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"}, {0xc}, {0xc, 0x8, {0x3, 0x5}}}}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x4, 0x7}}, @TCA_FW_INDEV={0x14, 0x3, 'ipvlan0\x00'}]}}, @filter_kind_options=@f_rsvp={{0x9}, {0x12b0, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_RSVP_POLICE={0x410, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3f, 0x90c, 0x7, 0x6, 0x491a, 0x8, 0xff, 0xffffffff, 0x5, 0x1000, 0x3, 0x8, 0xb10c, 0x0, 0x3ff, 0x10000, 0x80, 0xa4, 0x1, 0x1, 0x5, 0xa6, 0x1, 0x2, 0x4, 0x1, 0x7fff, 0x9, 0x2, 0x1ff, 0x2, 0x7, 0x8, 0x0, 0x4, 0xcc72, 0x7fffffff, 0x0, 0x4, 0x4, 0x6, 0xffff, 0x606, 0x5, 0x7be482ea, 0x0, 0x800, 0x7, 0x1000, 0x6, 0x80, 0x2, 0x10001, 0x7, 0x7fffffff, 0x6, 0x1, 0x5, 0xffffffff, 0x0, 0x9, 0x10001, 0x5, 0x5, 0x6, 0x1f, 0x3, 0x0, 0x80c3, 0x400, 0x3, 0x8000, 0x4, 0x4, 0x3f, 0x516, 0xfff, 0x0, 0x800, 0x81, 0x8, 0x1ff, 0x7, 0xbb4, 0xfffeffff, 0x5, 0x80, 0x800, 0x5, 0x8, 0x0, 0xf850, 0xb, 0x8, 0xae24, 0x200, 0x1, 0x0, 0x28ce, 0x6, 0x10000, 0x3ff, 0x2, 0x1f, 0x4, 0x5, 0x4, 0x250, 0x401, 0x3, 0x2, 0x200, 0xa06, 0x1, 0x8, 0x3ff, 0x1d15, 0x4, 0x6, 0x988, 0x7, 0x6, 0xff, 0x3ff, 0x7, 0x2, 0x21, 0x6, 0x1ff, 0x9, 0x0, 0x0, 0x8, 0x4, 0x7, 0x36, 0x0, 0x3f, 0xfffffffc, 0x8, 0x8, 0x8, 0x4, 0xa6, 0x8001, 0x8001, 0xd5, 0xff, 0x3f, 0x1, 0x2, 0x7, 0x4c, 0x7, 0x1, 0x1, 0x6d4, 0x5, 0x368, 0x80, 0x1, 0x5, 0x7fff, 0x8f4, 0x7, 0x9, 0x200, 0x209, 0x18000, 0x6, 0xfffffff9, 0x7, 0x2, 0x9, 0x4, 0x20, 0x6, 0x8001, 0x40100000, 0x0, 0xa1, 0x75b3, 0xfffffffa, 0xfffffff7, 0x1, 0x5, 0x2, 0x1, 0x5fe, 0x7, 0x7, 0x6, 0x1f, 0x0, 0x7, 0xfffff515, 0x0, 0x1, 0x8, 0xfffffffd, 0x8, 0x6b1b, 0x6, 0x918, 0x5, 0x7, 0x4, 0x50d, 0x0, 0x5, 0x3, 0xaf0, 0x8000, 0x5, 0x3, 0x7, 0x3836618a, 0x7f, 0x7, 0x10000, 0x8, 0x401, 0xffffffff, 0xff, 0x6, 0x3ff, 0x1000, 0x9b, 0x200, 0x0, 0x7, 0x6, 0x401, 0x7, 0x100, 0x1, 0x0, 0xfff, 0x1, 0x0, 0x5, 0x9, 0x0, 0xfffff801, 0x5, 0x3, 0x2, 0x0, 0x939d, 0xffffffff, 0x4, 0x1f, 0x10000, 0x81, 0x8, 0xffffff01]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7ff}]}, @TCA_RSVP_ACT={0xfc, 0x6, [@m_vlan={0xf8, 0x1c, 0x0, 0x0, {{0x9}, {0x70, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8e76, 0x9, 0x0, 0x8, 0xa606}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x928, 0x2, 0x8, 0x4, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xe260, 0x81, 0x5, 0x0, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x5e}]}, {0x5d, 0x6, "e67c45246377193a6082ca91992084080a44f7bfce2a4832f17a71151e3a4c700f290e2888b262dcfdc181d0ddc606aafdeaee6510e21f577074dbea76312458735a41ae11ca82569e9611fe95b47906c6b21c3a4d8c391f75"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_RSVP_POLICE={0x828, 0x5, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0xfff, 0x7, 0x6, 0x1, 0x5, 0x200, 0x8, 0x40, 0x5, 0x81, 0x3, 0x2, 0x401, 0xffffffff, 0x4, 0x5, 0x400, 0x81, 0xaa, 0x8, 0x7, 0x10000, 0xfffffff7, 0x70e, 0x81, 0x8, 0x6, 0x7, 0xc8e1, 0xfffffff9, 0xffffffff, 0x2, 0x4, 0xe14, 0x5, 0x80000000, 0xe5, 0x8, 0x3ff, 0x9, 0x5, 0x4, 0x7, 0xfffffffc, 0xcb, 0x4, 0x3, 0x9, 0x9, 0x101, 0x5e16, 0x0, 0x6, 0x7fff, 0xfffffff1, 0x3, 0x2, 0x1, 0x5, 0x11d, 0x7, 0x5, 0x6, 0x3, 0x7, 0x3, 0x2, 0x8, 0x6, 0x80, 0x8ccd, 0x2, 0x400, 0x9, 0x4, 0x7, 0x1, 0x7ff, 0x5, 0x8001, 0x80000000, 0x7, 0x0, 0x3, 0x4, 0x6, 0x80000000, 0x2, 0x10000, 0xffffffff, 0x8, 0x6, 0x3, 0x600, 0x2, 0x9e4, 0x80, 0x69, 0x8, 0x40, 0x99, 0x4, 0x1d, 0x7, 0xfff, 0x1, 0x7, 0x80000001, 0x3f, 0x80, 0x1, 0x7f, 0x4, 0x4, 0x9, 0x8, 0x1, 0x8ee6, 0x0, 0x6bc, 0xaa, 0xffffffff, 0xffff, 0x271, 0x8, 0xff, 0x82, 0x8, 0x6, 0x200, 0x7, 0xffff, 0x8, 0x7ff, 0x2812, 0x3b619c43, 0x10001, 0x495, 0x66, 0xc8, 0x40, 0x9, 0x80, 0x3ff, 0x8000, 0x3, 0x1, 0x9, 0x401, 0x9, 0x7fff, 0x7, 0x0, 0xffffffff, 0x81, 0x2, 0x5, 0x8d, 0x8000, 0xffff, 0x1, 0x7, 0x7, 0x2, 0x326a7923, 0xd, 0x5bfb3245, 0xff, 0x7fffffff, 0x2, 0x6, 0x8, 0x20, 0x67, 0x6, 0x200, 0x7fffffff, 0x5, 0xd7c, 0x2b1, 0x7, 0x1, 0x2, 0x0, 0x2, 0x4, 0x9, 0x6, 0x9, 0x81, 0x1, 0x5, 0x0, 0x1c, 0x69c, 0x6, 0xffff, 0x6, 0x6, 0x7, 0x3, 0x4, 0x1ff, 0x7, 0x517, 0x6, 0x1ff, 0x35, 0xffff, 0x3, 0x4, 0x9, 0x3ff, 0x7, 0x1f, 0xd0f, 0xffffffff, 0x7, 0x6, 0x2, 0xb8dd, 0x49, 0xfffffff7, 0xe6ad, 0x10001, 0x9, 0x9, 