CSKJD9JflPnc5Pv9+RlX9/a+Un6oWn7w7JNeVksH3UxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANxfka8kr9O5mPZTAAAA//9UpCCs") 20:35:48 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ftruncate(r0, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) ftruncate(r0, 0x5) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) [ 777.099419][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.109288][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.137915][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.167148][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.201949][T21101] loop1: detected capacity change from 0 to 65 [ 777.210617][T21086] overlay: filesystem on ./bus not supported as upperdir [ 777.236355][T21101] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 777.252542][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf35, 0x5) [ 777.284660][T21105] overlay: Unknown parameter '18446744073709551615' [ 777.292409][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9F/bMtKKjfpUmSDrBBlg6wQuQydKxAFsA+rMII3oKClMbL4kAdAQkLnVO/pd690d8ftR6pkaNZvSYapbr74/5t1q/E9xpsqPIkiyU+S39T53OT7PXnZ1+dWXQeS9EPT9odlm/KyWD7qYgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4vyJfSV6n/2LaTwEAAP//VLsgrg==") [ 777.338482][T21107] syz-executor.3: attempt to access beyond end of device [ 777.338482][T21107] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:48 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf2a, 0x5) 20:35:48 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6296732c6c6f02f67765726469723d2e2f66696c65302c75707065726469723d6e2f66696c65312c00"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 777.388231][T21107] VFS: could not find a valid V7 on loop3. [ 777.399027][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:48 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40, 0x130) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0018079b13e7294b042b97d0c96b18821e48882c2f32d6f7166544175255fbff79e8b6cb66217c85224d45db1a363157f9a3c1a031c5e6362cbba18b555453c2cf56ac67dc690247f1eed1d6ad879411de24bfb0bceabd3247da722ce6639fccd34734f431d4137b8174b62c0622eb3da47b55bca2fcb298b6e4deb7c1b1adac0e5b2a9f"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 777.452404][T21115] loop1: detected capacity change from 0 to 65 [ 777.462620][T21086] overlay: filesystem on ./bus not supported as upperdir 20:35:49 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ftruncate(r0, 0x5) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) ftruncate(r0, 0x5) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) 20:35:49 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9F/bMtKKjfpUmSDrBBlg6wQuQydKxAFsA+rMII3oKClMbL4kAdAQkLnVO/pd690d8ftR6pkaNZvSYapbr74/5t1q/E9xpsqPIkiyU+S39T53OT7PXnZ1+dWXweS9EPT9odlm/KyWD7qYgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4vyJfSV6n/2LaTwEAAP//VNIgsA==") [ 777.507758][T21115] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 777.546455][T21120] overlayfs: failed to resolve './b–s': -2 20:35:49 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6296732c6c6f02f67765726469723d2e2f66696c65302c75707065726469723d6e2f66696c65312c00"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 777.717748][T21128] loop1: detected capacity change from 0 to 65 [ 777.747227][T21133] syz-executor.3: attempt to access beyond end of device [ 777.747227][T21133] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:49 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="776f726b6469723d2e2f6296732c6c6f02f67765726469723d2e2f66696c65302c75707065726469723d6e2f66696c65312c00"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 777.757322][T21128] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:49 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40, 0x130) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0018079b13e7294b042b97d0c96b18821e48882c2f32d6f7166544175255fbff79e8b6cb66217c85224d45db1a363157f9a3c1a031c5e6362cbba18b555453c2cf56ac67dc690247f1eed1d6ad879411de24bfb0bceabd3247da722ce6639fccd34734f431d4137b8174b62c0622eb3da47b55bca2fcb298b6e4deb7c1b1adac0e5b2a9f"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40, 0x130) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0018079b13e7294b042b97d0c96b18821e48882c2f32d6f7166544175255fbff79e8b6cb66217c85224d45db1a363157f9a3c1a031c5e6362cbba18b555453c2cf56ac67dc690247f1eed1d6ad879411de24bfb0bceabd3247da722ce6639fccd34734f431d4137b8174b62c0622eb3da47b55bca2fcb298b6e4deb7c1b1adac0e5b2a9f"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) 20:35:49 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9F/bMtKKjfpUmSDrJBkg6wQuUw6VyAKYB9WYQRvQEFLY2TxIQ+AhITOqd7T717pbg+bt1TJ0KxekgxT3Wz+9/vfLcf3GK+q8CCKJN9JflLnfZ3P1+RpV5/a12UgST80bb9ftCnPi+W9LgYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA2yvykeR5+i+m/RgAAP//V20g6g==") [ 777.875359][T21133] VFS: could not find a valid V7 on loop3. 20:35:49 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000140)='./file1\x00') [ 777.928713][T21140] overlayfs: failed to resolve './b–s': -2 [ 778.083932][T21145] loop1: detected capacity change from 0 to 65 [ 778.087126][T21144] overlay: filesystem on ./bus not supported as upperdir [ 778.118512][T21145] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:49 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000140)='./file1\x00') 20:35:49 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40, 0x130) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0018079b13e7294b042b97d0c96b18821e48882c2f32d6f7166544175255fbff79e8b6cb66217c85224d45db1a363157f9a3c1a031c5e6362cbba18b555453c2cf56ac67dc690247f1eed1d6ad879411de24bfb0bceabd3247da722ce6639fccd34734f431d4137b8174b62c0622eb3da47b55bca2fcb298b6e4deb7c1b1adac0e5b2a9f"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:49 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf2f, 0x5) 20:35:49 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9F/JCGSSk26FNkgKwRtkBWCyqRTleDC9j5exSNoAxdu3cgIf6ABDAZzTvUev3vhbg+bt1TJ2Kxekoxz/d//z/dvv5zeU7yqwoMokrRJvlLnfZ3P1+RpV59aexlIMoxNN+wXXcrzYnmviwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9op8JHme/4t5PwYAAP//13Eg6w==") 20:35:49 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, 0xffffffffffffffff, 0xeb7ac000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:49 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf62, 0x5) 20:35:49 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) chdir(&(0x7f0000000100)='./file0\x00') chdir(&(0x7f0000000140)='./file1\x00') [ 778.441990][T21155] overlayfs: failed to resolve './file0': -2 20:35:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, 0xffffffffffffffff, 0xeb7ac000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:50 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4209c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-@{'}}, {@dont_hash}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 778.501526][T21161] VFS: could not find a valid V7 on loop3. [ 778.535970][T21166] loop1: detected capacity change from 0 to 65 [ 778.582006][T21166] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:50 executing program 3: mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, 0xffffffffffffffff, 0xeb7ac000) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000005, 0x100010, 0xffffffffffffffff, 0xeb7ac000) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) 20:35:50 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40000, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='y']) 20:35:50 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4209c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-@{'}}, {@dont_hash}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:50 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9F/JCGSSk26FNkgK4RskBWCyqRTFePC8j5exSNoAxdu3cgIf6ABDAZzTvUev3vhbg+bt1TJ2PQvSca57n/x+/PXrab3FK+q8CCKJF9JvlPnfZ3P1+RpV59afxlIMoxNO+yXbcrzYnmviwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9op8JHme/4t5PwYAAP//2lEhKw==") [ 778.773366][T21177] VFS: could not find a valid V7 on loop3. [ 778.802944][T21177] VFS: could not find a valid V7 on loop3. 20:35:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6d643000c4323745f00bfd0f71205dee96a562813a89ad2991a71b60b2740c2d719bcffec18314fb337ad44b693efbec16c2f0303af17f8099dbc9dc41fc1121d7dbd2e0f04acee511807caea81e779b05ea19890a2a4557fb246311d1c42444864c80096649280d9f87d6ad329a7fe9a762001db1c29cc34549dc424ebeb1b01d4d574f93c0e3cde546c48600"/159], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x10000, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000240)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@audit}]}) [ 778.823764][T21182] loop1: detected capacity change from 0 to 65 [ 778.892147][T21182] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:50 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf34, 0x5) 20:35:50 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40000, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='y']) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='y']) (async) 20:35:50 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x4209c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-@{'}}, {@dont_hash}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:50 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf85, 0x5) 20:35:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6d643000c4323745f00bfd0f71205dee96a562813a89ad2991a71b60b2740c2d719bcffec18314fb337ad44b693efbec16c2f0303af17f8099dbc9dc41fc1121d7dbd2e0f04acee511807caea81e779b05ea19890a2a4557fb246311d1c42444864c80096649280d9f87d6ad329a7fe9a762001db1c29cc34549dc424ebeb1b01d4d574f93c0e3cde546c48600"/159], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x10000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000240)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@audit}]}) 20:35:50 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9F/JCGSSk26FNkgK4RskBWCyqRTFePC1j5exSNoAxdu3cgIf6ABDAZzTvUev3vhbg+bt1TJ2Kxfkoxz3f/i9+evW03vKV5V4UEUSb6SfKfOe5/P1+RpV59afxlIMoxNO+yXbcrzYnmviwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9op8JHme/4t5PwYAAP//WmQhLA==") 20:35:50 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x40000, 0x0) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB='y']) 20:35:50 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB]) 20:35:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6d643000c4323745f00bfd0f71205dee96a562813a89ad2991a71b60b2740c2d719bcffec18314fb337ad44b693efbec16c2f0303af17f8099dbc9dc41fc1121d7dbd2e0f04acee511807caea81e779b05ea19890a2a4557fb246311d1c42444864c80096649280d9f87d6ad329a7fe9a762001db1c29cc34549dc424ebeb1b01d4d574f93c0e3cde546c48600"/159], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x10000, 0x0) (async) mount(&(0x7f0000000180)=ANY=[@ANYBLOB="2f6465762f6d643000c4323745f00bfd0f71205dee96a562813a89ad2991a71b60b2740c2d719bcffec18314fb337ad44b693efbec16c2f0303af17f8099dbc9dc41fc1121d7dbd2e0f04acee511807caea81e779b05ea19890a2a4557fb246311d1c42444864c80096649280d9f87d6ad329a7fe9a762001db1c29cc34549dc424ebeb1b01d4d574f93c0e3cde546c48600"/159], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x10000, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x20, &(0x7f0000000240)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file0'}}], [{@fowner_eq={'fowner', 0x3d, 0xee00}}, {@audit}]}) [ 779.409693][T21195] loop1: detected capacity change from 0 to 65 [ 779.461076][T21195] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1twlAUx9F/bMtKKjfpUmSDrBBlg6wQuUw6V0EUQMcwrMII3oCClsbI4kMeAAkJnVO9p9+90t0eNm+pkqFZviQZprr/2e/PX7cY32O8qsKDKJJ8JflOnfdVPl+Tp119auvLQJJ+aNp+P29TnhfLe10MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALdX5CPJ8/RfTPsxAAD//9qtITM=") 20:35:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x90) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:51 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./file0\x00', 0xb6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4003, 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) pread64(r1, &(0x7f0000000140)=""/21, 0x15, 0x4639) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 779.714653][T21217] loop1: detected capacity change from 0 to 65 [ 779.758514][T21217] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 779.785543][T21219] bio_check_eod: 3 callbacks suppressed [ 779.785560][T21219] syz-executor.3: attempt to access beyond end of device [ 779.785560][T21219] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 779.837119][T21219] VFS: could not find a valid V7 on loop3. 20:35:51 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf35, 0x5) 20:35:51 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB]) (async) 20:35:51 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9G/PhBJGjXpUmSDrBCyQVYIKpNOVUIK2/t4FY+gDVy4dSMjLIwGMBjMOdV7/O6FuztuX1InY7t+TDIu9b9/318//Wp6T/GiDneiTPKR5DNNXjd5f06KfXNuT8U8kGQY2244/Hep5sXqZicDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNWVeUvysPyXy34KAAD//9UDILU=") 20:35:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x90) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x90) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:51 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) creat(&(0x7f0000000100)='./file0\x00', 0xb6) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4003, 0x20) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) pread64(r1, &(0x7f0000000140)=""/21, 0x15, 0x4639) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:51 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf8d, 0x5) [ 780.342570][T21228] syz-executor.3: attempt to access beyond end of device [ 780.342570][T21228] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 780.372354][T21228] VFS: could not find a valid V7 on loop3. 