program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 18)
[ 76.100666][ T5305] Bluetooth: hci0: command tx timeout
[ 76.228896][ T5320] FAULT_INJECTION: forcing a failure.
[ 76.228896][ T5320] name failslab, interval 1, probability 0, space 0, times 1
[ 76.233984][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0
[ 76.238105][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.242563][ T5320] Call Trace:
[ 76.244249][ T5320]
[ 76.245649][ T5320] dump_stack_lvl+0x241/0x360
[ 76.248216][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.250676][ T5320] ? __pfx__printk+0x10/0x10
[ 76.252465][ T5320] ? __kmalloc_cache_noprof+0x48/0x390
[ 76.254453][ T5320] ? __pfx___might_resched+0x10/0x10
[ 76.256193][ T5320] should_fail_ex+0x3b0/0x4e0
[ 76.257716][ T5320] should_failslab+0xac/0x100
[ 76.259295][ T5320] __kmalloc_cache_noprof+0x70/0x390
[ 76.261118][ T5320] ? ovl_encode_real_fh+0xdf/0x410
[ 76.263063][ T5320] ovl_encode_real_fh+0xdf/0x410
[ 76.264923][ T5320] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 76.267045][ T5320] ? _raw_spin_unlock+0x28/0x50
[ 76.268921][ T5320] ovl_encode_fh+0x388/0xc20
[ 76.270517][ T5320] exportfs_encode_fh+0x1ae/0x480
[ 76.272550][ T5320] ovl_encode_real_fh+0x129/0x410
[ 76.274421][ T5320] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 76.276469][ T5320] ovl_lookup_index+0x71/0x6e0
[ 76.278238][ T5320] ovl_lookup+0x1d6b/0x2a60
[ 76.279876][ T5320] ? __pfx_ovl_lookup+0x10/0x10
[ 76.281559][ T5320] ? d_alloc_parallel+0x14a8/0x1600
[ 76.283492][ T5320] ? d_alloc_parallel+0x311/0x1600
[ 76.285403][ T5320] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 76.287577][ T5320] ? __pfx_d_alloc_parallel+0x10/0x10
[ 76.289605][ T5320] ? __init_waitqueue_head+0xae/0x150
[ 76.291651][ T5320] __lookup_slow+0x28c/0x3f0
[ 76.293398][ T5320] ? __pfx___lookup_slow+0x10/0x10
[ 76.295412][ T5320] ? try_to_unlazy+0x35c/0x5b0
[ 76.296812][ T5320] lookup_slow+0x53/0x70
[ 76.298166][ T5320] walk_component+0x2e1/0x410
[ 76.299831][ T5320] path_lookupat+0x16f/0x450
[ 76.301437][ T5320] filename_lookup+0x2a3/0x670
[ 76.303111][ T5320] ? __virt_addr_valid+0x183/0x530
[ 76.305020][ T5320] ? __pfx_filename_lookup+0x10/0x10
[ 76.306946][ T5320] ? strncpy_from_user+0x152/0x270
[ 76.308640][ T5320] ? getname_flags+0x1e3/0x540
[ 76.310237][ T5320] ? __fget_files+0x2a/0x410
[ 76.311862][ T5320] user_path_at+0x3a/0x60
[ 76.313380][ T5320] do_fchownat+0xed/0x240
[ 76.314919][ T5320] ? __pfx_do_fchownat+0x10/0x10
[ 76.316729][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 76.319077][ T5320] ? do_syscall_64+0x100/0x230
[ 76.320820][ T5320] __x64_sys_fchownat+0xb5/0xd0
[ 76.322514][ T5320] do_syscall_64+0xf3/0x230
[ 76.324317][ T5320] ? clear_bhb_loop+0x35/0x90
[ 76.326070][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.328294][ T5320] RIP: 0033:0x7fa333785d29
[ 76.330053][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.337073][ T5320] RSP: 002b:00007fa3331f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 76.340032][ T5320] RAX: ffffffffffffffda RBX: 00007fa333975fa0 RCX: 00007fa333785d29