0x1, 0x1e5f, 0x8, 0x8, 0x8, 0x5, 0xfffffffe, 0x0, 0x1, 0x9, 0x3ff, 0x5, 0x6, 0x7f, 0x0, 0x3ff, 0x7fff, 0x3, 0x1, 0x101, 0x6, 0x2, 0xffff, 0x100, 0x3, 0x6, 0x7, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0xffffff01, 0x600, 0x24, 0x101, 0x0, 0x14, 0x5, 0x19d, 0x401, 0x400, 0x8000, 0x10000, 0x2, 0x5, 0x81, 0x338, 0x20000000, 0x1, 0x1, 0x1f, 0x40000000, 0x4, 0x800, 0x100, 0x2, 0x1, 0x9, 0x3, 0x7, 0x0, 0x800, 0x46d, 0x8, 0x2, 0x7fffffff, 0x1, 0x0, 0x7, 0x0, 0x4, 0x708a, 0xbcf32c7, 0xffffffff, 0x4, 0x0, 0x441b4458, 0xeae, 0xff, 0x10000, 0x6, 0x826a, 0xabe, 0xfffffff9, 0x1000, 0x1, 0x5, 0x3f, 0x400, 0xc92b, 0x8, 0x5, 0x8, 0x10000, 0x0, 0x2, 0x5, 0x401, 0x40, 0x80000001, 0xfa, 0x3, 0x20, 0x6, 0x1, 0x9eba, 0xc6e4, 0x3, 0x4, 0x437, 0x0, 0x535, 0x0, 0x401, 0x766861ce, 0x101, 0x0, 0xb06, 0x3f, 0x3e, 0x0, 0x6922, 0xf228, 0x7, 0x2, 0x0, 0x4, 0x4, 0xff, 0x1000, 0x7, 0xd142, 0xee, 0x8, 0x0, 0x3, 0x6, 0xffff, 0x8, 0x200, 0x5, 0x5, 0x5, 0x42, 0x3f, 0x8000, 0x6, 0xfffffffe, 0xe7, 0x80, 0x7ff, 0x3, 0x8, 0x4, 0xff, 0x1, 0x0, 0x5, 0x0, 0x7ce, 0x1, 0x9c7, 0x2, 0x4, 0x9, 0x7, 0x1, 0x0, 0xef, 0x8001, 0x101, 0x3, 0x0, 0x9, 0xfffffff7, 0x0, 0xfffeffff, 0x2f3f, 0x1, 0x0, 0x8, 0x1f, 0x5, 0x0, 0x7, 0x0, 0x6, 0x4, 0x6, 0x1ff, 0x1, 0xffff, 0x0, 0x10001, 0x0, 0xfff, 0xfff, 0x5, 0x46a, 0x2, 0x1, 0x401, 0x2, 0x2, 0xa862, 0x80000001, 0xc39, 0x1, 0x1df2, 0x7fff, 0x3, 0x7fffffff, 0x1000, 0x4, 0x1, 0x7f, 0x5, 0x42, 0x0, 0xffffffff, 0x4, 0x48, 0x602, 0x6, 0xffffffff, 0x80, 0x5, 0xfffffffd, 0x9, 0x1, 0x3, 0x10001, 0x5, 0x9, 0x10001, 0x10001, 0x3, 0x1f, 0x7, 0xfff, 0x98, 0x1d4d, 0x0, 0x1db, 0x1f, 0x1ff, 0x3, 0xfff, 0x6, 0x5, 0x8, 0x8, 0xbd07, 0x7, 0x2b, 0x5, 0x5, 0x4, 0x2, 0x101, 0x2, 0x0, 0x3, 0x6, 0x40, 0x1, 0x7, 0xc9, 0x101, 0x5, 0x101, 0x3, 0x814, 0x240, 0x7, 0x800, 0x4, 0x7, 0x175, 0x100, 0xc18e, 0x0, 0x80, 0x6e, 0x0, 0xfffff977]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010102}, @TCA_RSVP_ACT={0x134, 0x6, [@m_nat={0x74, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4c, 0x6, "221abaf6c322959235c229376159f9b11d9f10cec821e8be46a9ecd5c5bdd4c401ee54aeac59025aa46bd222a5c25e153b3875c712ad1474ef8579c126544bcce2d47575ddb6476c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xbc, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x92, 0x6, "53c252fa72f63456eb0ff9e6176de77c6f03e23742e00b39a620ef6efc230ea287e9d364e71066a3722d3869bb7cbe78885de7a5dac710cc7edf15d200e3d84f1937bdcde436b332e5b15559c7109e8281a32179c66865164f392447688ff44dc06223155b889c4e64ed1b6ff3448c684f084bd3ca8e8ccb0db41deab406c6d9232f572615f798548f22f54e47e3"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_RSVP_DST={0x8, 0x2, @private=0xa010101}, @TCA_RSVP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, @TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffe01}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x5, 0x40, 0xffff, 0x3, 0x397, 0x0, 0x8, 0x6, 0x5, 0x1, 0x5, 0x2, 0x400, 0x20, 0x0, 0x2, 0xd42, 0x3, 0x20, 0x4, 0xffffffff, 0x8, 0x5, 0xb, 0x3, 0x8, 0xffffff0a, 0xfffffc01, 0x100, 0x2, 0x48000000, 0x1, 0x8000, 0x2, 0x500000, 0xf4, 0x80000001, 0x6, 0xe0c00000, 0x0, 0xf24, 0x1d43, 0x400, 0xdd, 0x23, 0x847b, 0x7c8, 0xfffffffc, 0x40, 0x4, 0xa77, 0x4993, 0x1, 0x0, 0x7, 0x200, 0x3, 0x5, 0x7fffffff, 0x46000000, 0x9, 0x1000, 0x0, 0x2, 0xfffffbff, 0x4, 0x0, 0x9, 0x3f, 0x1, 0x7, 0x3, 0x6, 0x7ff, 0x2, 0x4, 0x6, 0x2, 0x7fff, 0x9, 0x401, 0x0, 0x2, 0x5, 0x5b3b, 0x3, 0x1, 0xfffffffa, 0x18, 0x81, 0x9, 0x1, 0x2, 0x9, 0x2, 0x83, 0x9, 0x9, 0x3f, 0x690, 0x6, 0x7ff, 0xfffffa32, 0x1ff, 0x7fff, 0x200, 0x0, 0x60000, 0x6, 0x6, 0x9, 0x7, 0x7, 0x0, 0x1, 0x72fb, 0x5, 0x30b9eb06, 0xff, 0x0, 0x7, 0x5, 0x3, 0x8, 0x8, 0x0, 0x4, 0x9, 0x81, 0xa9, 0x401, 0x4, 0x100, 0x9b, 0x0, 0x80, 0x20, 0x3f, 0xfff, 0x5, 0x3, 0xff, 0x800, 0xec4, 0xfffffff9, 0x5, 0x4, 0x3, 0x9, 0x0, 0x9, 0x2, 0x8, 0x80000001, 0x94, 0xa5, 0x6e, 0x2c7, 0x1, 0xff, 0x80000000, 0x8, 0x2, 0x1, 0x4, 0x6, 0x0, 0xfffffffc, 0xfffffffe, 0x3, 0x1ff, 0x7fff, 0x5, 0x6, 0x5, 0x6, 0x1, 0x5ad2, 0x8, 0x7fffffff, 0x3f, 0xfffffff8, 0xff, 0x3, 0xa39, 0x2, 0xff, 0x8, 0x3ff, 0x80000001, 0x6, 0x6, 0x1ff, 0x800, 0x9, 0x8b5, 0x5, 0x3, 0x2, 0xaf, 0x6, 0x6, 0x8000, 0x10001, 0x0, 0x5, 0x80, 0xd3a, 