20:35:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x90) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x90) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 780.418442][T21236] loop1: detected capacity change from 0 to 65 [ 780.434720][T21231] overlay: filesystem on ./bus not supported as upperdir 20:35:51 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x20) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB]) [ 780.459340][T21236] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:52 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) creat(&(0x7f0000000100)='./file0\x00', 0xb6) (rerun: 32) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) openat(r0, &(0x7f0000000040)='./file0\x00', 0x4003, 0x20) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x200000, 0x0) pread64(r1, &(0x7f0000000140)=""/21, 0x15, 0x4639) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9G/PhAJKdSkS5ENskLIBlkhqEw6VQkpbO/jVTyCNnDh1o2MsDAawGAw51Tv8bsX7u64fUmdjO36Mcm41P/+fX/99KvpPcWLOtyJMslHks80ed3k/Tkp9s25PRXzQJJhbLvh8N+lmherm50MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdX5i3Jw/JfLvspAAD//1UWILY=") [ 780.618509][T21244] syz-executor.3: attempt to access beyond end of device [ 780.618509][T21244] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 780.636121][T21244] VFS: could not find a valid V7 on loop3. 20:35:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x140) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 780.683316][T21248] loop1: detected capacity change from 0 to 65 [ 780.693691][T21249] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 780.730570][T21248] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 780.734811][T21252] syz-executor.3: attempt to access beyond end of device [ 780.734811][T21252] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 780.770460][T21252] VFS: could not find a valid V7 on loop3. 20:35:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pw1AUx9G/PhAJBNSkS5ENskLIBlkhqEw6VQkpbO/jVTyCNnDh1o2MsDAawGAw51Tv8bsX7u64fUmdjO36Mcm41P/+fX/99KvpPcWLOtyJMslHks80ed3k/Tkp9s25PRXzQJJhbLvh8N+lmherm50MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdX5i3Jw/JfLvspAAD//9UaILc=") [ 780.996707][T21261] loop1: detected capacity change from 0 to 65 [ 781.024291][T21261] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:52 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf62, 0x5) 20:35:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x140) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:52 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73916c63861e8bc41217cd0c8da499ebf76ca5bde6f54a26d49dd6fbbd09c184fc246190d15df2511ef397bcdb1363d7fd047b59a2729e2d70cfb8c2e4d5124281bb85ba2b4b0190dea2393ad64a0f5508a0d47a3f2c8c74bdf95dbdd84046b3ab3eed6fec2d8a88d3af6b059b7a2e285da065031dfceeed08a721d6936500"/137]) 20:35:52 executing program 4: mkdir(&(0x7f0000000040)='./file1\x00', 0xa4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:52 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSakSZENApkgZIOsEFQmnaoYF7b38SoeQRu4cOtGRlgYDWAwmHOq9/juhbs7bl9TJUOzfkoyzHX/i9+fv241vsd4UYU7UST5SvKdOm+bfD4nD/v63D5epoEk/dC0/WHZppwWy5udDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABXV+Q9yeP8X8z7KQAA///XoCDx") 20:35:52 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf95, 0x5) [ 781.352993][T21265] syz-executor.3: attempt to access beyond end of device [ 781.352993][T21265] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x140) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x140) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) [ 781.411230][T21269] loop1: detected capacity change from 0 to 65 [ 781.425757][T21265] VFS: could not find a valid V7 on loop3. [ 781.439556][T21269] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:52 executing program 4: mkdir(&(0x7f0000000040)='./file1\x00', 0xa4) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x100) (async) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x100) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73916c63861e8bc41217cd0c8da499ebf76ca5bde6f54a26d49dd6fbbd09c184fc246190d15df2511ef397bcdb1363d7fd047b59a2729e2d70cfb8c2e4d5124281bb85ba2b4b0190dea2393ad64a0f5508a0d47a3f2c8c74bdf95dbdd84046b3ab3eed6fec2d8a88d3af6b059b7a2e285da065031dfceeed08a721d6936500"/137]) 20:35:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSakSZENUmSBkA2yQlCZdKpiXNjex6t4BG3gwq0bGWFhNIDBYM6p3uO7F+7uuH1NlQzN+inJMNf9L35//rrV+B7jRRXuRJHkK8l36rxt8vmcPOzrc/t4mQaS9EPT9odlm3JaLG92MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXZH3JI/zfzHvpwAAAP//V7Mg8g==") [ 781.569529][T21278] syz-executor.3: attempt to access beyond end of device [ 781.569529][T21278] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 781.610875][T21278] VFS: could not find a valid V7 on loop3. [ 781.642691][T21281] syz-executor.3: attempt to access beyond end of device [ 781.642691][T21281] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x146) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x26) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/221, 0xdd) [ 781.674356][T21281] VFS: could not find a valid V7 on loop3. [ 781.681789][T21282] loop1: detected capacity change from 0 to 65 20:35:53 executing program 4: mkdir(&(0x7f0000000040)='./file1\x00', 0xa4) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 781.771083][T21282] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x146) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x26) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/221, 0xdd) 20:35:53 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf85, 0x5) 20:35:53 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf9a, 0x5) 20:35:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSakSZEN0mSAkA2yQlCZdKpiXNjex6t4BG3gwq0bGWFhNIDBYM6p3uO7F+7uuH1NlQzN+inJMNf9L35//rrV+B7jRRXuRJHkK8l36rxt8vmcPOzrc/t4mQaS9EPT9odlm3JaLG92MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXZH3JI/zfzHvpwAAAP//17cg8w==") 20:35:53 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1, ']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@metacopy_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_off}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, '%'}}, {@obj_role={'obj_role', 0x3d, 'nfs_export=off'}}], 0x5c}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./bus\x00', r0, 0xee01) 20:35:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/route\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) mkdirat(r0, &(0x7f0000000040)='./bus\x00', 0x100) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000240)=ANY=[@ANYBLOB="73916c63861e8bc41217cd0c8da499ebf76ca5bde6f54a26d49dd6fbbd09c184fc246190d15df2511ef397bcdb1363d7fd047b59a2729e2d70cfb8c2e4d5124281bb85ba2b4b0190dea2393ad64a0f5508a0d47a3f2c8c74bdf95dbdd84046b3ab3eed6fec2d8a88d3af6b059b7a2e285da065031dfceeed08a721d6936500"/137]) [ 782.261608][T21298] loop1: detected capacity change from 0 to 65 20:35:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (rerun: 32) creat(&(0x7f0000000040)='./file0\x00', 0x146) (async, rerun: 64) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x26) (rerun: 64) readlinkat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/221, 0xdd) [ 782.322248][T21300] overlay: Unknown parameter ' ' [ 782.336526][T21298] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:53 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x204600, 0x112) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:53 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSakSZENUqYN2SArBJVJpyrGhe19vIpH0AYu3LqRERZGAxgM5pzqPb574e6O29dUydCsn5IMc93/4vfnr1uN7zFeVOFOFEm+knynztsmn8/Jw74+t4+XaSBJPzRtf1i2KafF8mYnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDVFXlP8jj/F/N+CgAA//9X4SD2") 20:35:53 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1, ']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@metacopy_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_off}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, '%'}}, {@obj_role={'obj_role', 0x3d, 'nfs_export=off'}}], 0x5c}) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000040)='./bus\x00', r0, 0xee01) 20:35:54 executing program 3: r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x640001, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x20004, 0x5, 0xfffffffd, 0xff, {0x1, 0x8, 0x4, 0x4000000003, 0x7, 0x1, 0x100, 0x2bbc3d75, 0x8, 0x2000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd735}}, {0x0, 0x4}}}, 0xa0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300007b6d7ee986680ebbe6a75cda12e5dc9029f7f57d51b42f5890b3dfe8a7506b0a51c10a58e51945df378d2bb1884a1a7fa6dd81e9bcfb32a5ec83dbf99e118773ca266e44cd0b74ad8b2c9d3c4e38b7e36882b0ade4513f33eb0c49c79dace5d8d05e93944b2fca7cef8e9afb03a2ef7f72cf4e2d62b17f7d79c86b0328b79f1c1c7f1bf93a80f615d75"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 782.595969][T21321] loop1: detected capacity change from 0 to 65 [ 782.613737][T21325] overlay: Unknown parameter ' ' 20:35:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x204600, 0x112) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x204600, 0x112) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) [ 782.650444][T21321] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:54 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='workdir=./bus,lowerdir=./file0,upperdir=./file1, ']) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x0, &(0x7f00000002c0)={[{@metacopy_off}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@xino_off}, {@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_off}], [{@seclabel}, {@obj_role={'obj_role', 0x3d, '%'}}, {@obj_role={'obj_role', 0x3d, 'nfs_export=off'}}], 0x5c}) (async, rerun: 64) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) chown(&(0x7f0000000040)='./bus\x00', r0, 0xee01) [ 782.754075][ T28] audit: type=1800 audit(1703968554.213:1047): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 782.848663][ T28] audit: type=1800 audit(1703968554.223:1048): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 782.952651][T21337] overlay: filesystem on ./bus not supported as upperdir 20:35:54 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf8d, 0x5) 20:35:54 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSakSZEN0qcK2SArBJVJpyrGhe19vIpH0AYu3LqRERZGAxgM5pzqPb574e6O29dUydCsn5IMc93/4vfnr1uN7zFeVOFOFEm+knynztsmn8/Jw74+t4+XaSBJPzRtf1i2KafF8mYnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDVFXlP8jj/F/N+CgAA///X/CD5") 20:35:54 executing program 3: r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async, rerun: 32) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x640001, 0x0) (async, rerun: 32) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x20004, 0x5, 0xfffffffd, 0xff, {0x1, 0x8, 0x4, 0x4000000003, 0x7, 0x1, 0x100, 0x2bbc3d75, 0x8, 0x2000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd735}}, {0x0, 0x4}}}, 0xa0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (rerun: 64) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300007b6d7ee986680ebbe6a75cda12e5dc9029f7f57d51b42f5890b3dfe8a7506b0a51c10a58e51945df378d2bb1884a1a7fa6dd81e9bcfb32a5ec83dbf99e118773ca266e44cd0b74ad8b2c9d3c4e38b7e36882b0ade4513f33eb0c49c79dace5d8d05e93944b2fca7cef8e9afb03a2ef7f72cf4e2d62b17f7d79c86b0328b79f1c1c7f1bf93a80f615d75"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:54 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./file2\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_off}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@uid_lt={'uid<', 0xee01}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="c9"]) 20:35:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open$dir(&(0x7f0000000040)='./file0/file0\x00', 0x204600, 0x112) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:54 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf9b, 0x5) [ 783.262065][ T28] audit: type=1800 audit(1703968554.713:1049): pid=21347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 783.288983][T21348] loop1: detected capacity change from 0 to 65 20:35:54 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)=ANY=[@ANYBLOB="73796e632c00dd8d69b526074f91376cace094ad0c6fc2b1d4a62af077b4df2a68f027e4fc9a440837f1f8eaa50a0848f8234cad145c48948b819390f0d9c7c6413b044b856fc3aff07f89afb4cd2cc8c42da1b92fc3b82fa208895e0f66581d72f8f62a56379ba78e72cc3824770e159f3f8c1a78e7d6668f3ae5bb6c0fec20"]) [ 783.309393][T21354] overlayfs: failed to resolve './file0': -2 [ 783.315736][T21346] overlayfs: missing 'lowerdir' [ 783.328079][T21348] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:54 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000100)='./file2\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_off}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@uid_lt={'uid<', 0xee01}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="c9"]) [ 783.351279][ T28] audit: type=1800 audit(1703968554.723:1050): pid=21347 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1964 res=0 errno=0 20:35:54 executing program 3: r0 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) sendfile(r0, r0, 0x0, 