Extracting prog: 2m16.305560566s
Minimizing prog: 8m1.745645359s
Simplifying prog options: 0s
Extracting C: 40.868570263s
Simplifying C: 8m6.495179193s


1 programs, timeouts [30s 6m0s]
extracting reproducer from 1 programs
testing a last program of every proc
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

program crashed: WARNING in fscrypt_fname_siphash
single: successfully extracted reproducer
found reproducer with 4 syscalls
minimizing guilty program
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)

program did not crash
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-getdents64
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$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")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)

program did not crash
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-open-getdents64
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$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")
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

program did not crash
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdir-open-getdents64
detailed listing:
executing program 0:
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

program did not crash
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$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")
mkdir(0x0, 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

program did not crash
testing program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
detailed listing:
executing program 0:
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x3}}, {@test_dummy_encryption}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x3, 0x466, &(0x7f0000000e00)="$eJzs281vFOUfAPDvTF/48QPtqvjCi1pFY+NLSwGVgwc1mnjAxEQPemzaQpCFGloTIETBGDwZY+LdePRf8KQXYzyZeNW7ISGGC+BpzOzM0O12d6Fl20X280kGvs+87PN895ln95mZbgADazz/J4nYHhF/RMRYUVy5w3jx37Ur52avXzk3m0SWvft30tjv6pVzs9Wu1XHbysJEGpF+nsTuNvUunjl7fKZenz9VlqeWTnw0tXjm7AvHTswcnT86f3L/oUMHD0y//NL+F3uSZ96mq7s+Wdiz860Pvn778Jf5utEq/5Y8emS828ans6zH1fXXPU1xMtzHhrAmQxGRd9dIY/yPxVAsd95YvPlZu2N0L9wdsizLtnXefD4D7mJJrCwb8jAoqi/6/Pq3WlonAa9u3PSj7y6/VlzQ5HlfK5diy3Ck5T4jLde3vTQeEe+f/+fbfImNuQ8BALDCj/n85/l28780Hmra797y2VAtIu6LiPsj4oGI2BERD0Y09n04Ih5ZY/2tD0lWz3/SS+tK7Bbl879XymdbzfO/0Ruzv6gNNd6NYg5Yi5HkyLH6/L7yPZmIkS15ebpLHT+98ftXnbY1z//yJa+/mgsW0kvDW1YeMzezNHN7WS+7fCFi1/Dq/COSG/f5k4jYGRG71lnHsWe/39Np283z76IHDyKy7yKeKfr/fLTkX0m6P5+c+l/U5/dNVWfFar/+dvGdTvXfVv49kPf//9uc/03515Lm57WLa6/j4p9fdLymWe/5P5q814hHy3WnZ5aWTk1HjCaHi0Y3r9+/fGxVrvbP85/Y2y7/tPEZV70TuyMiP4kfjYjHIuLxsu1PRMSTEbG3S/6/vP7Uh0W0+oRtyr/auOn9P7em/l8ORqN1Tftg6PjPP6yotLYclvlf797/BxvRRLnmVj7/bqVd6zubAQAA4L8njYjtkaSTN+I0nZws/l5+R0RaX1hceu7Iwscn54rfCNRiJK3udI013Q+dLi/ri/KFiCj+tKDafqC8b/zN0NZGeXJ2oT7X7+RhwG3rMP5zfw31u3XAhvODHhhcxj8MLuMfBpfxD4Orzfjf2o92AJuv3ff/p31oB7D5Wsa/x34wQFz/w+DqNv6zLHMpAHcx3/8wkBa3xs1/JN81qF5pnYd3C4ZPFy/d+1fehCBG7ohmbFgQ6R3RDMEGBX38UAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOihfwMAAP//Evbb+Q==")
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r0 = open(0x0, 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=54.995750721s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
simplifying C reproducer
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
testing compiled C program (duration=54.995750721s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$ext4-mkdir-open-getdents64
program crashed: WARNING in fscrypt_fname_siphash
reproducing took 19m5.41497479s
repro crashed as (corrupted=false):
EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
EXT4-fs (loop0): 1 truncate cleaned up
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5215 at fs/crypto/fname.c:567 fscrypt_fname_siphash+0xc2/0x100 fs/crypto/fname.c:567
Modules linked in:
CPU: 0 UID: 0 PID: 5215 Comm: syz-executor165 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:fscrypt_fname_siphash+0xc2/0x100 fs/crypto/fname.c:567
Code: 0f b6 04 28 84 c0 75 3d 41 8b 34 24 49 83 c6 40 4c 89 ff 4c 89 f2 5b 41 5c 41 5d 41 5e 41 5f e9 e4 c1 85 09 e8 ef 80 6f ff 90 <0f> 0b 90 eb a8 89 d9 80 e1 07 38 c1 7c 86 48 89 df e8 88 a2 d3 ff
RSP: 0018:ffffc90002dbf430 EFLAGS: 00010293
RAX: ffffffff82240af1 RBX: 0000000000000000 RCX: ffff8880307a8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90002dbf5f0 R08: ffffffff82240a95 R09: ffffffff8254c6d8
R10: 0000000000000007 R11: ffff8880307a8000 R12: ffffc90002dbf580
R13: dffffc0000000000 R14: ffff888011a1b000 R15: ffff888011b0b488
FS:  000055557c620380(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020023000 CR3: 000000002de74000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __ext4fs_dirhash+0x3db/0x1530 fs/ext4/hash.c:268
 ext4fs_dirhash+0x193/0x320 fs/ext4/hash.c:322
 htree_dirblock_to_tree+0x727/0x10e0 fs/ext4/namei.c:1125
 ext4_htree_fill_tree+0x744/0x1400 fs/ext4/namei.c:1220
 ext4_dx_readdir fs/ext4/dir.c:597 [inline]
 ext4_readdir+0x2b1c/0x3500 fs/ext4/dir.c:142
 iterate_dir+0x57a/0x810 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:407 [inline]
 __se_sys_getdents64+0x20d/0x4f0 fs/readdir.c:392
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe3b8e60a39
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff9d8944f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 6f72746e6f632f2e RCX: 00007fe3b8e60a39
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fe3b8ed3610 R08: 0000000000000000 R09: 00007fff9d8946c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff9d8946b8 R14: 0000000000000001 R15: 0000000000000001
 </TASK>