0x8, 0x0, 0x6, 0x7, 0xf3, 0x80, 0x14, 0x0, 0x7, 0xfab, 0x3, 0x955, 0xe4, 0x400, 0x7fff, 0x8000, 0xa5c, 0x3, 0x40, 0x1, 0x80000001, 0xff, 0xe4f, 0x40, 0xfffffffa, 0x1, 0xd214, 0x3, 0x200, 0x6, 0xa3, 0x2, 0xe5, 0x9089, 0xfffffff7, 0x5, 0x1, 0x8, 0x0, 0x800, 0x0, 0x1, 0x9, 0x20, 0x5, 0x1, 0x20]}]}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x2974}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) 06:11:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, 0x0, 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) [ 613.155956][T21155] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:16 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x2) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x80bf13, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) r3 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x2}, [], {0x4, 0x7}, [{0x8, 0x6}, {0x8, 0x5, 0xee01}], {}, {0x20, 0x3}}, 0x34, 0x2) ioctl$FIOCLEX(r1, 0x5451) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x30, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.238412][T21161] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:16 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec040000", @ANYRES16=r4, @ANYBLOB="0100f0ffffff000000000100000008000100", @ANYRES32, @ANYBLOB="080007000400000008000100", @ANYRES32=r5, @ANYBLOB="c00408800801008024000200a0b7f83bcc9874341d6ee6399ac92e98979ba130727b71285943a3ff110c9b2e2400010000000000000000000000000000000000000000000000000000000000000000000600050009000000b4000980"], 0x4ec}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newnexthop={0x58, 0x68, 0x100, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x2, 0x0, 0x31}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, r5}, @NHA_GROUP={0x1c, 0x2, [{0x2, 0xff}, {0x2, 0x7f}, {0x1, 0x3}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x20000880) r6 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r6, 0x7ffffc, 0x0) write$binfmt_elf64(r6, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2], 0xfd14) fallocate(r6, 0x100000003, 0x80bf13, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.287923][T21178] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.310618][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x48, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r2, 0x6) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x80bf13, 0x28120001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x5c, r5, 0x202, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xcec}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x10) write$binfmt_elf32(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x81, 0x81, 0xf9, 0xfff, 0x2, 0x3, 0x9, 0x328, 0x38, 0x29, 0x1, 0x60, 0x20, 0x2, 0x1, 0x7f, 0x7d}, [{0x1, 0x1, 0x7, 0x3, 0x5, 0x82c, 0x40, 0x8}, {0x0, 0x4, 0x8, 0x8001, 0x0, 0x5, 0x3, 0x2}], "71e0ed95d7bb363965e81d92911b079ba93c2096dacc46c20071c44de14309c2f687a39ef02c65d446c10ce7b01d08d7e01906bfa17ce581a893b85919d774794e89c506c86894f8777ea399eab3e2e3e35b6f712b6705f338b286fc55cb9bb7313b286819c3d62f16acb5a5abf492a116ca37597f4046e8ce8ad4a6934661478640c43869ba07f3537604cd66ae8a94f91c6bec3a65c3d1324328edd3138359bebf3b1e3b7a", ['\x00']}, 0x21e) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x0, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x373}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.365189][T21191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.389963][T21192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:16 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x4c, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x0, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:16 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f00000003c0)={0x0, 0x1000, "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"}) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x6, 0x200) ioctl$RTC_UIE_ON(r3, 0x7003) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:16 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:16 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.478494][T21209] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.508582][T21213] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x0, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x800) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) r2 