0x108000015) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x640001, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x20004, 0x5, 0xfffffffd, 0xff, {0x1, 0x8, 0x4, 0x4000000003, 0x7, 0x1, 0x100, 0x2bbc3d75, 0x8, 0x2000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd735}}, {0x0, 0x4}}}, 0xa0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300007b6d7ee986680ebbe6a75cda12e5dc9029f7f57d51b42f5890b3dfe8a7506b0a51c10a58e51945df378d2bb1884a1a7fa6dd81e9bcfb32a5ec83dbf99e118773ca266e44cd0b74ad8b2c9d3c4e38b7e36882b0ade4513f33eb0c49c79dace5d8d05e93944b2fca7cef8e9afb03a2ef7f72cf4e2d62b17f7d79c86b0328b79f1c1c7f1bf93a80f615d75"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) (async) sendfile(r0, r0, 0x0, 0x108000015) (async) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x640001, 0x0) (async) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000200)={0xa0, 0x0, 0x0, {{0x3, 0x3, 0x20004, 0x5, 0xfffffffd, 0xff, {0x1, 0x8, 0x4, 0x4000000003, 0x7, 0x1, 0x100, 0x2bbc3d75, 0x8, 0x2000, 0x0, 0xffffffffffffffff, 0x0, 0x8, 0xd735}}, {0x0, 0x4}}}, 0xa0) (async) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f00000001c0)=[r0, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, r3, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x9) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="2f6465762f6c6f6f70300007b6d7ee986680ebbe6a75cda12e5dc9029f7f57d51b42f5890b3dfe8a7506b0a51c10a58e51945df378d2bb1884a1a7fa6dd81e9bcfb32a5ec83dbf99e118773ca266e44cd0b74ad8b2c9d3c4e38b7e36882b0ade4513f33eb0c49c79dace5d8d05e93944b2fca7cef8e9afb03a2ef7f72cf4e2d62b17f7d79c86b0328b79f1c1c7f1bf93a80f615d75"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) 20:35:54 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSZdCNkgK4RskBWC0iWdqhgXtvfxKh5BG7hw60ZGWBgNYDCYc6r3+O6FuztuX1IlQ7N+SjLMdf+L3++/bjW+x3hRhTtRJPlM8pU6b5t8PCcP+/rcfl6ngST90LT9YdmmnBbLm50MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdX5D3J4/xfzPspAAD//9o0ISs=") 20:35:55 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)=ANY=[@ANYBLOB="73796e632c00dd8d69b526074f91376cace094ad0c6fc2b1d4a62af077b4df2a68f027e4fc9a440837f1f8eaa50a0848f8234cad145c48948b819390f0d9c7c6413b044b856fc3aff07f89afb4cd2cc8c42da1b92fc3b82fa208895e0f66581d72f8f62a56379ba78e72cc3824770e159f3f8c1a78e7d6668f3ae5bb6c0fec20"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)=ANY=[@ANYBLOB="73796e632c00dd8d69b526074f91376cace094ad0c6fc2b1d4a62af077b4df2a68f027e4fc9a440837f1f8eaa50a0848f8234cad145c48948b819390f0d9c7c6413b044b856fc3aff07f89afb4cd2cc8c42da1b92fc3b82fa208895e0f66581d72f8f62a56379ba78e72cc3824770e159f3f8c1a78e7d6668f3ae5bb6c0fec20"]) [ 783.583003][T21366] overlayfs: missing 'lowerdir' [ 783.586000][ T28] audit: type=1800 audit(1703968555.043:1051): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 783.610695][T21364] loop1: detected capacity change from 0 to 65 20:35:55 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chdir(&(0x7f0000000100)='./file2\x00') mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_off}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@uid_lt={'uid<', 0xee01}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="c9"]) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chdir(&(0x7f0000000100)='./file2\x00') (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_off}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, 'overlay\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/'}}, {@uid_lt={'uid<', 0xee01}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="c9"]) (async) [ 783.639093][T21364] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 783.668957][ T28] audit: type=1800 audit(1703968555.053:1052): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 783.702350][ T28] audit: type=1800 audit(1703968555.073:1053): pid=21367 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 783.799554][T21374] overlayfs: missing 'lowerdir' [ 783.840346][T21374] overlayfs: missing 'lowerdir' 20:35:55 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf95, 0x5) 20:35:55 executing program 3: creat(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465f62f6c6f6f7030003c8ea8de6db86111fe273a623e3dbe876a38f2ace3bef898485e91bc0fd6ba9a90c9dcdecce08cc76b1b0719b149454d4f85a9ace13db12ab0aa051c1a606e3afd6c2eb3f4eaf8800f11023b00000000000000006804000000000000008d0e57b4674bb60d4fe79d900fd407f80cb5a15e750080000069c971aeca70000000000500"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x4400, 0x0) 20:35:55 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFtwlAUhtE/tmUllZt0KbJBVoiyQVaIXIbOFYgCGIQNWIURvAEFLY2RJQt5ACQkdE71nr57pXu8HD5SJUOzfUsyzHXL1f/fotuM7zHeVOFJFEl+kvymzucu3+/Jy6me2n4aSNIPTduf123KabF82MkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHdFvpK8zv/FvF8DAAD//1sfIUo=") 20:35:55 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, '{.[:'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@flag='async'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'J'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@fsname}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@uid_eq}]}) 20:35:55 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000100)=ANY=[@ANYBLOB="73796e632c00dd8d69b526074f91376cace094ad0c6fc2b1d4a62af077b4df2a68f027e4fc9a440837f1f8eaa50a0848f8234cad145c48948b819390f0d9c7c6413b044b856fc3aff07f89afb4cd2cc8c42da1b92fc3b82fa208895e0f66581d72f8f62a56379ba78e72cc3824770e159f3f8c1a78e7d6668f3ae5bb6c0fec20"]) 20:35:55 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfc8, 0x5) [ 784.198320][T21387] loop1: detected capacity change from 0 to 65 [ 784.210391][T21388] overlay: Unknown parameter 'pcr' 20:35:55 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, '{.[:'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@flag='async'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'J'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@fsname}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@uid_eq}]}) 20:35:55 executing program 3: creat(&(0x7f00000000c0)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465f62f6c6f6f7030003c8ea8de6db86111fe273a623e3dbe876a38f2ace3bef898485e91bc0fd6ba9a90c9dcdecce08cc76b1b0719b149454d4f85a9ace13db12ab0aa051c1a606e3afd6c2eb3f4eaf8800f11023b00000000000000006804000000000000008d0e57b4674bb60d4fe79d900fd407f80cb5a15e750080000069c971aeca70000000000500"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x4400, 0x0) 20:35:55 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x1020000, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0xc901}}, {}, {@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xcced}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '.'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40080, 0x16a) mkdir(&(0x7f00000001c0)='./bus\x00', 0x80) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="99d6b278b47d1992db448f605dd3ba95a99d95840dbdda305162e9bb52b1a4c2d7dd094a41d253842cf8ba4f3bfdbd09422444294c285dc3a5ca35f40be96b61b84fe2936f50bee2dfcea0bd7ef58ea6b94b9b057b54fee100b5f404aef3d0de1f19ae642f301da2c0203064ccf53a91980800b987799081c1e428e10bab7f1ab810e946eb583cfd5921e53104bd9a3788e64da27f07b74f1f2c6ae40938901b594625b850068051238b25c573eccec93ec8da", 0xb3}, {&(0x7f00000005c0)="948616d456de212ec764d25f85ab3fbd357340faadfc91c278068cf5dd8faf87b3709ae110db025bb07ceaeb4c5f82d5d4df432b64e7eadb2961f40532389f06d6e63dd0ed3ff684f2b5c9904a1b2ef95e4c5b2358d8810f52ad86490366d4592214132ae760d0230dcc63e4dbbd87decf93d12ff0527178b8f3530f4ab62bd58060f4efa98ef566ed35a4872c7b1a441202cdad132d18579680be00e46d1503e1afbba794e1f9834014167cfa8c850503b3af2d7eb93250acffa2d849516db88e2c09183ea25dc31f90c934af8e2b53b1b5f9cff9c72198c5f7028e777980d113a80d4641e86e8b824e16b24e3eca6303f0eb8168be877788f107da9f4393700b1cc85c0c186f26e29e8f2105442d233ea435b7b374e87fed7a8f400a973491d869e885d1e00df59cf34e93fbb61ea10779d661a7556e2cc131bf0828c03ed70972fb627d7a234ea2e8a9f0915f8d25f1ba32212291ba24b02861b3ef03a7b9839b60d6921477bafbe042bd5036ece848328b7d0532a6b7a4ce18047b61b986e339878589f505e3a3ee2b03e727a4a599d593cd6e162eb2143bcf72a4971f0f0cfcd506dfacf7cc0a2f56707898eb2e96bcf44a07f2b4b318eab1ac01084a5f36551699e9d06ad61284ddac238a23c03cba25c36879a01acd61b50d5dfcb7881756802ec304b18cf97d46e422e7c93eb3f277ad03c0ddfc323b99b2b8ca92c94504a6e08517b25856a80bb63ece74b013cb3cf8c1d90daab87ba78fda8dbdbea500885d98be20689aa58a7987f6ef708f318acdb7d59da72d24da9c357abed5f127a64046b18dfe481b78e4c078c6bf292cfd2028f066f217e0b083e33c7c22ac088f89ff44c081888388e75f2fc0dd2dc4960ed223d6f0c187d5204c00bda058e3139c58088e56348fba6564fd378e652765ec6d74d12e4498f35d3b872e7b8cd7a6810d659a2067decb198dd2907e5c681f2ede60bb4979917959d74df20e43a9e7dbabd715c17f7cce8d6988e619f2078406eb5a4923ca669327634e5fa32031aacf515ddf8e4f71e8e1887840c98be404935cdc5c480cb77e2b5237eaaaee6f990c8efc431e1148b8943f3dd0967df4312599b7675e57f9815407ab8702dd1ce47b9b1f9d2d3a81b0561e05e06e739ecf8125b957e6609c3402f207c702199d78ccb5256020f544d728db00dec1c6dca80effce2916f04ff5172854e9d2dbf1890a3998164990a701b6c71160bac6e1bf42fee8c3aefb18c3927e93c09846154a67eee01972e40f1ad0d66ba1c41a2e45bbf1c7345088f397e225a3d541006189e26691c27316ed8885bcc9ac2035bff8c813c7894a49c992bb1d358b141abd3eb142561bb72abc4ec990c3353a40cf27ec0e518fba90988049ef230fca527a8d0efbf13eec11f5697a4f07f4f979b4fe19e57f10f4c91ee48d79a8884dc561ebe33f53a867786328f6c33d668067e2b9a0fe43b05c09c2f4ba9c899d06eb938d1af6038e7ae335a5a4df2b6cc4bd02df4cf43c396b8eef8e0e53d58df8c5f3cc9386d6455063a68056e9bc467af5904a7b8c9322935b8ef78ff36ec924c66dbc2e25b12680bffc0534e69c04fc9d18ea4ae44642cfc53736db4384cf05bb4e3f58011e505d5486924a886d0450cad1e3013c8c874697beac504b944092ebc06f8b6c7fc67c6c00d8585bec62ff6dfe82b1d3cd83da54c7716bc239eb5828c448f80dd44912cdd1b0f1eadd13b8d8b0cb11d51947dc3e00dc9bc94d648e1d546b7ff49ca8c3494afde44726b274f1b867fb83cc1f82840453a4017d8280d120350c7e7fa077d39538725f0a27e4b5e58fca44fb9d22f8f1bcff44b54ca9294fbd657813052fd8d7505e4283a2900e709979753f2658e0765d08f33ecf8cf567d131aad4ca89dc77d11786939f19ddca87286fe21e5208e2d1d38dd36734e98f9cd978d0b233db142336cdc3044619f79255e68d107e7940500ddf6e9fe2188294866981737d50758e55e024f342a38ad064115804b0f9888885524f701ded429e99279dac7d8a6ee787502a56066f94ce6f5a9596b6cc611800ac44be3ef1f708bb49e9171481557d397d22f3b139e70647e1d082442a91642e85ab765ace2217baf1ee8c2bec59d1b3066b127ebd620f5d4729ec30b6e02d23881d67b3d67b9ace8c454036700d8a0f6eae9db73fcae948d407c9e940655055a8eb1e41a2f497d22060b3c7df47ba4cc279f08c79503bcbb708ce95c858213f81524df50b9c7e946bb32c374e49f1ad10e7384840f480b6b1bac993a8c1044ac00fe1657ac8adc67c184a96b530d99511f453ce16a3309b1c292cbbf6d0cebfbf6acaefd9a61289587407f3b41fe52f384b325ce4f8ce88c2a3ec026ddf84e12b6e1cb936701e573b57a968577ade714198ca65ae37be2a2d4930080c81fedaf5194e1c742bc2f421801655b2d296fe9db1405c57db42ec028cb9dc4cb831c1bd4c27af0078400865312dd6cabddbec9c89fc412cb2235447793423ea99a91d4847fefe3f2cee7cdc0da659308e39890fea1cd5b1582c6d9b102094fde2794c495906c67b88c2f61c1d1a97baf0563b33bba4f6f16e056ceb683df1c8bce2839a27070de0e5d030685fcb17e0c53d696633c63fae729701618b36b13ca1eef32a926709697601ff3551319c28e0336454e7f4974a0a92f2c2193a4288722f1d4b5d9e7d1dd409a8af21580493462e114262fbd85f722088c97fcde76a1128d86e08d828c4b629785d8c2dc97a3ef70a75ca87f983bd988e3a5aaab14a294e6c45a8cdb4f54b1137fbe07d0c1d2fb8cc9efa5f67140680a88131ff8f9603df756c3c9359deeb62ac6e76090951da0e12e6b18fcb39d1dd52616ae2275e52422e3c0da6e984ca4c4af2f3f6bf92d121fa479e4d6d930d9c481273c372ba488fe5cdce290dcdba147657b324a2e97b1bf66e3c0b3fae82cfa3c69e6145281e1fdce6aa1573180928f75b7794294b996fe9efada5c470f042175a559082f80ee8c586cde69cba49402447a1c1a6bfc6b15ca1c84aa7d352bed506ff3b72027936db4f7228968be2dcb35275e01a8942bef2973bea17ce59a0c0b07db7205db586b06490580675de078b3bf6b71c315bbe38c0a751191c456cda332720d58a7f88b71a572f02c2318414a684f15fe223bf5f609977e45725e62d60279b73dcecee773668ea380e2690d91d8825b3af7c3318c19f997851ad74244f5b7976e9d5bc3980036bc53b582819a90ad33aa13dc483c70773552143f57a9422fb024190ac161396bac2995502bdc928c9764450472c970e2b81e90fa61603108f705b1b3dd94296ec0bb8ee8b35d5f3752c02040bbc65e2ec42253c5e6f70909a7ec3f5b6b730edabe4f15e6c1f2500aec1113197f8b0a2a398f5e7b7dc356835bf893813fab6a78ec62f9648dbf32196f56358b46996f3691904914ec71b8f67a8d66cc6591a9e49cafc9f8a08207c9498e69b1eece32acf06780ce0691772a7f3be1f4fe9cb27b1ba8f1d44a22c65c348b5bee3dd9e0eee790c5424462ee1c679d112400abcfe1694b861cd954fb92c2fba0bfd31da32414aab2faf5959eb708fc5d754a1209ac75e2e7b26d2b17c24f3b5e0e0320308fdef83d3e6627353bb1d64efa9092c94bb68a0327bf05a112f1931f95c4a1073fecec81afe83efc9b75f7923c6b4692a68096d4bbb148c0c1ae14b692d238ad26125dd9540ec9fb81bd37f443248c90ccc700c72875063664f2d50e4effe567e5b3ef28ea77e92e872690aa01765c6daaf7052095e0e8f590a1f3aa42e8237c1e73c49fe3a0e7a5566bf1483359a14ac6681232d89aa3fafb9b2424655b506bf63b9ba3fb7e45db0fe8ca7ce61a4bacac78a50b931270ad81967ba707cf0b116cf840c4ef34ba267d7c5c2ec99334fc7a47a5be80776bc0efb50bc9005d746a615e5ee58217e1207da89e441bb61c13338b628b3bbea4f1007a1eb8310144971b3e4a39a5659f9d152af733e97fb89330abf2007e88de665b39e41234f09a2a378138d8660db18f5850b05207193b2faac0df559f31c0c147c66dbac3c885403a2b9b7e2700b70058303b708a3ae26f5979c7e05aeeaf673f2bd1143c8fa4f3c61eeb401ec1b735f6990befcfb03951040f494f54b70a65b5eb6ba51cdae74f25c997ff91f611f1fca663a777d711823cda02ad4341002ef8168c3203f9b7d00ee8cbe819cf93ada2e7ca7f9fd85a3b2a45518275edce40c7210be3fc711465d63bc710795668f4097a29fcd6a329840ddfe1b5429e66c395d3b1e76553027b8e0a90caaaf230623b7d1bc82ea1f768f711284786142fba7a0c024022e9f8c913ab0c3081cd25cf703c5c03a6ddc3cfa2b4301e73d82bebd1a086d571b360978ad1613454e166eaddf84b0822d0c08b93831745b1caf9544243f1703524bc5f344583da4b24c077ca4423e304e5c221b61d035ddb4218894f938e4973aa7b623e51b706567223db29157adba4df48e0aa401202ff2462da2789b8a1b460b7693df090e93783b395ebbd8da800637d8dcfbc9e43b0dac6e3a0016d0689a08437a49aa356bc0d4c81dc300acf66808a84971fbff45d1006089077f6197f75403fff197e3bfa5f1c557757cb1d5a58eecf6ceb5c6cf1625c09a5fd246cd50a2f4807d26fd5563a33cd2f871be54106adc8e3a04d69554eed3c0d6fa171238f0dfda492c523b5cbff3fa34488f86a7e86a541b8a69f43026ab765ebe353d2b1ff20c7f3891f533dfea9682dcf4078a6bfdaef209fe1bbc0a256afe9b15b55a74b31e9e268a96da2eb76fcd0981d265137ffea96d0bf88f015d0f1d8fc64e4597cdd5ff056b8b36adf3da446c767c93c4dac0e2052259f24e88f150d27afcc4f098071e3188810b0a3cb2ae7dbcfbaef90622a1d56202b0854fb6c5978416095a3a7b96b3ac55467db2f13eb71e7316c1fedb17c8afe455b747bbdbd44474f0b744093725fceb60445fc91ac57b5c9a8d6443f3868c2f304b4d240d30cd7e83198048904eaee63135448b009a49c43f68c6c120a7fb32666692bd3bbc91fdef8e6acb1bf985738f8fc9023d7ef31597dca383306153b11741cb650af2875697ee46cd118d91ff5bc0674218fd8ca06fc35fd00a9b8dbadc9f1847d1a1524937b124de57feb3ae3fc22ddd3cbb1effd4d1032431239febd9d5d65730f20caf72f1a4b9ae6c7627cbecf861d4deca332b8292f91801eda90df56a0ee2b2c492b29c3c87d7f64b707061fb67760055a808cca9d039928da431a04e61f2c5800e4774ec4b7bde7a144fb701f4f803c7d3732b769c4ccb906077cf12ab2a224f591bcde4e3f6882d17079369d812888f92697fc2e90b5854ee318ee7d765a4e0c2681021444c021a056a6aa908fce8b1d4b65cf67c127489bc929f7044a1d103e4cc82e3106c5512bc062e8456bee7b2fa0697d7dbc61a3e5773ef18d0819e15eb699bdb951b1421f8a2dc9841e1bbc72de584e51583d75ca7241b5ac7145ecbdc436343dcf608f0f05e187210b98ff563b314405fe22d94089d138304d753cd56f0b3ac4c50835efbaaccd00aa0c078b397dc46c0431861a64e7662571f0a1bf5521e8e1231aaf62088f78cedead6b94efdb04b2e90d512077a95cbf9028bb5b01cbbeb48f7c32967d3e8101c6a7398e521c67296b886d60916acc71f84bf520d6b410176a1b856c70e6aaa5718a09ee21df58dc7e918e11f658f84baab8d8453820187e01b94d95ff86d40955421a08fbb6e33c21aae", 