final repro crashed as (corrupted=false):
EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
EXT4-fs (loop0): 1 truncate cleaned up
EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
------------[ cut here ]------------
WARNING: CPU: 0 PID: 5215 at fs/crypto/fname.c:567 fscrypt_fname_siphash+0xc2/0x100 fs/crypto/fname.c:567
Modules linked in:
CPU: 0 UID: 0 PID: 5215 Comm: syz-executor165 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
RIP: 0010:fscrypt_fname_siphash+0xc2/0x100 fs/crypto/fname.c:567
Code: 0f b6 04 28 84 c0 75 3d 41 8b 34 24 49 83 c6 40 4c 89 ff 4c 89 f2 5b 41 5c 41 5d 41 5e 41 5f e9 e4 c1 85 09 e8 ef 80 6f ff 90 <0f> 0b 90 eb a8 89 d9 80 e1 07 38 c1 7c 86 48 89 df e8 88 a2 d3 ff
RSP: 0018:ffffc90002dbf430 EFLAGS: 00010293
RAX: ffffffff82240af1 RBX: 0000000000000000 RCX: ffff8880307a8000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90002dbf5f0 R08: ffffffff82240a95 R09: ffffffff8254c6d8
R10: 0000000000000007 R11: ffff8880307a8000 R12: ffffc90002dbf580
R13: dffffc0000000000 R14: ffff888011a1b000 R15: ffff888011b0b488
FS:  000055557c620380(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000020023000 CR3: 000000002de74000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 <TASK>
 __ext4fs_dirhash+0x3db/0x1530 fs/ext4/hash.c:268
 ext4fs_dirhash+0x193/0x320 fs/ext4/hash.c:322
 htree_dirblock_to_tree+0x727/0x10e0 fs/ext4/namei.c:1125
 ext4_htree_fill_tree+0x744/0x1400 fs/ext4/namei.c:1220
 ext4_dx_readdir fs/ext4/dir.c:597 [inline]
 ext4_readdir+0x2b1c/0x3500 fs/ext4/dir.c:142
 iterate_dir+0x57a/0x810 fs/readdir.c:108
 __do_sys_getdents64 fs/readdir.c:407 [inline]
 __se_sys_getdents64+0x20d/0x4f0 fs/readdir.c:392
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x77/0x7f
RIP: 0033:0x7fe3b8e60a39
Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 61 17 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007fff9d8944f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
RAX: ffffffffffffffda RBX: 6f72746e6f632f2e RCX: 00007fe3b8e60a39
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
RBP: 00007fe3b8ed3610 R08: 0000000000000000 R09: 00007fff9d8946c8
R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
R13: 00007fff9d8946b8 R14: 0000000000000001 R15: 0000000000000001
 </TASK>