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendfile(r1, r2, &(0x7f0000000000)=0x3, 0xfff) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x68, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x40000123}, 0x0) syz_io_uring_setup(0x2de5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r7 = socket$key(0xf, 0x3, 0x2) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x40000123}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000280), 0x18, 0xd9f, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x5, 0x6003, @fd=r8, 0x3ff, &(0x7f00000000c0)=[{&(0x7f0000000000)="d74e505eb42e54846eb638d9c345163984132b90cc4a16b8e8fcca702d0f", 0x1e}, {&(0x7f0000000080)="99b830", 0x3}, {&(0x7f00000001c0)="aae1adaed3475575c8f190398d9be7879a47525d9d29230204155bc1e83b13462e69b072d6773df1cc559f1f7b696cf926837fe39c2aa66c64b87af0b7d8cb1d9986abde2bdac020925d3637fab78af13e20a04d11d4974c12961c35a2759fb0f8487daf29d59d53e835223abc75b38a225b204ce4", 0x75}], 0x3, 0x1e, 0x1, {0x3}}, 0x0) r9 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r9, 0x7ffffc, 0x0) write$binfmt_elf64(r9, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r9, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f00000002c0)=0x5) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x0) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.589228][T21231] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.626760][T21232] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6c, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x0) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x74, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.720179][T21249] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.757171][T21253] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x0) fallocate(r0, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.809698][T21265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 1: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(0xffffffffffffffff, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x7a, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = openat(r0, &(0x7f0000000040)='/proc/self/exe\x00', 0x30400, 0x1b2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r6 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r8, &(0x7f0000000280), 0x0, 0x1fbf, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r7, @ANYRESOCT=r8, @ANYRES32, @ANYRES64, @ANYRES64=r4, @ANYRESOCT, @ANYRES32], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(0xffffffffffffffff, 0x100000003, 0xff07, 0x800001) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 613.931097][T21279] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.944956][T21277] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 613.947869][T21285] __nla_validate_parse: 1 callbacks suppressed [ 613.947874][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(0xffffffffffffffff, 0x100000003, 0xff07, 0x800001) [ 614.011670][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.024078][T21294] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.042537][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.062657][T21296] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.092316][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:17 executing program 3: perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x0, 0xff07, 0x800001) 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) execve(&(0x7f0000000000)='./bus\x00', &(0x7f0000000280)=[&(0x7f0000000080)='\x00', &(0x7f00000000c0)=')\\%$^\x00', &(0x7f0000000140)='!\xa8!))[}]\x1d-/{]*=*\x00', 0xffffffffffffffff, &(0x7f00000001c0)='r\x00', &(0x7f0000000200)='\x86\x00', &(0x7f0000000240)='}&\x00'], &(0x7f0000000540)=[&(0x7f00000002c0)=']\\-@}\'\x00', &(0x7f0000000300)='&&%.!@#^\x00', &(0x7f0000000340)='\x00', &(0x7f00000003c0)='#.