0x1000}, {&(0x7f00000015c0)="ba216f9f81ffba2ef0d78c2fbecad03a4590aefbbf4419a5ca5efad81c3a68734dea5f2a035ca3b24aa10f00c3059f9cd2b93395fcfaaf78cedfcf1ba8435144ef01a671af3a4b4765cd756331bd8edd69a65b625e230b450a256384f13a5756f1d6adcd4b8de5f21edf5b5868a123976615c082cb6965339337dcaea434763d7632dafd281610a1dea9", 0x8a}, {&(0x7f00000001c0)}], 0x4) [ 784.248809][T21387] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:55 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFtwlAUhtE/tmUllZt0KbJBVoiyQVaIXCadqyAKYBA2YBVG8AYUtDRGFhbyAEhI6JzqPX33Snd/2r2lSoZm/ZJkmOv+F78/f91qfI/xqgoPokjyleQ7dd43+XxNng71pZXbaSBJPzRtf1y2KafF8m4nAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDNFflI8jz/F/N+DgAA///bIyFL") [ 784.421641][T21397] overlay: Unknown parameter 'pcr' 20:35:55 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfsdef={'smackfsdef', 0x3d, '{.[:'}}, {@pcr={'pcr', 0x3d, 0x13}}, {@flag='async'}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@obj_user={'obj_user', 0x3d, 'J'}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@fsname}, {@smackfstransmute={'smackfstransmute', 0x3d, 'lowerdir'}}, {@uid_eq}]}) 20:35:55 executing program 3: creat(&(0x7f00000000c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000200)=ANY=[@ANYBLOB="2f6465f62f6c6f6f7030003c8ea8de6db86111fe273a623e3dbe876a38f2ace3bef898485e91bc0fd6ba9a90c9dcdecce08cc76b1b0719b149454d4f85a9ace13db12ab0aa051c1a606e3afd6c2eb3f4eaf8800f11023b00000000000000006804000000000000008d0e57b4674bb60d4fe79d900fd407f80cb5a15e750080000069c971aeca70000000000500"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async, rerun: 64) open(&(0x7f0000000080)='./file0\x00', 0x4400, 0x0) (rerun: 64) [ 784.508557][T21405] loop1: detected capacity change from 0 to 65 [ 784.568699][T21405] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 784.619285][T21407] overlay: Unknown parameter 'pcr' 20:35:56 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf9a, 0x5) 20:35:56 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x1020000, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0xc901}}, {}, {@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xcced}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '.'}}]}) (async) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40080, 0x16a) mkdir(&(0x7f00000001c0)='./bus\x00', 0x80) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async, rerun: 32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="99d6b278b47d1992db448f605dd3ba95a99d95840dbdda305162e9bb52b1a4c2d7dd094a41d253842cf8ba4f3bfdbd09422444294c285dc3a5ca35f40be96b61b84fe2936f50bee2dfcea0bd7ef58ea6b94b9b057b54fee100b5f404aef3d0de1f19ae642f301da2c0203064ccf53a91980800b987799081c1e428e10bab7f1ab810e946eb583cfd5921e53104bd9a3788e64da27f07b74f1f2c6ae40938901b594625b850068051238b25c573eccec93ec8da", 0xb3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="ba216f9f81ffba2ef0d78c2fbecad03a4590aefbbf4419a5ca5efad81c3a68734dea5f2a035ca3b24aa10f00c3059f9cd2b93395fcfaaf78cedfcf1ba8435144ef01a671af3a4b4765cd756331bd8edd69a65b625e230b450a256384f13a5756f1d6adcd4b8de5f21edf5b5868a123976615c082cb6965339337dcaea434763d7632dafd281610a1dea9", 0x8a}, {&(0x7f00000001c0)}], 0x4) 20:35:56 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rename(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') mkdir(&(0x7f0000000180)='./file1\x00', 0x83) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) mkdirat(r1, &(0x7f00000003c0)='./bus\x00', 0x28) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007ffb) write$cgroup_int(r2, &(0x7f0000000380)=0x7, 0x12) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) renameat2(r0, &(0x7f00000002c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x7) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0xfffffffffffffffe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000480)={0x0, r2, 0x9, 0x21aa, 0x0, 0x80}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x10280, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="0100397a0100000018000000", @ANYRES32, @ANYBLOB="04000000000000002e2f62757300"]) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x160) chdir(&(0x7f0000000040)='./file1\x00') mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000340), 0x3001, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f776e66735f6578706f72743d6f6e2c6f626a5f726f6c653d2f7379732f6b65726e656c2f64656275672f73796e632f696e666f002c646566636f6e746578743d756e636f6e667e9371664d177a92"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1Nw1AUx9E/z5ZlKjd0FGzACogNWAG5hM4ViIKPeVglI3iDFGnTOLIcRR4gUqTonOo9/e6V7mb/f586mbqf2yTT2vDx+fb6PnzP7zme1OFKlCTPSV7S5OE3T3fJzbZZ2l9bloEk49T14+6rT3VcrC52MgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcXcljknb9L+t+CAAA///azyE3") 20:35:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:56 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfe2, 0x5) [ 785.128580][T21419] loop1: detected capacity change from 0 to 65 [ 785.157684][ T28] audit: type=1800 audit(1703968556.613:1054): pid=21423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1979 res=0 errno=0 20:35:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) chdir(&(0x7f0000000080)='./file0\x00') (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 785.181743][T21419] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:56 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async, rerun: 32) rename(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') (async, rerun: 32) mkdir(&(0x7f0000000180)='./file1\x00', 0x83) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async) mkdirat(r1, &(0x7f00000003c0)='./bus\x00', 0x28) (async, rerun: 32) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) (rerun: 32) ftruncate(r2, 0x2007ffb) (async) write$cgroup_int(r2, &(0x7f0000000380)=0x7, 0x12) (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) renameat2(r0, &(0x7f00000002c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x7) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0xfffffffffffffffe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000480)={0x0, r2, 0x9, 0x21aa, 0x0, 0x80}) (async, rerun: 32) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x10280, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="0100397a0100000018000000", @ANYRES32, @ANYBLOB="04000000000000002e2f62757300"]) (async) chdir(&(0x7f00000001c0)='./file0\x00') (async) creat(&(0x7f0000000080)='./file0\x00', 0x160) chdir(&(0x7f0000000040)='./file1\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000340), 0x3001, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f776e66735f6578706f72743d6f6e2c6f626a5f726f6c653d2f7379732f6b65726e656c2f64656275672f73796e632f696e666f002c646566636f6e746578743d756e636f6e667e9371664d177a92"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 785.214978][ T28] audit: type=1800 audit(1703968556.643:1055): pid=21423 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1979 res=0 errno=0 20:35:56 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000100), 0x1020000, &(0x7f0000000480)={[{@mode={'mode', 0x3d, 0x7ff}}, {@mode={'mode', 0x3d, 0xc901}}, {}, {@mode={'mode', 0x3d, 0x81}}, {@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0xcced}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@measure}, {@subj_role={'subj_role', 0x3d, '.'}}]}) (rerun: 32) r0 = open(&(0x7f0000000140)='./file0\x00', 0x40080, 0x16a) mkdir(&(0x7f00000001c0)='./bus\x00', 0x80) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000240)="99d6b278b47d1992db448f605dd3ba95a99d95840dbdda305162e9bb52b1a4c2d7dd094a41d253842cf8ba4f3bfdbd09422444294c285dc3a5ca35f40be96b61b84fe2936f50bee2dfcea0bd7ef58ea6b94b9b057b54fee100b5f404aef3d0de1f19ae642f301da2c0203064ccf53a91980800b987799081c1e428e10bab7f1ab810e946eb583cfd5921e53104bd9a3788e64da27f07b74f1f2c6ae40938901b594625b850068051238b25c573eccec93ec8da", 0xb3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="ba216f9f81ffba2ef0d78c2fbecad03a4590aefbbf4419a5ca5efad81c3a68734dea5f2a035ca3b24aa10f00c3059f9cd2b93395fcfaaf78cedfcf1ba8435144ef01a671af3a4b4765cd756331bd8edd69a65b625e230b450a256384f13a5756f1d6adcd4b8de5f21edf5b5868a123976615c082cb6965339337dcaea434763d7632dafd281610a1dea9", 0x8a}, {&(0x7f00000001c0)}], 0x4) 20:35:56 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrFpw1AUhtE/khBJpSZdimyQFUI2yApBZdKpSkhhu/E03sETeARt4MKtGxkhYzSAwWDOqd7juxfu7rh5SZUMzfIpyTDX/f59f/10i/E9xosq3IkiyUeSz9R5XeX9OXnY11Nbb6tpIEk/NG1/+G9TnhfLm50MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFdX5C3J4/xfzPspAAD//+KcIfU=") 20:35:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 785.406527][T21438] loop1: detected capacity change from 0 to 65 [ 785.443116][T21438] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:56 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) rename(&(0x7f00000004c0)='./bus\x00', &(0x7f0000000500)='./bus\x00') (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x83) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) (async) sendfile(r1, r1, 0x0, 0x108000015) (async) mkdirat(r1, &(0x7f00000003c0)='./bus\x00', 0x28) (async) r2 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r2, 0x2007ffb) (async) write$cgroup_int(r2, &(0x7f0000000380)=0x7, 0x12) (async) pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) (async) renameat2(r0, &(0x7f00000002c0)='./bus\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./bus\x00', 0x7) (async) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0xfffffffffffffffe) r3 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r3, 0x2007ffb) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000480)={0x0, r2, 0x9, 0x21aa, 0x0, 0x80}) (async) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x10280, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)=ANY=[@ANYBLOB="0100397a0100000018000000", @ANYRES32, @ANYBLOB="04000000000000002e2f62757300"]) (async) chdir(&(0x7f00000001c0)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x160) chdir(&(0x7f0000000040)='./file1\x00') (async) mount$overlay(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000340), 0x3001, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f776e66735f6578706f72743d6f6e2c6f626a5f726f6c653d2f7379732f6b65726e656c2f64656275672f73796e632f696e666f002c646566636f6e746578743d756e636f6e667e9371664d177a92"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 785.503669][T21442] overlay: filesystem on ./bus not supported as upperdir [ 785.568122][T21445] syz-executor.3: attempt to access beyond end of device [ 785.568122][T21445] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 785.607927][T21445] VFS: could not find a valid V7 on loop3. [ 785.650740][ T28] audit: type=1800 audit(1703968557.093:1056): pid=21452 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1983 res=0 errno=0 20:35:57 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzs0rFtwgAUBNCzY1lJ5SZdimyQFaJskBUil6FzBaIA9mEVRvAGFLQ0RpaR5Rms95p/p2v/5X7+SJUMzfEtybDUbXf/f5vuMOZxnFVhJcokP0l+U+fzlO/3pLjW01aMD/Ey5X5o2v62b/Ps8wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAFSjzleR12cvl/ggAAP//3BAhqw==") 20:35:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000240)={[{@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x35, 0x38, 0x33, 0x30, 0x64, 0x35], 0x2d, [0x62, 0x37, 0x1, 0x30], 0x2d, [0x65, 0x38, 0x38, 0x38], 0x2d, [0x66, 0x36, 0x34, 0x36], 0x2d, [0x35, 0x39, 0x32, 0x66, 0x60, 0x37, 0x57, 0x62]}}}, {@smackfshat={'smackfshat', 0x3d, '('}}, {@obj_type={'obj_type', 0x3d, 'v7\x00'}}, {@smackfshat}, {@subj_user={'subj_user', 0x3d, 