[ 76.342831][ T5320] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 76.345676][ T5320] RBP: 00007fa3331f8090 R08: 0000000000000000 R09: 0000000000000000
[ 76.348415][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 76.351212][ T5320] R13: 0000000000000000 R14: 00007fa333975fa0 R15: 00007fffde3ae4f8
[ 76.353970][ T5320]
[ 76.361165][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[ 76.363528][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[ 76.373293][ T5320] ------------[ cut here ]------------
[ 76.375433][ T5320] WARNING: CPU: 0 PID: 5320 at fs/overlayfs/copy_up.c:447 ovl_encode_real_fh+0x2e2/0x410
[ 76.379129][ T5320] Modules linked in:
[ 76.380494][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0
[ 76.384439][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.388589][ T5320] RIP: 0010:ovl_encode_real_fh+0x2e2/0x410
[ 76.390842][ T5320] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 f5 71 7c fe 90 0f 0b 90 eb 14 e8 ea 71 7c fe 90 0f 0b 90 eb 09 e8 df 71 7c fe 90 <0f> 0b 90 4c 89 ff e8 93 3a d7 fe 49 c7 c7 fb ff ff ff eb 8b 89 d1
[ 76.398219][ T5320] RSP: 0018:ffffc9000d3af560 EFLAGS: 00010293
[ 76.400440][ T5320] RAX: ffffffff83231241 RBX: 1ffff92001a75eb4 RCX: ffff88801a924880
[ 76.403399][ T5320] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff
[ 76.406396][ T5320] RBP: ffffc9000d3af610 R08: ffffffff832310dc R09: 1ffffffff2033026
[ 76.409245][ T5320] R10: dffffc0000000000 R11: fffffbfff2033027 R12: 00000000000000ff
[ 76.412161][ T5320] R13: 0000000000000080 R14: 1ffff92001a75eb0 R15: ffff88801a854b00
[ 76.415095][ T5320] FS: 00007fa3331f86c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 76.418522][ T5320] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 76.420914][ T5320] CR2: 00007fa3344ad9b8 CR3: 0000000036a98000 CR4: 0000000000352ef0
[ 76.423812][ T5320] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 76.426899][ T5320] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 76.430033][ T5320] Call Trace:
[ 76.431266][ T5320]
[ 76.432373][ T5320] ? __warn+0x165/0x4d0
[ 76.433764][ T5320] ? ovl_encode_real_fh+0x2e2/0x410
[ 76.435965][ T5320] ? report_bug+0x2b3/0x500
[ 76.437731][ T5320] ? ovl_encode_real_fh+0x2e2/0x410
[ 76.439734][ T5320] ? handle_bug+0x60/0x90
[ 76.441473][ T5320] ? exc_invalid_op+0x1a/0x50
[ 76.443275][ T5320] ? asm_exc_invalid_op+0x1a/0x20
[ 76.445241][ T5320] ? ovl_encode_real_fh+0x17c/0x410
[ 76.447337][ T5320] ? ovl_encode_real_fh+0x2e1/0x410
[ 76.449290][ T5320] ? ovl_encode_real_fh+0x2e2/0x410
[ 76.451208][ T5320] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 76.453327][ T5320] ovl_lookup_index+0x71/0x6e0
[ 76.454970][ T5320] ovl_lookup+0x1d6b/0x2a60
[ 76.456583][ T5320] ? __pfx_ovl_lookup+0x10/0x10
[ 76.458091][ T5320] ? d_alloc_parallel+0x14a8/0x1600
[ 76.459828][ T5320] ? d_alloc_parallel+0x311/0x1600
[ 76.461583][ T5320] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 76.463814][ T5320] ? __pfx_d_alloc_parallel+0x10/0x10