\x00', &(0x7f0000000400)='*,}\'\x00', &(0x7f0000000440)='*\x00', &(0x7f0000000480)='$\x00', &(0x7f00000004c0)='}\x00', &(0x7f0000000500)='\x00']) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.114763][T21307] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.134911][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.152755][T21311] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x0, 0xff07, 0x800001) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.236572][T21324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.257644][T21327] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) close(r0) fallocate(r0, 0x10, 0x8, 0x5) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) fstat(r3, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r2, &(0x7f0000002980)='./bus\x00', 0x2000, 0x1, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f00000003c0)="e67ac36e14905f86c43800251b08e2e72de7075182087e9d71d1b3e07a7436b892a602caace4bf72b353e13ded7fcff268b56560f2a20c150c2430eb3018a73bd0e779060334172fa2dc3adaabf9313eb5cd60d8dddd4dc7a19504f5daf2f093f2b82ba0ee3432beba6bae0e31f953c10e3c12b288f0a9d403359012a14bc700bec2a67250d28acbd58694a1678c7e795f1c1145f5b0f3411164c941d9687ab685b0664f142c489d13f1345816d91374dc08caf9ef35b91cfc3936a3632badbb861eab1168c30610116cadae7d97da15add20ec722682d44d7ce82098e93c99424e7d401b6bffcc1fd45b7aafe87522d02c7283af65b3bf186844785aaea659e6890da54439c484f966c905d2291c0917df1ef4c52a5f764042cbca8458754b5cee88a48304afe9994b08e50c95f5fcbbca74c76edabe918e8e22c50532cc82c094733de375192c092f10decf4c099cf2911c002ce847873ca06c078eda351c97856a58219703e5b485548c5aabadd2a94c6d977323f3a9eccc8755e722652e1cda27118748b76b5085dc0d3b890ebb2b60d9cab294759ee18c187c59b7077f1469827ab2257b38a101b85d9c4194b7b8a6f415d20efc78d8e704126ce0124f345f55db7418be10976a4baf9c442008e77dda37540089bb752f79df1f06f7a63af66b5a087bf1b3dc0d0295f1102794c619f588ca88f1657f1fd017a34acb73b8baf9ab203e5f0dcdba0d881e277cc2ec0cf7cf05ff92a83d426439f092c3fd3437f94fea1010a955484328817775fcf785d872e4626ad9c15e26f6c0d1b196122dbcacbcdc83b764dc802a347b5515671bbd10bc9ddae490502b3c85340357f49ed80d5932e0a3dacca2bdc80cf8b7eb17fa8288a970db02cfb36c23ae0726fd09791855bf1b2edf1ae0563de4218ba96320363bb81a082d93849f0eb5fcbbb992f149fe04076fbcb539c32becdae2dbfa6710589701f5520141060cbb5ac3e34b60f309153ae81f83c7f732021c2333058a8e6a8ea60e53e06b65b448c42be511e50f348cad3703de699057d6ee9d980c0abaa507b002da1891202c88bb9fefdc8ee6db9f12d2a49255618544821944356a989e8bd01ec1511443cac8f32534d6ce1e5b4650a3bf081d4c136e342eca55147b767cf46e264d78ec01ce00b84b64d5f3ded43e7aae2cd8d6df360481b294b16c02609b9c2fb944eac8dac53bae74b0f15a8112c44b69660d55a14d1b370393ad27a8a920f6968737163d58459673bc8d8728931a260bb4bff229aac2e161c0d7e31440a9ad01efe598fa66e2202ca113bb54d413274e6253eb1842ff5cd5a31e22359b441018bcb8ad61097268364288a75c7cc67ab68dabb1aa8df41050d2d4270cbf17a496e9af199720390d6a1701d721e9f6842feda6feb2f3ef8ccedca793aa1b8ec32c4ac3575f55f2f71a86cce02040610482762d71b1306446e3f250f5c807ebb9a8a4c2419793c678aa10deb15c9c67791cf0a097ead1eaa31f1e121ee4f1c5c338d73c431b147f1535af1cf76820d06b28e36a0c3952d6c230fd907cc049bd9a8e447c11aaa9bd4cbc3fd19a516e59462d41630245adb1489643c6e0ed295016afa356a0299e714320538dcd48420e7949cf08ae9c3a4fdb7ef6a0eff20264684cf28591a3cfcce0ae0e8db476cbb5763d3c1450ee1fddfddd3d6db186397473527af797fe70479e34d2fc4112e96600b2d684b59618f48a62c8cb3228377f863e12b159b8d17afd89692883422b9e3284fd17933b22d9ac3da042b9f13a079a18cefc5ceb6ebd827e18daabab19d833fcef76b0324221ed5e2adf63f2259262558882e8cc8513afa7e70b6620a0176f81afd6d46dcac6cbf3287b5d576ae047e482a4e95c16b70c881e429ecc2c05a43cd93f1331a8ac8b2ff05424a76afae90c590ff2b7c942a34127d93f8f92ee4fffefd9c093b3fde2a754ce5d6a703faa6a711c2c056ad29816b49f1d4180e85823fbb6c4e45868d6679bc9fab1b6784be235d0d6af4475b4a162c5852e6ca0813113d1bb96358251a20a10ee4012eb7ecb17f4ff2629be42bede97eec45a84dde96fd098e509a75b21d20a94fa43e00c97e9fcb20debbf6846e04ff3c5326d8b4aee14db048bc2ecce615c3cd3ebd8a0127a8611fa2d42f64d515b979e0461560c7caa04afeabb83259c3b0036ff29f0f0b58cd7b9a4ba683fe6d23bd0b8a058f0013a2d66c09564827c1e08254854be5930b97e04a6d830d3050f9d375dff10258b7167ed4b9385d93fb1fcba5aff21fef0208e6934afb701fce08475187f7d6f39cac1232c003695a22d91477b5c96e4b23171645a3c97f376062af9c1f95cab0b08f6fde01df1a628c3740f0754213f604ed1d9636d9e858493322b8211a12f5c320a298616b6b241df95cedc073ec5bd357c6543724