'v7\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@fsname={'fsname', 0x3d, '{#/X\':7&'}}]}) 20:35:57 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20000}}, './file1\x00'}) renameat2(r0, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c00358d202bd2c073a8380a0046cf335ad52fe704a8baaea094c354828cae1a72675472e5a58c2358bf1f419f4df1bad04a1860e68aae5482053341fbdd26fde7ba95c6237434ad6755b2372d83aa1ed875be63bf9a132cd135aeadbceef8fd8e2284f0a73de1dfeaecee542d4dae482c6543"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) chdir(&(0x7f0000000080)='./file1\x00') 20:35:57 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x109) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x40) 20:35:57 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xf9b, 0x5) 20:35:57 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfea, 0x5) [ 786.019904][T21458] loop1: detected capacity change from 0 to 65 [ 786.061689][T21458] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 786.074655][T21463] syz-executor.3: attempt to access beyond end of device [ 786.074655][T21463] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:57 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20000}}, './file1\x00'}) renameat2(r0, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c00358d202bd2c073a8380a0046cf335ad52fe704a8baaea094c354828cae1a72675472e5a58c2358bf1f419f4df1bad04a1860e68aae5482053341fbdd26fde7ba95c6237434ad6755b2372d83aa1ed875be63bf9a132cd135aeadbceef8fd8e2284f0a73de1dfeaecee542d4dae482c6543"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20000}}, './file1\x00'}) (async) renameat2(r0, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x4) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c00358d202bd2c073a8380a0046cf335ad52fe704a8baaea094c354828cae1a72675472e5a58c2358bf1f419f4df1bad04a1860e68aae5482053341fbdd26fde7ba95c6237434ad6755b2372d83aa1ed875be63bf9a132cd135aeadbceef8fd8e2284f0a73de1dfeaecee542d4dae482c6543"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) 20:35:57 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x109) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') (async) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x40) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x40) [ 786.130024][T21463] VFS: could not find a valid V7 on loop3. [ 786.142689][T21463] overlay: Bad value for 'redirect_dir' 20:35:57 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr1pwwAQBeCnH0RSKUW6FNkgK4RskBWCyqRTlZDC9j5exSNoAxdu3cgIGaMBDAbzfcXxjsfB7Y7bl9TJ2K4fk4xL/e/f99dPv5ryVF7U4U6UST6SfKbJ6ybvz0mxb+aumMbTnIex7YbDf5fqfFjd6mMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuL4yb0kelnu57E8BAAD//9TsILk=") 20:35:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000240)={[{@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x35, 0x38, 0x33, 0x30, 0x64, 0x35], 0x2d, [0x62, 0x37, 0x1, 0x30], 0x2d, [0x65, 0x38, 0x38, 0x38], 0x2d, [0x66, 0x36, 0x34, 0x36], 0x2d, [0x35, 0x39, 0x32, 0x66, 0x60, 0x37, 0x57, 0x62]}}}, {@smackfshat={'smackfshat', 0x3d, '('}}, {@obj_type={'obj_type', 0x3d, 'v7\x00'}}, {@smackfshat}, {@subj_user={'subj_user', 0x3d, 'v7\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@fsname={'fsname', 0x3d, '{#/X\':7&'}}]}) [ 786.265041][T21470] loop1: detected capacity change from 0 to 65 [ 786.310027][T21472] syz-executor.3: attempt to access beyond end of device [ 786.310027][T21472] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 786.324241][T21470] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 786.338294][T21472] VFS: could not find a valid V7 on loop3. [ 786.350622][T21472] overlay: Bad value for 'redirect_dir' 20:35:57 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszr9JxGAcxvEnfwhapbGzcANXCG7gCpJSu1SKRXQfV3GEbHDFtdfkCDmODHBwcHw+1fPy5YXf/+HvMXUytz/3Seat4fPr/e1jGJe9xLM63IgyyUuS1zR5+k33kBS7Zm1Fkm5c9zS3/bT/7lOdPlZXOxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALq7Mc5K77bvc9mMAAAD//1mkIWg=") 20:35:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x10) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x80, &(0x7f0000000240)={[{@default_permissions}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir={'redirect_dir', 0x3d, './file0'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x30, 0x35, 0x38, 0x33, 0x30, 0x64, 0x35], 0x2d, [0x62, 0x37, 0x1, 0x30], 0x2d, [0x65, 0x38, 0x38, 0x38], 0x2d, [0x66, 0x36, 0x34, 0x36], 0x2d, [0x35, 0x39, 0x32, 0x66, 0x60, 0x37, 0x57, 0x62]}}}, {@smackfshat={'smackfshat', 0x3d, '('}}, {@obj_type={'obj_type', 0x3d, 'v7\x00'}}, {@smackfshat}, {@subj_user={'subj_user', 0x3d, 'v7\x00'}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@euid_lt={'euid<', r0}}, {@fsname={'fsname', 0x3d, '{#/X\':7&'}}]}) 20:35:58 executing program 4: mkdir(&(0x7f00000001c0)='./file1\x00', 0x109) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00') (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x40) 20:35:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x20000}}, './file1\x00'}) renameat2(r0, &(0x7f0000000100)='./bus\x00', 0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c00358d202bd2c073a8380a0046cf335ad52fe704a8baaea094c354828cae1a72675472e5a58c2358bf1f419f4df1bad04a1860e68aae5482053341fbdd26fde7ba95c6237434ad6755b2372d83aa1ed875be63bf9a132cd135aeadbceef8fd8e2284f0a73de1dfeaecee542d4dae482c6543"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) chdir(&(0x7f0000000080)='./file1\x00') [ 786.596295][T21481] overlayfs: failed to resolve './file0': -2 [ 786.602677][T21483] loop1: detected capacity change from 0 to 65 [ 786.635254][T21483] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 20:35:58 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HghSKUW6FNkgK4RskBWCyqRTleDC9j5exSNoAxdu3cgIP9AABoP5vupefufA2R42r6mTsV09JRnn+r//n+/ffjm9p3hVhwdRJvlM8pUmb+t8vCTFrjm14jKQZBjbbtgvulTnxepeFwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7ZV5T/I8/5fzfgwAAP//1WEgsw==") [ 786.680203][T21486] syz-executor.3: attempt to access beyond end of device [ 786.680203][T21486] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 786.746801][T21486] VFS: could not find a valid V7 on loop3. [ 786.795025][T21487] syz-executor.3: attempt to access beyond end of device [ 786.795025][T21487] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 786.806080][T21493] loop1: detected capacity change from 0 to 65 20:35:58 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340), 0x140000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@index_off}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 786.845635][T21493] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 786.856540][T21487] VFS: could not find a valid V7 on loop3. 20:35:58 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfc8, 0x5) [ 786.906681][T21486] overlay: Bad value for 'redirect_dir' 20:35:58 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff2, 0x5) 20:35:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="3c489c19f4a583a172506357a361cede577b817f5ae25a6cab6764ff05d5ab4b23d186a73a365cea2023222ee9424ff0d4bdbfb0ff8a0cf5967b810fea64ff71a51d026703a26da87db1fe35d070141e30fe6586677d12ed8dffaec16ca7223eeede41fd6d7458e342c323718fb3098c365382e6c45cb42db36de007e0b7561ce9007d5141b976a9825d9469c1d4ab2106a58c584ed2a6f2a3aec85c9b2b091c0496e6ffb23f949a73c8a4690eecc3786e2093838f5685af9395e009f03d0ddb2f25be8367b4fadd735cc05785da3ee32a7dc3b6f3dabb7340fc2d0faebadc", 0xdf) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x802000, &(0x7f0000000000)={[{'bFs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:58 executing program 3: mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000180), 0x3081018, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x441a0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:35:58 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340), 0x140000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@index_off}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 787.090274][T21505] syz-executor.3: attempt to access beyond end of device [ 787.090274][T21505] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 787.129962][T21507] loop1: detected capacity change from 0 to 65 20:35:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) chmod(&(0x7f0000002240)='./file0\x00', 0x10) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x106a030, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}], [{@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '(\'-/-+)$'}}, {@seclabel}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 787.134626][T21505] VFS: could not find a valid V7 on loop3. 20:35:58 executing program 3: mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000180), 0x3081018, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x441a0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000180), 0x3081018, 0x0) (async) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x441a0, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) 20:35:58 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="3c489c19f4a583a172506357a361cede577b817f5ae25a6cab6764ff05d5ab4b23d186a73a365cea2023222ee9424ff0d4bdbfb0ff8a0cf5967b810fea64ff71a51d026703a26da87db1fe35d070141e30fe6586677d12ed8dffaec16ca7223eeede41fd6d7458e342c323718fb3098c365382e6c45cb42db36de007e0b7561ce9007d5141b976a9825d9469c1d4ab2106a58c584ed2a6f2a3aec85c9b2b091c0496e6ffb23f949a73c8a4690eecc3786e2093838f5685af9395e009f03d0ddb2f25be8367b4fadd735cc05785da3ee32a7dc3b6f3dabb7340fc2d0faebadc", 0xdf) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="3c489c19f4a583a172506357a361cede577b817f5ae25a6cab6764ff05d5ab4b23d186a73a365cea2023222ee9424ff0d4bdbfb0ff8a0cf5967b810fea64ff71a51d026703a26da87db1fe35d070141e30fe6586677d12ed8dffaec16ca7223eeede41fd6d7458e342c323718fb3098c365382e6c45cb42db36de007e0b7561ce9007d5141b976a9825d9469c1d4ab2106a58c584ed2a6f2a3aec85c9b2b091c0496e6ffb23f949a73c8a4690eecc3786e2093838f5685af9395e009f03d0ddb2f25be8367b4fadd735cc05785da3ee32a7dc3b6f3dabb7340fc2d0faebadc", 0xdf) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x802000, &(0x7f0000000000)={[{'bFs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") 20:35:58 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340), 0x140000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@index_off}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus/file0\x00', &(0x7f0000000340), 0x140000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus/file0'}}, {@index_off}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) 20:35:58 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chmod(&(0x7f0000002240)='./file0\x00', 0x10) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x106a030, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}], [{@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '(\'-/-+)$'}}, {@seclabel}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) [ 787.422635][T21517] syz-executor.3: attempt to access beyond end of device [ 787.422635][T21517] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 787.450766][T21517] VFS: could not find a valid V7 on loop3. [ 787.490122][T21519] loop1: detected capacity change from 0 to 65 [ 787.505213][T21517] syz-executor.3: attempt to access beyond end of device [ 787.505213][T21517] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 20:35:59 executing program 3: mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='\x00', &(0x7f0000000180), 0x3081018, 0x0) (async, rerun: 64) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x441a0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 787.537038][T21517] VFS: could not find a valid V7 on loop3. 