[ 76.466064][ T5320] ? __init_waitqueue_head+0xae/0x150
[ 76.468026][ T5320] __lookup_slow+0x28c/0x3f0
[ 76.469654][ T5320] ? __pfx___lookup_slow+0x10/0x10
[ 76.471469][ T5320] ? try_to_unlazy+0x35c/0x5b0
[ 76.473205][ T5320] lookup_slow+0x53/0x70
[ 76.474871][ T5320] walk_component+0x2e1/0x410
[ 76.476757][ T5320] path_lookupat+0x16f/0x450
[ 76.478555][ T5320] filename_lookup+0x2a3/0x670
[ 76.480402][ T5320] ? __virt_addr_valid+0x183/0x530
[ 76.482421][ T5320] ? __pfx_filename_lookup+0x10/0x10
[ 76.484479][ T5320] ? strncpy_from_user+0x152/0x270
[ 76.486518][ T5320] ? getname_flags+0x1e3/0x540
[ 76.488373][ T5320] ? __fget_files+0x2a/0x410
[ 76.490125][ T5320] user_path_at+0x3a/0x60
[ 76.491823][ T5320] do_fchownat+0xed/0x240
[ 76.493493][ T5320] ? __pfx_do_fchownat+0x10/0x10
[ 76.495401][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 76.497955][ T5320] ? do_syscall_64+0x100/0x230
[ 76.499616][ T5320] __x64_sys_fchownat+0xb5/0xd0
[ 76.501597][ T5320] do_syscall_64+0xf3/0x230
[ 76.503328][ T5320] ? clear_bhb_loop+0x35/0x90
[ 76.505073][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.507190][ T5320] RIP: 0033:0x7fa333785d29
[ 76.508784][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.515960][ T5320] RSP: 002b:00007fa3331f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 76.519092][ T5320] RAX: ffffffffffffffda RBX: 00007fa333975fa0 RCX: 00007fa333785d29
[ 76.522150][ T5320] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 76.525222][ T5320] RBP: 00007fa3331f8090 R08: 0000000000000000 R09: 0000000000000000
[ 76.528401][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 76.531692][ T5320] R13: 0000000000000000 R14: 00007fa333975fa0 R15: 00007fffde3ae4f8
[ 76.534570][ T5320]
[ 76.536022][ T5320] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 76.538748][ T5320] CPU: 0 UID: 0 PID: 5320 Comm: syz.0.0 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0
[ 76.542554][ T5320] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 76.546581][ T5320] Call Trace:
[ 76.547784][ T5320]
[ 76.548888][ T5320] dump_stack_lvl+0x241/0x360
[ 76.550714][ T5320] ? __pfx_dump_stack_lvl+0x10/0x10
[ 76.552736][ T5320] ? __pfx__printk+0x10/0x10
[ 76.554555][ T5320] ? _printk+0xd5/0x120
[ 76.556107][ T5320] ? __init_begin+0x41000/0x41000
[ 76.558014][ T5320] ? vscnprintf+0x5d/0x90
[ 76.559688][ T5320] panic+0x349/0x880
[ 76.561224][ T5320] ? __warn+0x174/0x4d0
[ 76.562868][ T5320] ? __pfx_panic+0x10/0x10
[ 76.564638][ T5320] __warn+0x344/0x4d0
[ 76.566210][ T5320] ? ovl_encode_real_fh+0x2e2/0x410
[ 76.568211][ T5320] report_bug+0x2b3/0x500
[ 76.569871][ T5320] ? ovl_encode_real_fh+0x2e2/0x410
[ 76.571908][ T5320] handle_bug+0x60/0x90
[ 76.573515][ T5320] exc_invalid_op+0x1a/0x50
[ 76.575301][ T5320] asm_exc_invalid_op+0x1a/0x20
[ 76.577166][ T5320] RIP: 0010:ovl_encode_real_fh+0x2e2/0x410
[ 76.579345][ T5320] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 f5 71 7c fe 90 0f 0b 90 eb 14 e8 ea 71 7c fe 90 0f 0b 90 eb 09 e8 df 71 7c fe 90 <0f> 0b 90 4c 89 ff e8 93 3a d7 fe 49 c7 c7 fb ff ff ff eb 8b 89 d1