e817394725c996918b02e1a3a9ce772448675cf851824613471301ffa27665cc7aebfaf52e6f8bd39cba09888fc5db72e6ee7d031f629aaaa8dc08fc8aad16c60eb5c15c308996205dc26db7421c82b2033ab02e1d10287c3c0f404a874e778e06621ed5df9acffecc7756b22e0ae3f1d20fb18fa73504ede7bb16af30ee1ce1eddab0f5033c37ae9bb70c3f4a0ee4315d115cef0d74ef807ef21e86cc69ace119ea3db5d16828eec1165b052d09b21fde1d150e2aa178ad505e212874646dbb81d91085e416eeade36cb969f3c2b163fb07ed36d95da09dddf5ff4550db4eca60ff8c79f9014bb80fa6e73707a85ee9d9ed9a93aad267b2dfa3f4ef9d37c2967ee8b716f38ad1bf71e9f7dc930532629935fd10ee29c43c389cc5a1fa57f7f890915830115f07c95203804f442903cc46378ba51095f349f6f9c7747cd62026881346cfeae96badbce6f8c15fe2d230e6b0c3a55d5f4082d1dc115f1add00ad9fedb89d74c55e06123918ce9a22c32aac270b6d791d9a997d6c437791ea01675fd70feee2cd0eb89cc809c6f7ed1ce9c7039e7d34c0c638d543182be21f3e480672cbd5d053894f47499368847821df3add9b4124c30738fa1ae4d6a078b0351e4b40d31ab4a607ad6401f8957dbbb5e243ba93d96961d341ef039ab36146be934c01c1acb84fa3f6950b7d190a14ac5d5c1e571ea8f46aa812afceca51a4ce08a7f5e2e531ca3ea67b4f07215e3a2cf0a0c2cc8da953400b95000e2236ceb299fa98acad0dbe8fede92c3580fb36125b1dc9992086a11bbf56f09ee57b02eb248f6aad5e32af063fba1a6a0cde428b4aa60ca2bdaa5d57098f3dbe159706bb4820f7e96ff4f1cb85b380bb2e91024915fce5091fbad8a51a1339bb4400ee3e16a61d3adc04f1375386f4d23c6c5ce756dddb2e507d77b795a4c493730eb32b9e8860cf06cae024fb43fb5a4864d14183b6a1e8e6f9cfc65e87931bb6fc07284158b27bdbf4c2d4b050cc13e084698345cfdae8081ea28dc3c31432e7b15fa9909239bdcf1118fc8a4d2e4da89892a3d0f03b0e359b38cd96141bd8e6c6eb2d979a11f0bf4797b5810318dcd77d7182ec1eb520835dde1a9cc8a4c46c8e19bb060126a6e27b5737acc4fef4d0d399cab9863071094eab9c85ec2e7d10cec69711e796c39b6c3eb1c2a78ef8464465dbd9bf23157fc6e48eaa34a9b8a1cf74c07402bd002d8f69ce41016cd0c448f9a0f14530e51333302a684a547a12268a92db6e2cf66927842aa99a637ee547cd3576a14c2dcfd04ee7301bfa71a95d93e5fa9cacc618bb2a349d8d652475463f9adc612ebe2f474db2010da215374912712e3c5415ae44ffe20077562e3d7a27b3504dc62c98758e3f40f3c85dfde2ebc95a54bdbdb517d73e55cc8a0b1f049a26ac2f106d7e9549ee40a279116ce6e199169cc60b61bfea8016297da05008a5260b32db36b4c77f91d065d9b85588b28fce2cf1cfd529658c7f9ec039412744fcffc194ff10434f9826af5eb25617922d16bb48dd2959f1a231906a4887257b23f3303eb46c8fd6e7c37175584aea126e83cfa1084649048b0afa3cca16dbfc656036ce4aa981cf7463420f8e0793fb939a89f1ddf3d2c31d13947fd5764938e5afa4084d7c0b4244819a3849fae733f1c5e14eab607fd78ea14b85074febe9dd8b073f6a70751334c4db4c7bbc7c0187bad34b9db22112d26581c8d1a63992286d134673d086ea1af63a339a2e2cb93d5a6d87a2308aace1c635c605ca5ac941a636820e3a2dcf6ce21a60fe1ad23038af0cff17385fba45313bfdc1753e286450b785ac0431864908a944349d5731e77fbeadb72b769c2fe29c78ba3dbe0bf75fa815faee77b6285093d0a8eaa0d0d48e387f64102840dae655fd064be9ba631e52c97d78622688b64d69510e735212be0520fefb044557eadb4e4dd5bb6cfe8c39ef24662564a153aebea8593097026686ddb0c600b97b396237e061a15eb41acbfbfb2b9f6e480a421190a33ce149cc4568a3b9bbbc04eb0f937f8d60c30cb1e9f6ce71450d81c24b0326d7c4ab5de048076df9da44553530ac11c3b61cf2cdebb95ed1e24b7a1cbafcdbf731cc6d96990aaf9a55b194b559b918e2fb622fdea69a56727f71ddfcc1a66f625e3fc4de53fc9bca65616dfa473fd544596d0c9addca2e5e8512bb52d451340a87af56a0a4cd33f1041487c05ed882aec40b813445ea462cb9b6dc23abfa759c2887664c1c66ca11c5b50cf5da9eefac84c77d049ea5fdfa5a17817d606669ed2c82d0ffe45e2b3d62e23db134eeb95ab4995e459a3cd4c67b9615bdc494a4d5884b3a2b7d08c54ecbb2e33f14e700d09e2c96c3fb86edf41699df2b98158df7f4cf757062a824551d41a0d9748b99b51f5fd5790bfad4328fa27f766168dd69a0ce47dc52f23d1776d0187bfe151a02d3290c93af93b1efc84fa89744beb3a4be49b77cbfc9ac3094005e0f9c8f72252f167c119fe687badd99332eeea3b30016ed27102d52fad54a0d132981c8f65a4b3bcbcc1ebd6d10dd9a254846c2fc5246e128dfe67b7c507057783c1ba5f86e9db01d6ae7179eb9db1f0ac1f4f906ae680165efbbe71ad0d99b7c12e9b0c5d0666a2e9cce2aa1f7e132982755d8b9c2dcbd768903b5de5cb49f48bc7a21dca71591d2888491625dc3abeae7f6688b118b9c181cf351684b62ab79b2357ed162e080aae34078f73d05f4027610bcd1a1a072bbce425f971635f07f35289f6176b157edc739e020877ca5f8ee42c59a0c08311edb9a09f5d977e78d5bc5ae3e99d69e5b80cc7758627b1723c63aa66f4b99d5909271605ab2a844890bcf2420550273648277bbf54b9fdd0aa1202c33ae0679e3c17a429f4376e28542c16d3113c4239e1107fbc340e3cbd05f2