20:35:59 executing program 1: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="3c489c19f4a583a172506357a361cede577b817f5ae25a6cab6764ff05d5ab4b23d186a73a365cea2023222ee9424ff0d4bdbfb0ff8a0cf5967b810fea64ff71a51d026703a26da87db1fe35d070141e30fe6586677d12ed8dffaec16ca7223eeede41fd6d7458e342c323718fb3098c365382e6c45cb42db36de007e0b7561ce9007d5141b976a9825d9469c1d4ab2106a58c584ed2a6f2a3aec85c9b2b091c0496e6ffb23f949a73c8a4690eecc3786e2093838f5685af9395e009f03d0ddb2f25be8367b4fadd735cc05785da3ee32a7dc3b6f3dabb7340fc2d0faebadc", 0xdf) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x802000, &(0x7f0000000000)={[{'bFs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f0000000140)="3c489c19f4a583a172506357a361cede577b817f5ae25a6cab6764ff05d5ab4b23d186a73a365cea2023222ee9424ff0d4bdbfb0ff8a0cf5967b810fea64ff71a51d026703a26da87db1fe35d070141e30fe6586677d12ed8dffaec16ca7223eeede41fd6d7458e342c323718fb3098c365382e6c45cb42db36de007e0b7561ce9007d5141b976a9825d9469c1d4ab2106a58c584ed2a6f2a3aec85c9b2b091c0496e6ffb23f949a73c8a4690eecc3786e2093838f5685af9395e009f03d0ddb2f25be8367b4fadd735cc05785da3ee32a7dc3b6f3dabb7340fc2d0faebadc", 0xdf) (async) syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x802000, &(0x7f0000000000)={[{'bFs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") (async) [ 787.678261][T21529] syz-executor.3: attempt to access beyond end of device [ 787.678261][T21529] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 787.692910][T21529] VFS: could not find a valid V7 on loop3. [ 787.757031][T21534] loop1: detected capacity change from 0 to 65 [ 787.839138][T21534] loop1: detected capacity change from 0 to 65 20:35:59 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) 20:35:59 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff7, 0x5) 20:35:59 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) chmod(&(0x7f0000002240)='./file0\x00', 0x10) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r1, &(0x7f0000000040)) (async) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x106a030, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}], [{@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, '(\'-/-+)$'}}, {@seclabel}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./file0\x00') (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) 20:35:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b3f73ded422746eb7534ce2bc024f71fbb87ae6c953bf0e169c9c7aea07df0db73da7aa48f89121477a41f9211d30559668e600a288f5fb91ed3e6605abbfa4f368c84ab38006d7e0a4d69fce11ff9fe4bf0e8988ca8f02cff9577d11a33dc89ae0af9c3fab68095fc7bb166fc40e39c00c4a37d06a1b1a3837660faeac4c049a366f9b2f6e911d8f07083475b6e85b12c1830272dc55e24"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x108008, 0x0) 20:35:59 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x2) 20:35:59 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfe2, 0x5) 20:35:59 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 788.009690][T21538] overlayfs: missing 'workdir' [ 788.087670][T21543] loop1: detected capacity change from 0 to 65 20:35:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) (async, rerun: 32) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b3f73ded422746eb7534ce2bc024f71fbb87ae6c953bf0e169c9c7aea07df0db73da7aa48f89121477a41f9211d30559668e600a288f5fb91ed3e6605abbfa4f368c84ab38006d7e0a4d69fce11ff9fe4bf0e8988ca8f02cff9577d11a33dc89ae0af9c3fab68095fc7bb166fc40e39c00c4a37d06a1b1a3837660faeac4c049a366f9b2f6e911d8f07083475b6e85b12c1830272dc55e24"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x108008, 0x0) (rerun: 32) [ 788.130330][T21543] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 788.149867][T21553] overlayfs: failed to resolve './file0': -2 20:35:59 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x80) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b646972572e2f6275b1cef6873b8a87de58442e1d732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0043"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="730d2bf560b8"]) chdir(&(0x7f0000000040)='./file1/file0\x00') [ 788.195020][T21553] overlayfs: missing 'workdir' [ 788.234449][T21553] overlayfs: missing 'workdir' [ 788.261749][T21553] overlayfs: missing 'workdir' [ 788.297127][T21553] overlayfs: missing 'workdir' [ 788.336641][T21553] overlayfs: missing 'workdir' 20:35:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x1) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b3f73ded422746eb7534ce2bc024f71fbb87ae6c953bf0e169c9c7aea07df0db73da7aa48f89121477a41f9211d30559668e600a288f5fb91ed3e6605abbfa4f368c84ab38006d7e0a4d69fce11ff9fe4bf0e8988ca8f02cff9577d11a33dc89ae0af9c3fab68095fc7bb166fc40e39c00c4a37d06a1b1a3837660faeac4c049a366f9b2f6e911d8f07083475b6e85b12c1830272dc55e24"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x108008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x1) (async) mount(&(0x7f0000000140)=ANY=[@ANYBLOB="b3f73ded422746eb7534ce2bc024f71fbb87ae6c953bf0e169c9c7aea07df0db73da7aa48f89121477a41f9211d30559668e600a288f5fb91ed3e6605abbfa4f368c84ab38006d7e0a4d69fce11ff9fe4bf0e8988ca8f02cff9577d11a33dc89ae0af9c3fab68095fc7bb166fc40e39c00c4a37d06a1b1a3837660faeac4c049a366f9b2f6e911d8f07083475b6e85b12c1830272dc55e24"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='qnx6\x00', 0x108008, 0x0) (async) [ 788.365615][T21553] overlayfs: missing 'workdir' [ 788.384712][T21553] overlayfs: missing 'workdir' [ 788.385361][T21563] overlay: Unknown parameter 'workdirW./bu±Îö‡;Š‡ÞXD.s' [ 788.399224][T21561] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 788.426967][T21553] overlayfs: missing 'workdir' 20:35:59 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x80) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b646972572e2f6275b1cef6873b8a87de58442e1d732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0043"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="730d2bf560b8"]) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="730d2bf560b8"]) chdir(&(0x7f0000000040)='./file1/file0\x00') [ 788.466308][T21561] File: /root/syzkaller-testdir2299400333/syzkaller.4aZymc/936/bus PID: 21561 Comm: syz-executor.1 [ 788.493177][T21553] overlayfs: missing 'workdir' [ 788.504534][T21553] overlayfs: missing 'workdir' [ 788.520613][T21553] overlayfs: missing 'workdir' 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fe32dd68baac0551c32ff86576386c6f"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) [ 788.542490][T21553] overlayfs: missing 'workdir' [ 788.569256][T21553] overlayfs: missing 'workdir' [ 788.588680][T21553] overlayfs: missing 'workdir' [ 788.611632][T21553] overlayfs: missing 'workdir' [ 788.632066][T21553] overlayfs: missing 'workdir' [ 788.642731][T21553] overlayfs: missing 'workdir' [ 788.649369][T21570] overlay: Unknown parameter 'workdirW./bu±Îö‡;Š‡ÞXD.s' [ 788.670195][T21553] overlayfs: missing 'workdir' 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fe32dd68baac0551c32ff86576386c6f"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fe32dd68baac0551c32ff86576386c6f"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) [ 788.696328][T21553] overlayfs: missing 'workdir' [ 788.712950][T21553] overlayfs: missing 'workdir' [ 788.757583][T21553] overlayfs: missing 'workdir' [ 788.784579][T21553] overlayfs: missing 'workdir' [ 788.805706][T21553] overlayfs: missing 'workdir' [ 788.830518][T21553] overlayfs: missing 'workdir' [ 788.851808][T21553] overlayfs: missing 'workdir' [ 788.875723][T21553] overlayfs: missing 'workdir' [ 788.884795][T21553] overlayfs: missing 'workdir' [ 788.905008][T21553] overlayfs: missing 'workdir' [ 788.911419][T21553] overlayfs: missing 'workdir' [ 788.918688][T21553] overlayfs: missing 'workdir' 20:36:00 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff8, 0x5) [ 788.924757][T21553] overlayfs: missing 'workdir' [ 788.931819][T21553] overlayfs: missing 'workdir' 20:36:00 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) (async) sendfile(r1, r1, 0x0, 0x108000015) sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x2) (async) sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x2) 20:36:00 executing program 5: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x80) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1/file0\x00', 0x80) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b646972572e2f6275b1cef6873b8a87de58442e1d732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0043"]) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="776f726b646972572e2f6275b1cef6873b8a87de58442e1d732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66696c65312c0043"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)=ANY=[@ANYBLOB="730d2bf560b8"]) chdir(&(0x7f0000000040)='./file1/file0\x00') 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="fe32dd68baac0551c32ff86576386c6f"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) 20:36:00 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xfea, 0x5) 20:36:00 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) [ 789.046171][ T29] INFO: task syz-executor.4:17839 blocked for more than 143 seconds. [ 789.054853][ T29] Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 789.072444][T21580] overlay: Unknown parameter 'workdirW./bu±Îö‡;Š‡ÞXD.s' [ 789.089543][T21584] overlayfs: missing 'workdir' 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2012000, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='\x00', &(0x7f0000000240)='zonefs\x00', 0x100000, &(0x7f0000000280)='/dev/loop') [ 789.100247][T21588] loop1: detected capacity change from 0 to 65 [ 789.109396][T21591] overlay: Unknown parameter 'workdirW./bu±Îö‡;Š‡ÞXD.s' [ 789.129101][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.143188][ T29] task:syz-executor.4 state:D stack:22608 pid:17839 tgid:17834 ppid:5091 flags:0x00004006 [ 789.143604][T21588] BFS-fs: bfs_fill_super(): Last block not available on loop1: 311431 [ 789.168126][ T29] Call Trace: [ 789.177249][ T29] [ 789.185306][ T29] __schedule+0x1961/0x4ab0 [ 789.193244][ T29] ? release_firmware_map_entry+0x190/0x190 [ 789.205392][ T29] ? __blk_flush_plug+0x46b/0x4c0 [ 789.211877][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 789.217141][T21597] syz-executor.3: attempt to access beyond end of device [ 789.217141][T21597] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 789.221728][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 789.239181][ T29] ? do_raw_spin_unlock+0x13b/0x8b0 [ 789.245649][ T29] ? schedule+0x8e/0x260 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2012000, 0x0) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='\x00', &(0x7f0000000240)='zonefs\x00', 0x100000, &(0x7f0000000280)='/dev/loop') mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2012000, 0x0) (async) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='\x00', &(0x7f0000000240)='zonefs\x00', 0x100000, &(0x7f0000000280)='/dev/loop') (async) [ 789.250937][T21597] VFS: could not find a valid V7 on loop3. [ 789.263454][ T29] schedule+0x149/0x260 [ 789.268406][ T29] lock_extent+0x69d/0x850 [ 789.273334][ T29] ? try_lock_extent+0x1a0/0x1a0 [ 789.307275][ T29] ? wake_bit_function+0x220/0x220 [ 789.313280][ T29] ? kasan_set_track+0x61/0x70 [ 789.318634][ T29] ? __kasan_kmalloc+0x98/0xb0 [ 789.323845][ T29] ? __iomap_dio_rw+0x378/0x2330 [ 789.329647][ T29] ? iomap_dio_rw+0x46/0xa0 [ 789.334633][ T29] btrfs_dio_iomap_begin+0x5af/0x10b0 [ 789.343051][ T29] ? csum_exist_in_range+0x300/0x300 [ 789.349568][ T29] ? filemap_write_and_wait_range+0x248/0x2c0 [ 789.357305][ T29] ? xas_next_entry+0x3d0/0x3d0 [ 789.362377][ T29] ? csum_exist_in_range+0x300/0x300 [ 789.368408][ T29] iomap_iter+0x677/0xee0 [ 789.373352][ T29] ? blk_start_plug+0x6f/0x1b0 [ 789.379243][ T29] __iomap_dio_rw+0xdcf/0x2330 [ 789.384462][ T29] ? iomap_dio_deferred_complete+0x20/0x20 [ 789.391035][ T29] ? zone_statistics+0x170/0x170 [ 789.398454][ T29] ? do_splice_direct+0x2ac/0x3f0 [ 789.404636][ T29] ? __se_sys_sendfile64+0x17c/0x1e0 [ 789.410385][ T29] ? down_read+0x829/0xa40 [ 789.413073][T21599] VFS: could not find a valid V7 on loop3. [ 789.415437][ T29] iomap_dio_rw+0x46/0xa0 [ 789.443287][ T29] btrfs_dio_read+0xb6/0x100 20:36:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x8008, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2012000, 0x0) (async) mount(&(0x7f00000001c0)=@sg0, &(0x7f0000000200)='\x00', &(0x7f0000000240)='zonefs\x00', 0x100000, &(0x7f0000000280)='/dev/loop') [ 789.455162][T21600] VFS: could not find a valid V7 on loop3. [ 789.458771][ T29] ? btrfs_extent_readonly+0x90/0x90 [ 789.496684][ T29] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 789.511811][ T29] btrfs_file_read_iter+0x39e/0x6b0 [ 789.523337][ T29] copy_splice_read+0x4c9/0x9c0 [ 789.540175][ T29] ? splice_shrink_spd+0xb0/0xb0 [ 789.551508][T21603] VFS: could not find a valid V7 on loop3. 20:36:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x29008, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000) r1 = dup3(r0, r0, 0x80000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a5000, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3, 0xffffffffffffffff}}, './file0\x00'}) [ 789.563414][ T29] ? vfs_splice_read+0x28f/0x3b0 [ 789.571614][ T29] ? splice_folio_into_pipe+0x480/0x480 [ 789.595498][ T29] splice_direct_to_actor+0x2c4/0x9e0 [ 789.608317][ T29] ? direct_file_splice_eof+0xb0/0xb0 [ 789.615793][ T29] ? warn_unsupported+0xc0/0xc0 [ 789.630925][ T29] ? fsnotify_perm+0x67/0x5a0 [ 789.635681][ T29] ? bpf_lsm_file_permission+0x9/0x10 [ 789.644511][ T29] do_splice_direct+0x2ac/0x3f0 [ 789.655155][ T29] ? splice_direct_to_actor+0x9e0/0x9e0 [ 789.665573][ T29] ? rcu_read_lock_any_held+0xb7/0x160 [ 789.677038][ T29] ? do_splice_direct+0x3f0/0x3f0 [ 789.682937][ T29] do_sendfile+0x62c/0x1000 [ 789.698185][ T29] ? rcu_is_watching+0x15/0xb0 [ 789.706711][ T29] ? do_pwritev+0x360/0x360 [ 789.711766][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 789.727553][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 789.734118][ T29] __se_sys_sendfile64+0x17c/0x1e0 [ 789.746105][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 789.752297][ T29] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 789.764798][ T29] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 789.774762][ T29] do_syscall_64+0x45/0x110 [ 789.785340][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 789.799079][ T29] RIP: 0033:0x7fb40d07cce9 [ 789.809958][ T29] RSP: 002b:00007fb40dd9d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 789.822549][ T29] RAX: ffffffffffffffda RBX: 00007fb40d19bf80 RCX: 00007fb40d07cce9 [ 789.832893][ T29] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 789.841357][ T29] RBP: 00007fb40d0c947a R08: 0000000000000000 R09: 0000000000000000 20:36:01 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) fchownat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0xee01, 0x1000) [ 789.864426][ T29] R10: 0000000008800000 R11: 0000000000000246 R12: 0000000000000000 [ 789.873069][ T29] R13: 000000000000000b R14: 00007fb40d19bf80 R15: 00007fffca163ff8 [ 789.884054][ T29] [ 789.887561][ T29] INFO: task syz-executor.4:17884 blocked for more than 144 seconds. [ 789.901416][ T29] Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 789.915448][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 