[ 76.586602][ T5320] RSP: 0018:ffffc9000d3af560 EFLAGS: 00010293
[ 76.588941][ T5320] RAX: ffffffff83231241 RBX: 1ffff92001a75eb4 RCX: ffff88801a924880
[ 76.592005][ T5320] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff
[ 76.595113][ T5320] RBP: ffffc9000d3af610 R08: ffffffff832310dc R09: 1ffffffff2033026
[ 76.598166][ T5320] R10: dffffc0000000000 R11: fffffbfff2033027 R12: 00000000000000ff
[ 76.601176][ T5320] R13: 0000000000000080 R14: 1ffff92001a75eb0 R15: ffff88801a854b00
[ 76.604065][ T5320] ? ovl_encode_real_fh+0x17c/0x410
[ 76.606063][ T5320] ? ovl_encode_real_fh+0x2e1/0x410
[ 76.608009][ T5320] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 76.610096][ T5320] ovl_lookup_index+0x71/0x6e0
[ 76.611972][ T5320] ovl_lookup+0x1d6b/0x2a60
[ 76.613763][ T5320] ? __pfx_ovl_lookup+0x10/0x10
[ 76.615596][ T5320] ? d_alloc_parallel+0x14a8/0x1600
[ 76.617582][ T5320] ? d_alloc_parallel+0x311/0x1600
[ 76.619579][ T5320] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 76.621862][ T5320] ? __pfx_d_alloc_parallel+0x10/0x10
[ 76.623834][ T5320] ? __init_waitqueue_head+0xae/0x150
[ 76.625906][ T5320] __lookup_slow+0x28c/0x3f0
[ 76.627628][ T5320] ? __pfx___lookup_slow+0x10/0x10
[ 76.629518][ T5320] ? try_to_unlazy+0x35c/0x5b0
[ 76.631288][ T5320] lookup_slow+0x53/0x70
[ 76.632894][ T5320] walk_component+0x2e1/0x410
[ 76.634625][ T5320] path_lookupat+0x16f/0x450
[ 76.636409][ T5320] filename_lookup+0x2a3/0x670
[ 76.638178][ T5320] ? __virt_addr_valid+0x183/0x530
[ 76.640138][ T5320] ? __pfx_filename_lookup+0x10/0x10
[ 76.642101][ T5320] ? strncpy_from_user+0x152/0x270
[ 76.644100][ T5320] ? getname_flags+0x1e3/0x540
[ 76.645992][ T5320] ? __fget_files+0x2a/0x410
[ 76.647774][ T5320] user_path_at+0x3a/0x60
[ 76.649505][ T5320] do_fchownat+0xed/0x240
[ 76.651238][ T5320] ? __pfx_do_fchownat+0x10/0x10
[ 76.653206][ T5320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 76.655743][ T5320] ? do_syscall_64+0x100/0x230
[ 76.657668][ T5320] __x64_sys_fchownat+0xb5/0xd0
[ 76.659604][ T5320] do_syscall_64+0xf3/0x230
[ 76.661390][ T5320] ? clear_bhb_loop+0x35/0x90
[ 76.663302][ T5320] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 76.665461][ T5320] RIP: 0033:0x7fa333785d29
[ 76.667104][ T5320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 76.673892][ T5320] RSP: 002b:00007fa3331f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 76.676860][ T5320] RAX: ffffffffffffffda RBX: 00007fa333975fa0 RCX: 00007fa333785d29
[ 76.679842][ T5320] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 76.682901][ T5320] RBP: 00007fa3331f8090 R08: 0000000000000000 R09: 0000000000000000
[ 76.686035][ T5320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 76.689142][ T5320] R13: 0000000000000000 R14: 00007fa333975fa0 R15: 00007fffde3ae4f8
[ 76.692337][ T5320]
[ 76.693861][ T5320] Kernel Offset: disabled
[ 76.695655][ T5320] Rebooting in 86400 seconds..