da89fbb05a81c13d48bb6485533cf56f45786b26e39af1398444d5f9beb743238f69c293b0a46b77596b2f36b6fd4647a0cdb021097e00c89125a9a42b7973db95813230f2b4981986af507594e2cdf662b1d132fe85754543214636f6ff21c0eaf2c64576c327656b88267714a6c49bf7817501c0dd05e06397e22013fce24acab1bfaea47ccc74a0b89bdf311e9dd15ff6956681e775974405af12db66ddf9b928c8df88257d125651d8369b9572cddfc204ea66676b8186fcf716f8da451ef6984c6e411cad98991c624145f5737ad3a770d7730998c195e55704b876f21205c1c142478e3c62b9c10128c40b67f2cbae2520edcf3eebc4f752fe6f659e6ab9ed6d1e20cfff10344123910fb47ce7548aa72e5113ccca7857a7e97fdcb1414a8fc45fc26b56fdc4575e25ffafa10c2ab1bcc3fb71ce69dfc51908d9e9ec2072e0df2f038a80d5e84e8a4a756e11906afb25f5fdaf7673e067bd2a17f9773a2637d63f457c83dd0d18284bae7ab0dc2061ec91475d6198ef4715d867b0c6042c6267f5282fc8c46200a58bd7d51b7d5727b826418e39bf2ec036bf08b393eb6cec24514dfa87a0f529d0e917673e701773aa11ecb0bdc6288c2e12e54a14d94680eabeabf826a0980ba321ce93fdad0c1cc65478ff50b5180cecb1817d567f47fdb188032ffdbecb0758a60cbbd98c082d3ce6c113f1da74c238cb8842ef945c6c6eb842cb88df8b228ed1773511f95e938ad703d8ccb695ba68e5133c28275e493444876a4ad2c013722c221089a3934fdffb960a92d2ad19114bf6a9b1b3df6592245227996293d3fc87212e15f303841d1158f49af0822c4cc7078b50ec2a66bb8087ceecbf2f44ed00671d58bca2915ec9da46b61821d301e702f19e4045e2f59d45b2c4bb041e8ddcd5be0866c1ec93717328f869fa0bb4d0f55bb0a10e8958badad997c05e7f35cb91d6ba069d3e1f12e6b33fcad23b60c7d839381972edc920e51416194e5ef332c9a9d61c6abb92ab9bb1d89a487a2bb71ea0deb86ebbcb7ac13573f16db3dc1dd01f4eb675dd64436f78c731c46a2a341ceaa582a4d0fcc50c3e36482c4cf8d460fb10bf665156c51fbe4d0fcc823987abbc441881ab01dbe3b16165d2f7fbbeda86b70bdecf20a74e102bd0c817183aa324229f6554821779c27d4c93be41e5576e9c8d61f4868ff381135e59e6d25beccf98cfe070a23dd14814cf41b5cd5c8b8472a566c1850c9444896516d73e6ced185e934c76e1212521347a7f80090186b3fdc8f202b6e10f041ca4801d1757b6b1ee7b47a10b96fbf3fee0b884562a4f06fc1bac347f566a515d88280ba95dc50900d03e637d649f7a904ce30a871f329915587b5f8f007e46acf55064376af38fbe027ec2a0badb54863a9aedf6039c2a2e35d016d21cf90ae492c19462d4d163faab929a3ea23de729cc6b9543319b4b6acd064ef2e975ba046ed45a6fee2e85d45740410002cd465ee50b6fa3f81b9969403557ff8adb34667962cfb97d3c30f5fef9805733d74bdef6e820cd24e67ca03abca23b533b6bacf21edc89da384702e8e9c0acd94b7c609e70e8c849810eb8e7637b47a616ae0eba89aa9ad088a3abc0feab161c66ef2749789903607d66bbe1e31c62773bb7f3e19380dc0fab4867cd2e94370918a866a0887c944875ccb4e20f64c2549b96f4810d054b6db5aff3167257b4f71557008cdd151c006b1dc5b3719d3d47ab4582c22fe4e19a00d0e95b4b60ecc4b33301a113ee310d18fbf68fef124413d3c3ce70465fcefb5f4ccb3cbf38d1bce690cb4312076004ab8b6a97e9b1bd25657da20c07cc5d2b7ac364ddaacf6fd7fd8bc352bdc78d299804923f02d2fcabb495d0975f3726b2a8fa51c80bf0c2c0b04f35d42d4eed899c7ae77bdc6dc3b6bc9e7da3510254da0f9c0f450bb967479161b3d94f17a0fad548f6693a3095cc87987c3d10aa607405d5274a9275472b577803d1a2756975674faf7a902f42643c92bfff6090c3b694a00621467533dc49b904979fe576236e37d5c9c1b5142a9a2bf6b0975ad881080e8ca552b1a293aca0563636da51c6f2284569e80754494b9ebc27540b81f918c9b1022a62be6278efcff24228f6784dfe99db6df251fbc8cfe781ce2b35f7cf07774e20eaa93017d2a47704ac7a1e025b6867613e8f4c0e4428f34ebb55251dbc6ba90b67265c9005ba85069edb9fb4902be02d29dfde1eaa8123b6e53270b946070101b39dc7f04ac07b85554ab2dcd72031eeee0dcbcb94e1f7688023befd87268a060b10019dd65ae938a443f0256a691593fe92dcf195c08823aef5cf70a9a046aa4a335312d67d879cb4a28c0d6f255c9281f0126fcde176916bf295b66d3ea90ae75319a01b89a8102dc5ba3334dab2c381c86f47f6ab136429bfae6a7120bf9a6e8e6f970aca67a96fa4599fc0f5f010aa67b941ab5adfe0d1baea6aade94404fe13cb2872d834b0677bff6fd4bba42e8cd9ea1a7cc163831e28a1b0a5cbc87f950b7a942f70600e6273abb483e976b2e34f44c70c53b17c400a2fbdf561dabf163594931ec0f6186acbc042d36fdd3638bed19222d7da79e828ec609dfb675119ee8311204ba501f7f25b7cbfc5e61345d7719bcebb16cb545099ffa803ef6ab09af45c96d7f40ed884df3a682f104bb320757f4fe262b595dfcec38a4803e4f3c69068c4e88e5fa0d88dc402e8b329a6e5f7f8e37ddccec3774b766f37215d6552a061a5921eb57ef58f109dd90b06deae0fb82dbeeaba74f7c5563289d67c3ac959c0fbcfea3b151484f760da5af0303b06081337db1209d3ba3eb70b886567d5cf21457d0d555a47122a1a2889634752505de86238d5841e009f65f60219526923932f046149094196e9867f8d7d93bfa5a69ae017cad