789.928031][ T29] task:syz-executor.4 state:D stack:19536 pid:17884 tgid:17834 ppid:5091 flags:0x00004006 [ 789.954626][ T29] Call Trace: [ 789.959211][ T29] [ 789.962266][ T29] __schedule+0x1961/0x4ab0 20:36:01 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0x1005, 0x5) 20:36:01 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff2, 0x5) [ 789.966930][ T29] ? release_firmware_map_entry+0x190/0x190 [ 789.973158][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 789.978340][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 789.984587][ T29] ? print_irqtrace_events+0x220/0x220 [ 789.990293][ T29] ? _raw_spin_lock_irq+0xdf/0x120 [ 790.001095][ T29] ? schedule+0x8e/0x260 [ 790.006858][ T29] schedule+0x149/0x260 [ 790.012164][ T29] schedule_preempt_disabled+0x13/0x20 [ 790.024474][ T29] rwsem_down_write_slowpath+0xeea/0x13b0 [ 790.052881][ T29] ? rwsem_down_write_slowpath+0xa05/0x13b0 [ 790.064549][ T29] ? down_write_killable_nested+0x80/0x80 [ 790.071442][ T29] ? read_lock_is_recursive+0x20/0x20 [ 790.083007][ T29] __down_write_common+0x1aa/0x200 [ 790.112761][ T29] ? clear_nonspinnable+0x60/0x60 [ 790.136033][ T29] ? do_splice_direct+0x2ac/0x3f0 [ 790.157514][ T29] ? do_sendfile+0x62c/0x1000 [ 790.163079][ T29] btrfs_inode_lock+0x4d/0xd0 [ 790.181741][ T29] btrfs_sync_file+0x55d/0x1330 [ 790.206031][ T29] ? btrfs_release_file+0x130/0x130 [ 790.214589][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 790.227096][ T29] ? do_raw_spin_lock+0x14e/0x370 [ 790.243773][ T29] ? do_raw_spin_unlock+0x13b/0x8b0 [ 790.262840][ T29] btrfs_do_write_iter+0xbc5/0x1190 [ 790.277099][ T29] ? btrfs_check_nocow_unlock+0x40/0x40 [ 790.302871][ T29] do_iter_readv_writev+0x330/0x4a0 [ 790.311971][ T29] ? generic_file_rw_checks+0x260/0x260 [ 790.336628][ T29] ? fsnotify_perm+0x67/0x5a0 [ 790.343009][ T29] ? bpf_lsm_file_permission+0x9/0x10 [ 790.354460][ T29] do_iter_write+0x1f6/0x8d0 [ 790.371316][ T29] ? vfs_iter_write+0x70/0xa0 [ 790.391038][ T29] iter_file_splice_write+0x86d/0x1010 [ 790.411597][ T29] ? splice_from_pipe+0x240/0x240 [ 790.423898][ T29] ? splice_shrink_spd+0xb0/0xb0 [ 790.430276][ T29] ? splice_from_pipe+0x240/0x240 [ 790.436826][ T29] direct_splice_actor+0xea/0x1c0 [ 790.442374][ T29] splice_direct_to_actor+0x376/0x9e0 [ 790.448653][ T29] ? direct_file_splice_eof+0xb0/0xb0 [ 790.454148][ T29] ? warn_unsupported+0xc0/0xc0 [ 790.460586][ T29] ? fsnotify_perm+0x67/0x5a0 [ 790.467113][ T29] ? bpf_lsm_file_permission+0x9/0x10 [ 790.474127][ T29] do_splice_direct+0x2ac/0x3f0 [ 790.480629][ T29] ? splice_direct_to_actor+0x9e0/0x9e0 [ 790.490241][ T29] ? rcu_read_lock_any_held+0xb7/0x160 [ 790.498237][ T29] ? do_splice_direct+0x3f0/0x3f0 [ 790.508291][ T29] do_sendfile+0x62c/0x1000 [ 790.513802][ T29] ? rcu_is_watching+0x15/0xb0 [ 790.522309][ T29] ? do_pwritev+0x360/0x360 [ 790.529688][ T29] ? restore_fpregs_from_fpstate+0x100/0x250 [ 790.536676][ T29] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 790.544086][ T29] __se_sys_sendfile64+0x17c/0x1e0 [ 790.550160][ T29] ? __x64_sys_sendfile64+0xb0/0xb0 [ 790.556396][ T29] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 790.562797][ T29] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 790.572209][ T29] do_syscall_64+0x45/0x110 [ 790.577630][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 790.583884][ T29] RIP: 0033:0x7fb40d07cce9 [ 790.591713][ T29] RSP: 002b:00007fb40dd5b0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 790.602947][ T29] RAX: ffffffffffffffda RBX: 00007fb40d19c120 RCX: 00007fb40d07cce9 [ 790.614028][ T29] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000008 [ 790.624231][ T29] RBP: 00007fb40d0c947a R08: 0000000000000000 R09: 0000000000000000 [ 790.633495][ T29] R10: 0000000108000015 R11: 0000000000000246 R12: 0000000000000000 [ 790.642866][ T29] R13: 000000000000006e R14: 00007fb40d19c120 R15: 00007fffca163ff8 [ 790.652601][ T29] [ 790.681598][ T29] INFO: task syz-executor.4:17885 blocked for more than 144 seconds. [ 790.749866][ T29] Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 790.773177][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 790.784118][ T29] task:syz-executor.4 state:D stack:24144 pid:17885 tgid:17834 ppid:5091 flags:0x00004006 [ 790.808746][ T29] Call Trace: [ 790.816396][ T29] [ 790.819803][ T29] __schedule+0x1961/0x4ab0 [ 790.824626][ T29] ? release_firmware_map_entry+0x190/0x190 [ 790.840849][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 790.849841][ T29] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 790.859498][ T29] ? do_raw_spin_unlock+0x13b/0x8b0 [ 790.864992][ T29] ? schedule+0x8e/0x260 [ 790.874434][ T29] schedule+0x149/0x260 [ 790.879117][ T29] lock_extent+0x69d/0x850 [ 790.884125][ T29] ? try_lock_extent+0x1a0/0x1a0 20:36:02 executing program 1: syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x800000, &(0x7f0000000000)={[{'bfs\x00'}, {'%{]^{'}, {}, {'bfs\x00'}, {'\''}, {'bfs\x00'}, {'}^$-#*{}{.\'+-&'}, {'bfs\x00'}]}, 0x1, 0xa6, &(0x7f0000000300)="$eJzszrtpw1AUx+G/HoikUpMuRTbICiEbZIWgMulUJbiwvY9X8QjawIVbNzLCDzSAwWC+r7qX3zlwtofNa+pkbFfPSca5/u//5/u3X07vKV7V4UGUST6TfKXJ2zofL0mxa06tuAwkGca2G/aLLtV5sbrXxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwe2XekzzN/+W8HwMAAP//1JEgqw==") (async) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) (async) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) sendfile(r1, r1, 0x0, 0x108000015) sendfile(r0, r1, &(0x7f0000000040)=0x5, 0x2) 20:36:02 executing program 5: mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x61) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) open(&(0x7f0000000040)='./file1\x00', 0x84000, 0x109) 20:36:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x29008, 0x0) (async) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x29008, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000) r1 = dup3(r0, r0, 0x80000) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a5000, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe1) (async) mkdir(&(0x7f0000000140)='./file0\x00', 0xe1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3, 0xffffffffffffffff}}, './file0\x00'}) 20:36:02 executing program 4: mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) fchownat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0xee01, 0x1000) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [], 0x5c}) (async) open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) (async) ftruncate(r0, 0x2007ffb) (async) fchownat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0xee01, 0x1000) (async) [ 790.922792][ T29] ? wake_bit_function+0x220/0x220 20:36:02 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff7, 0x5) 20:36:02 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0x1006, 0x5) [ 790.960270][ T29] ? btrfs_dirty_inode+0x17e/0x190 [ 790.978374][ T29] ? mnt_put_write_access_file+0xc2/0x100 [ 790.996644][T21627] overlayfs: failed to resolve './fƒle1': -2 [ 791.002278][ T29] ? folio_wait_writeback+0x1a8/0x1e0 [ 791.026083][ T29] btrfs_page_mkwrite+0x5bd/0xd10 [ 791.038903][ T29] ? mark_lock+0x9a/0x350 [ 791.064856][ T29] ? btrfs_dio_write+0x100/0x100 [ 791.085000][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 791.092382][ T29] do_page_mkwrite+0x197/0x470 [ 791.107134][ T29] do_wp_page+0x1d07/0x4d40 [ 791.107732][T21636] loop1: detected capacity change from 0 to 65 [ 791.120735][ T29] ? folio_put+0xc0/0xc0 [ 791.136761][ T29] ? read_lock_is_recursive+0x20/0x20 [ 791.142392][ T29] ? lockdep_unlock+0x169/0x300 [ 791.155923][ T29] ? do_raw_spin_lock+0x14e/0x370 [ 791.164074][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 791.180127][ T29] handle_mm_fault+0x1b1c/0x6680 [ 791.192588][ T29] ? handle_mm_fault+0x11d/0x6680 [ 791.214857][ T29] ? numa_migrate_prep+0x260/0x260 [ 791.238317][ T29] ? mt_find+0x623/0x7c0 [ 791.243905][ T29] ? mt_find+0x271/0x7c0 [ 791.256211][ T29] ? mtree_destroy+0x30/0x30 [ 791.261046][ T29] ? lock_mm_and_find_vma+0x9c/0x2d0 [ 791.273024][ T29] exc_page_fault+0x2ad/0x870 [ 791.280817][ T29] asm_exc_page_fault+0x26/0x30 [ 791.289112][ T29] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 791.302283][ T29] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 791.327516][ T29] RSP: 0018:ffffc90014a474d0 EFLAGS: 00050206 [ 791.335543][ T29] RAX: 0000000000000000 RBX: 0000000020000118 RCX: 0000000000000038 [ 791.344410][ T29] RDX: 0000000000000000 RSI: ffffc90014a47580 RDI: 00000000200000e0 [ 791.354821][ T29] RBP: ffffc90014a47638 R08: ffffc90014a475b7 R09: 1ffff92002948eb6 [ 791.365648][ T29] R10: dffffc0000000000 R11: fffff52002948eb7 R12: 0000000000000038 [ 791.376756][ T29] R13: ffffc90014a47580 R14: 00000000200000e0 R15: ffffc90014a47580 [ 791.385351][ T29] _copy_to_user+0x86/0xa0 [ 791.392598][ T29] fiemap_fill_next_extent+0x235/0x410 [ 791.400211][ T29] ? vfs_ioctl+0xc0/0xc0 [ 791.406169][ T29] ? btrfs_get_64+0x1c8/0x450 [ 791.411388][ T29] emit_fiemap_extent+0x258/0x410 [ 791.419965][ T29] extent_fiemap+0xeee/0x1fe0 [ 791.430010][ T29] ? try_release_extent_mapping+0x560/0x560 [ 791.441208][ T29] ? __lock_acquire+0x1345/0x1fd0 [ 791.450557][ T29] ? __might_sleep+0xe0/0xe0 [ 791.458613][ T29] ? fiemap_prep+0x19e/0x240 [ 791.463685][ T29] btrfs_fiemap+0x178/0x1e0 [ 791.476537][ T29] ? btrfs_getattr+0x4b0/0x4b0 [ 791.482084][ T29] ? __might_fault+0xc1/0x120 [ 791.489616][ T29] ? btrfs_getattr+0x4b0/0x4b0 [ 791.494884][ T29] do_vfs_ioctl+0x19ea/0x2b40 [ 791.503568][ T29] ? __x64_compat_sys_ioctl+0x90/0x90 [ 791.512179][ T29] ? __lock_acquire+0x1fd0/0x1fd0 [ 791.521074][ T29] ? lockdep_hardirqs_on+0x98/0x140 [ 791.532620][ T29] ? __kmem_cache_free+0x263/0x3a0 [ 791.539188][ T29] ? tomoyo_path_number_perm+0x68d/0x870 [ 791.547443][ T29] ? tomoyo_path_number_perm+0x71a/0x870 [ 791.554890][ T29] ? tomoyo_path_number_perm+0x208/0x870 [ 791.563413][ T29] ? smack_log+0x123/0x540 [ 791.572541][ T29] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 791.578582][ T29] ? smk_access+0x4e0/0x4e0 [ 791.585030][ T29] ? smk_access+0x4ab/0x4e0 [ 791.590193][ T29] ? smk_tskacc+0x2ff/0x360 [ 791.599129][ T29] ? smack_file_ioctl+0x2fa/0x3a0 [ 791.604374][ T29] ? smack_file_alloc_security+0xe0/0xe0 [ 791.615706][ T29] ? bpf_lsm_file_ioctl+0x9/0x10 [ 791.625170][ T29] ? security_file_ioctl+0x81/0xa0 [ 791.634285][ T29] __se_sys_ioctl+0x81/0x170 [ 791.639808][ T29] do_syscall_64+0x45/0x110 [ 791.647139][ T29] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 791.653234][ T29] RIP: 0033:0x7fb40d07cce9 [ 791.663593][ T29] RSP: 002b:00007fb40dd3a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 791.682398][ T29] RAX: ffffffffffffffda RBX: 00007fb40d19c1f0 RCX: 00007fb40d07cce9 [ 791.696909][ T29] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000006 [ 791.705814][ T29] RBP: 00007fb40d0c947a R08: 0000000000000000 R09: 0000000000000000 [ 791.725454][ T29] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 791.735995][ T29] R13: 000000000000006e R14: 00007fb40d19c1f0 R15: 00007fffca163ff8 [ 791.744466][ T29] [ 791.747968][ T29] [ 791.747968][ T29] Showing all locks held in the system: [ 791.757011][ T29] 1 lock held by khungtaskd/29: [ 791.762037][ T29] #0: ffffffff8d92dae0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 791.772402][ T29] 2 locks held by getty/4816: [ 791.777546][ T29] #0: ffff88814c1880a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 791.788680][ T29] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b4/0x1e10 [ 791.799150][ T29] 4 locks held by kworker/0:5/5158: [ 791.804616][ T29] #0: ffff8880b983c358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 791.815024][ T29] #1: ffff8880b9828808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 791.830732][ T29] #2: ffff8880b9829718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x120/0x260 [ 791.841400][ T29] #3: ffffffff927a1be8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x163/0x530 20:36:03 executing program 0: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0xff8, 0x5) [ 791.852210][ T29] 2 locks held by kworker/u4:2/9601: [ 791.859768][ T29] #0: ffff8880b983c358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 791.871041][ T29] #1: ffff8880b9828808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 791.883625][ T29] 2 locks held by syz-executor.4/17839: [ 791.895487][ T29] #0: ffff88803930c418 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x607/0x1000 20:36:03 executing program 2: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x4000000000010046) pread64(r1, &(0x7f0000000100)=""/4096, 0x1100, 0x5) [ 791.920166][ T29] #1: ffff88807a97bd38 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: btrfs_inode_lock+0x60/0xd0 [ 791.950340][ T29] 2 locks held by syz-executor.4/17884: [ 791.975990][ T29] #0: ffff88803930c418 (sb_writers#13){.+.+}-{0:0}, at: do_sendfile+0x607/0x1000 [ 791.985331][ T29] #1: ffff88807a97bd38 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: btrfs_inode_lock+0x4d/0xd0 [ 792.014817][ T29] 4 locks held by syz-executor.4/17885: [ 792.021818][ T29] #0: ffff88807a97bd38 (&sb->s_type->i_mutex_key#21){++++}-{3:3}, at: btrfs_inode_lock+0x60/0xd0 [ 792.033102][ T29] #1: ffff8880788b9e20 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2d0 [ 792.045459][ T29] #2: ffff88803930c510 (sb_pagefaults#8){.+.+}-{0:0}, at: do_page_mkwrite+0x197/0x470 [ 792.060408][ T29] #3: ffff88807a97bbc0 (&ei->i_mmap_lock){++++}-{3:3}, at: btrfs_page_mkwrite+0x49c/0xd10 [ 792.072842][ T29] 2 locks held by syz-executor.4/17933: [ 792.081794][ T29] #0: ffff88807e3d20e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xad/0xf0 [ 792.093250][ T29] #1: ffffffff8d9334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46c/0x890 [ 792.104679][ T29] 2 locks held by syz-executor.3/21624: [ 792.110594][ T29] #0: ffff88807a8a0e00 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: do_lock_mount+0x112/0x390 [ 792.123215][ T29] #1: ffffffff8d9334b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x46c/0x890 [ 792.135583][ T29] 1 lock held by syz-executor.3/21625: [ 792.143605][ T29] #0: ffff88807a8a0e00 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: do_lock_mount+0x112/0x390 [ 792.154666][ T29] 1 lock held by syz-executor.2/21645: [ 792.164060][ T29] #0: ffff88801b8ba418 (sb_writers#4){.+.+}-{0:0}, at: do_sendfile+0x607/0x1000 20:36:03 executing program 5: mkdir(&(0x7f0000000100)='./file1/file0\x00', 0x61) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="776f726b6469723d2e2f6275732c6c6f7765726469723d2e2f66696c65302c75707065726469723d2e2f66836c65312c00cf8b823e0c3cd499d1da1fc7daae671bbaf81ee013710c7fa3b32c2b5dc77c9de7c4d4f134810b050c1a5a15046f5040a62540de2bdf9a449d586472c79a158921fd0c6d70f3ed10e20cebd82d7862330447f19abc2d495272b35027b14c0048cbf67e34ac3294563831dc4ddf91e5208373a5d6de1e08c4e02a8812796c9653e153900541869ac5c4938f6af4c17d031cb057729bb79fbd81ecbd366f25f70a940912ec12d3df5c4ef8551b274fcc928d24f1ac4f9521b0a790b213226a776f5f784ac55d8c3169c01c36b30da941e1d3be097f7c5d8beed6e953d39755ec704a6347b41a5766930c75b10aa46f37fdd44daefcea5be41611f4042a823340a9c62dadab8227472a6cacdd4cef807d78ae30a616eeb4ff5e353c20920f200ab53794ec030bdd1b55f6dab17144e6ccbe164abf9c70d526f7fffab71746ce74696e02a21c2cc6fa9634ab81eea7cc29f11505de2385c60d49cf239d14b857f044620aa8feb92647986e1b5ce04e3aafb8e4da71c73e7294e5e1524c87"]) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', 0x0, 0x4030, &(0x7f0000000440)={[], [{@flag='sync'}]}) (async) open(&(0x7f0000000040)='./file1\x00', 0x84000, 0x109) [ 792.174696][ T29] 1 lock held by syz-executor.0/21644: [ 792.180478][ T29] #0: ffff88801b8ba418 (sb_writers#4){.+.+}-{0:0}, at: do_sendfile+0x607/0x1000 [ 792.191839][ T29] 20:36:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='logfs\x00', 0x29008, 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80000) r1 = dup3(r0, r0, 0x80000) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a5000, 0x0) (async) r2 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x1a5000, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0xe1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {r3, 0xffffffffffffffff}}, './file0\x00'}) [ 792.251892][ T29] ============================================= [ 792.251892][ T29] [ 792.261310][T21649] overlayfs: failed to resolve './fƒle1': -2 20:36:03 executing program 1: r0 = open(&(0x7f0000000000)='./bus\x00', 0x143042, 0x0) ftruncate(r0, 0x2007ffb) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001600)={0x3, 0x0, &(0x7f0000001540)=[{&(0x7f0000001000)=""/9, 0x9}, {&(0x7f0000001040)=""/169, 0xa9}, {&(0x7f0000001100)=""/212, 0xd4}, {&(0x7f0000001200)=""/135, 0x87}, {&(0x7f00000012c0)=""/229, 0xe5}, {&(0x7f00000013c0)=""/205, 0xcd}, {&(0x7f00000014c0)=""/111, 0x6f}], &(0x7f00000015c0)=[0x2, 0x4], 0x7}, 0x20) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000000)={{0x0, 0x3, 0x9, 0x3f, 0x9, 0x5df1, 0x3, 0x0, 0x80000000, 0xfffffff8, 0x8, 0x6106, 0x3, 0x1, 0x1}}) [ 792.300167][ T29] NMI backtrace for cpu 1 [ 792.304576][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 792.314410][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 792.324582][ T29] Call Trace: [ 792.328070][ T29] [ 792.331042][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 792.336574][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 792.342074][ T29] ? panic+0x850/0x850 [ 792.346185][ T29] ? vprintk_emit+0x607/0x720 [ 792.350907][ T29] ? printk_sprint+0x480/0x480 [ 792.355724][ T29] nmi_cpu_backtrace+0x498/0x4d0 [ 792.360704][ T29] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 792.367051][ T29] ? _printk+0xd5/0x120 [ 792.371239][ T29] ? panic+0x850/0x850 [ 792.375340][ T29] ? __wake_up_klogd+0xcc/0x100 [ 792.380226][ T29] ? panic+0x850/0x850 [ 792.384316][ T29] ? __rcu_read_unlock+0x98/0x100 [ 792.389364][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 792.395641][ T29] nmi_trigger_cpumask_backtrace+0x198/0x310 [ 792.401662][ T29] watchdog+0xfaf/0xff0 [ 792.405859][ T29] ? watchdog+0x1e9/0xff0 [ 792.410236][ T29] kthread+0x2d3/0x370 [ 792.414422][ T29] ? hungtask_pm_notify+0x90/0x90 [ 792.419482][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.424106][ T29] ret_from_fork+0x48/0x80 [ 792.428553][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.433172][ T29] ret_from_fork_asm+0x11/0x20 [ 792.438126][ T29] [ 792.442673][ T29] Sending NMI from CPU 1 to CPUs 0: [ 792.448579][ C0] NMI backtrace for cpu 0 [ 792.448600][ C0] CPU: 0 PID: 17924 Comm: udevd Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 792.448618][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 792.448628][ C0] RIP: 0010:__lock_acquire+0xd43/0x1fd0 [ 792.448654][ C0] Code: 24 8b 18 48 85 db 74 59 83 fb 31 0f 83 dd 10 00 00 48 8d 04 9b 48 8b 4c 24 08 48 8d 5c c1 f8 48 89 d8 48 c1 e8 03 0f b6 04 38 <84> c0 0f 85 1e 0d 00 00 8b 1b 48 8b 44 24 20 0f b6 04 38 84 c0 0f [ 792.448668][ C0] RSP: 0018:ffffc90000007450 EFLAGS: 00000806 [ 792.448683][ C0] RAX: 0000000000000000 RBX: ffff888018f0c688 RCX: ffff888018f0c640 [ 792.448696][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 792.448706][ C0] RBP: ffff888018f0c690 R08: ffffffff90dd8367 R09: 1ffffffff21bb06c [ 792.448718][ C0] R10: dffffc0000000000 R11: fffffbfff21bb06d R12: 37030e2b94582f4c [ 792.448730][ C0] R13: ffff888018f0bb80 R14: 0000000000000000 R15: ffff888018f0c6b0 [ 792.448743][ C0] FS: 00007f5b9e4d0c80(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 792.448757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 792.448769][ C0] CR2: 00007f55cb2c56be CR3: 0000000029595000 CR4: 00000000003506f0 [ 792.448783][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 792.448792][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 792.448803][ C0] Call Trace: [ 792.448809][ C0] [ 792.448815][ C0] ? nmi_cpu_backtrace+0x3be/0x4d0 [ 792.448839][ C0] ? read_lock_is_recursive+0x20/0x20 [ 792.448859][ C0] ? nmi_trigger_cpumask_backtrace+0x310/0x310 [ 792.448889][ C0] ? nmi_cpu_backtrace_handler+0xc/0x10 [ 792.448910][ C0] ? nmi_handle+0x14c/0x570 [ 792.448930][ C0] ? nmi_handle+0x2a/0x570 [ 792.448949][ C0] ? __lock_acquire+0xd43/0x1fd0 [ 792.448966][ C0] ? default_do_nmi+0x63/0x150 [ 792.448989][ C0] ? exc_nmi+0x121/0x210 [ 792.449010][ C0] ? end_repeat_nmi+0xf/0x2a [ 792.449030][ C0] ? __lock_acquire+0xd43/0x1fd0 [ 792.449048][ C0] ? __lock_acquire+0xd43/0x1fd0 [ 792.449070][ C0] ? __lock_acquire+0xd43/0x1fd0 [ 792.449088][ C0] [ 792.449092][ C0] [ 792.449105][ C0] lock_acquire+0x1e3/0x530 [ 792.449122][ C0] ? ___slab_alloc+0x440/0x1330 [ 792.449149][ C0] ? read_lock_is_recursive+0x20/0x20 [ 792.449169][ C0] ? lockdep_hardirqs_on_prepare+0x43c/0x780 [ 792.449188][ C0] ? print_irqtrace_events+0x220/0x220 [ 792.449208][ C0] ? ___slab_alloc+0x20a/0x1330 [ 792.449344][ C0] ? ___slab_alloc+0x440/0x1330 [ 792.449368][ C0] ___slab_alloc+0x459/0x1330 [ 792.449392][ C0] ? ___slab_alloc+0x440/0x1330 [ 792.449417][ C0] ? __alloc_skb+0x181/0x420 [ 792.449481][ C0] ? __alloc_skb+0x181/0x420 [ 792.449502][ C0] kmem_cache_alloc_node+0x22b/0x310 [ 792.449527][ C0] __alloc_skb+0x181/0x420 [ 792.449548][ C0] ? ktime_get_with_offset+0x105/0x320 [ 792.449571][ C0] ? napi_build_skb+0x270/0x270 [ 792.449591][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 792.449614][ C0] ? do_raw_spin_lock+0x14e/0x370 [ 792.449636][ C0] skb_copy+0xef/0x760 [ 792.449657][ C0] ? __rwlock_init+0x150/0x150 [ 792.449681][ C0] mac80211_hwsim_tx_frame_no_nl+0x1063/0x18c0 [ 792.449702][ C0] ? seqcount_lockdep_reader_access+0x157/0x220 [ 792.449723][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 792.449740][ C0] ? mac80211_hwsim_tx_frame_nl+0x11e0/0x11e0 [ 792.449755][ C0] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 792.449776][ C0] ? ktime_get_real_ts64+0x470/0x470 [ 792.449802][ C0] ? mac80211_hwsim_monitor_rx+0x1bb/0x800 [ 792.449821][ C0] mac80211_hwsim_tx_frame+0x1cc/0x220 [ 792.449841][ C0] mac80211_hwsim_beacon_tx+0x3d9/0x7b0 [ 792.449860][ C0] __iterate_interfaces+0x21e/0x4b0 [ 792.449954][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 792.449972][ C0] ? mac80211_hwsim_vendor_cmd_test+0x340/0x340 [ 792.449988][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 792.450011][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 792.450035][ C0] mac80211_hwsim_beacon+0xd4/0x1e0 [ 792.450060][ C0] ? hw_scan_work+0xf30/0xf30 [ 792.450082][ C0] __hrtimer_run_queues+0x59f/0xd20 [ 792.450109][ C0] ? hrtimer_interrupt+0x980/0x980 [ 792.450127][ C0] ? ktime_get_update_offsets_now+0x40b/0x420 [ 792.450154][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 792.450189][ C0] __do_softirq+0x2b8/0x939 [ 792.450210][ C0] ? __irq_exit_rcu+0xf1/0x1b0 [ 792.450228][ C0] ? __lock_text_end+0xa/0xa [ 792.450247][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 792.450270][ C0] __irq_exit_rcu+0xf1/0x1b0 [ 792.450285][ C0] ? irq_exit_rcu+0x20/0x20 [ 792.450304][ C0] irq_exit_rcu+0x9/0x20 [ 792.450318][ C0] sysvec_apic_timer_interrupt+0x97/0xb0 [ 792.450336][ C0] [ 792.450341][ C0] [ 792.450347][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 792.450365][ C0] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 792.450383][ C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 f3 0f 1e fa 89 f6 31 d2 e9 67 fe 80 03 0f 1f 80 00 00 00 [ 792.450397][ C0] RSP: 0018:ffffc90014a679e8 EFLAGS: 00000246 [ 792.450413][ C0] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 792.450424][ C0] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 792.450435][ C0] RBP: 0000000000000000 R08: ffffffff8131962e R09: 1ffff9200294cf28 [ 792.450446][ C0] R10: dffffc0000000000 R11: fffff5200294cf29 R12: ffffffff8da29da8 [ 792.450458][ C0] R13: 0000000000000000 R14: 2c1008001f8bfbff R15: 0000000000000020 [ 792.450473][ C0] ? arch_irq_work_raise+0x4e/0x80 [ 792.450498][ C0] arch_irq_work_raise+0x6b/0x80 [ 792.450521][ C0] irq_work_queue+0xa7/0x150 [ 792.450543][ C0] __kfence_alloc+0x22a/0x370 [ 792.450566][ C0] ? kfence_guarded_free+0x4e0/0x4e0 [ 792.450609][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 792.450625][ C0] ? __lock_acquire+0x1fd0/0x1fd0 [ 792.450646][ C0] ? getname_flags+0xbc/0x4f0 [ 792.450668][ C0] kmem_cache_alloc+0x244/0x2b0 [ 792.450690][ C0] getname_flags+0xbc/0x4f0 [ 792.450716][ C0] user_path_at_empty+0x2c/0x60 [ 792.450733][ C0] do_readlinkat+0x118/0x3b0 [ 792.450766][ C0] ? cp_new_stat+0x6d0/0x6d0 [ 792.450786][ C0] ? print_irqtrace_events+0x220/0x220 [ 792.450806][ C0] ? syscall_enter_from_user_mode+0xa4/0x2d0 [ 792.450829][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 792.450847][ C0] __x64_sys_readlink+0x7f/0x90 [ 792.450867][ C0] do_syscall_64+0x45/0x110 [ 792.450889][ C0] entry_SYSCALL_64_after_hwframe+0x63/0x6b [ 792.450913][ C0] RIP: 0033:0x7f5b9e117d47 [ 792.450927][ C0] Code: 73 01 c3 48 8b 0d e1 90 0d 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d b1 90 0d 00 f7 d8 64 89 01 48 [ 792.450941][ C0] RSP: 002b:00007fff0f18bcf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 792.450958][ C0] RAX: ffffffffffffffda RBX: 00007fff0f18bd08 RCX: 00007f5b9e117d47 [ 792.450970][ C0] RDX: 0000000000000400 RSI: 00007fff0f18bd08 RDI: 00007fff0f18c1e8 [ 792.450981][ C0] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000 [ 792.450991][ C0] R10: 0000000000000010 R11: 0000000000000246 R12: 00007fff0f18c1e8 [ 792.451002][ C0] R13: 00007fff0f18c158 R14: 000055e7ae154910 R15: 000055e7ad1ada04 [ 792.451020][ C0] [ 792.497993][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 792.498011][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted 6.7.0-rc7-syzkaller-00041-gf016f7547aee #0 [ 792.498032][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/17/2023 [ 792.498042][ T29] Call Trace: [ 792.498048][ T29] [ 792.498056][ T29] dump_stack_lvl+0x1e7/0x2d0 [ 792.498091][ T29] ? nf_tcp_handle_invalid+0x650/0x650 [ 792.498114][ T29] ? panic+0x850/0x850 [ 792.498137][ T29] ? vscnprintf+0x5d/0x80 [ 792.498158][ T29] panic+0x349/0x850 [ 792.498183][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 792.498207][ T29] ? __memcpy_flushcache+0x2b0/0x2b0 [ 792.498228][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 792.498252][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 792.498275][ T29] ? nmi_trigger_cpumask_backtrace+0x244/0x310 [ 792.498296][ T29] ? nmi_trigger_cpumask_backtrace+0x2c7/0x310 [ 792.498321][ T29] ? nmi_trigger_cpumask_backtrace+0x2cc/0x310 [ 792.498346][ T29] watchdog+0xfee/0xff0 [ 792.498370][ T29] ? watchdog+0x1e9/0xff0 [ 792.498398][ T29] kthread+0x2d3/0x370 [ 792.498414][ T29] ? hungtask_pm_notify+0x90/0x90 [ 792.498435][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.498452][ T29] ret_from_fork+0x48/0x80 [ 792.498470][ T29] ? kthread_blkcg+0xd0/0xd0 [ 792.498487][ T29] ret_from_fork_asm+0x11/0x20 [ 792.498518][ T29] [ 792.506387][ T29] Kernel Offset: disabled [ 793.309080][ T29] Rebooting in 86400 seconds..