6f38baa41394c385586ebe52d429a8bce16fc47f36f59e2136f81235f3615019a53e49a03e59a3ff49b27b162252a03705066dafa795959b315b75308b219c037efc152e3fde6d0cc85ef444035bfb3456252f5581f751df9fca938759a26bf540da28b96012a87620fc08b29d4e8f19125845eef7a753db4d1e53af9f8af73822191d3db13ea66b77ee632c96ef332097654229691160f5b212e4543ad0a9ee92de3164727df1626d03be61306e79f0e651d3fbf581dc50f17caef9183e38920e4853e97a784a533934dec859ad49fb485e11954139e1a558a358d12bc1e7957fffd8f58b33370b661026bd79072569b3e41457a28c983d1b1a11a4e42688b08b7ac080a4619ebfbf356a0610289777f30834ca03159f6901ec897400d336c46a881aa31476447f5de87f40b83f67c7d99b3b955a8042719deb59482d5b8383c12111c96c2e8ee552db9e6d368c07c43e3a4554c6ab0da10115cfba7f1a20fbd7510585732ce8b539e9fb7f97ba2918b244075fb6347533633a1e353045ed11a7d86225a46cb9f2c37f305869f0a9765ed9e4199b137303e390aa4fdd03a4792a375fc36760bd6aa5f8db52d37abd323b8585b3557639246ac5f7bc875cc7d6ecd28a787b33d119baf708fd82fd39461beb888174ad12b8b3b8c315a62599807000c50508561036cf5ebeb1f21718d6ee7009b5863ca021eb619201ab24af75e608483cf4094f45d3b82acea287d8d9f8daf0ce265464a17020b69d84c14935b297f4a482896b1cc5f301e045d528db358c29bc2caaabbaa562c706644697a9a8e2929af57b166804d71d4a8e42eb189c2fba78c14307cadfac444c6eb33976fcf9de58e98930650fc067a4e428d7016b9cd13b7a114e1eae4b1eefe1e7d3ce56fce546b95a33bfe5df514187d17cf317148809ba3a07ea4d38afbc7906f42873730724f8081f3c62d7d4adabd838fa9e598de0bab9405c34388034f53f6ffd0c643fe6c6feed5a207277950a1675d92e32c1821fcf0e1e370ea7a88879365c5f382839c01b198aa716e45905d94631e5b3292e16694cc248b4b2f8829c06abb520d57c33789e0e25aac2c370241495c7ba043dbed15a40c182b2420cdb1ae6214bc46b4670a79ed64fe8104acdbd9294c42d35de632fc3c01dc52da12c6ba7db0e82b5ef64b611cacb20400e8aaf4b8dbc3a34278eb93283167c027017f276925db05fda6003c7ff4ab25475062a2d7e30c3e26d88f23151983468771aec42898540e5b1bf91ac072d8cd72e49afac6a91913fc7fbcbd1aa3f277f9c0b543e1428def43849205ac6eba5e54880ca3262b8c8cdcf05a92051329254c8ccd4104ba4df010da36f79462fb817ef1e57224214c4f51a3c3151943fa8a8daf8271cb2915765eed8c1d19d6866119831f094354452c34d331ffc1a5166c15da95270684576918fd3d3f1ba240686723fcf41303ad32bf26c9c09d31d664a1f37fa016852327f708fea1438ca7f343f452135d1aacd381959295a5699648e36e34e2e9259c9358bee9aff217ecfb744ba025918e4c309f19085a2735dcdcc65bdff9654d5f92e3d76d38cebade41e8949f0eb50832bd6b33f0274e7b6e73616bf3bddc472d5466cd8a5b7255279793e9ff522cfb3426d905c7a360ece33f01dc5f2578ffc2c87bbdd64cfa9c889b6c18724f06dcfa1a037401300060a38149982f7c72c4110b157006ab9e0b9d6767da0cd3fac1de059125bc11dc4641e9afec3edad1f275a7d4f4efb1730e680307956eb3f313a9b129ff6c20f0a4c24e0178c5a63073d694bcc6c6f81d4efff129a95a4f1c9f625314acf3008293b59fbc5e23ddca670209a29e0c7bd7c4bb27160941129332ad4514f7eae2222df7207ae75a1816ef9e48d5332e3d0713bf369687c1434e2bb88df9fd7b1e2b3d47651544a65b779ed61f781909eab4c36203df07953c6505813b80097b6940f9df0f0f9a32f123714ef71475bddd8c3d0c63104d451cfa1f1a8b4a99b9c65d5ea7f1ba6a946d030516831d1466e45022e0f417acd108014ca305315740fe7e525cafacdb4fdb74d1e2e7c013b08134ab95fae1ac4b075f8ef237e3a4932bc5215214d916ae257c5ed029219a407c94b513c4de3ae6f573fb06721781b20a65658651d3ccd95ff68102ed45cbf5088fbb0326d61e2bfbc1cd00b3951768dc1b46644c8de6ea5f096a8f733d4ba487637e252481a1d0480f06a653bd65a315bfc24f48c6988b0c3bb8b8fc32911504b8a89f00b399e09d7c6c1bd31c0732efe22d8fd5013bbed7d79584d17b373c86c06ba5ae891238c96f24d1854641d9a72c8b3803f75eb7bbc1982d78347ebacef5f8fd22f361bd900bd044d09cb70b53472285ffc155303e4286b2734a2439abee4a4a2c4d6a9025fb5f45b5ac157e8e2a2cffb74ff7a6464560ef86ec9e801fa95c9445443be9f4e3a79f4e2bb04aff0c931ef766d56a174e8cd358f57e001580ecc8f5fec878cb10b085a92ef94db16987f415a12d605ff536b3722ffdceac96ee00f27a460be02cf09b0661470bf569333c5ccf058a9ebfe2d82623abc2f6e7a8addc168acae520d76020a8f95d70ddb567c510b07cb23a84be7b589d17162427d556de354c8e1fe569e2fb9ec205b98ae6a089794021115300c899e30f403ed21ea97e6b7adb6739f8997e7e37bf2a75fb620cbcfff330612e741342bdb16bd7b24e1d38615afe6edd42701f50dcfced29780a5d89d47faa291a13bae4027706592c7792987e5a0b04bc60c54264e925bf6f60f3b607c4c16ecddeb60023518c30cebee5241b4bd69c6f905807d119885ba3ef872d1d6622aea3b3d99dc72c09063f44bbf2543669082df2bf346d6428ee735093358bd03733a2bd95dd9dd45a7c1bc2723571ac984bf4c970fc4d0ef39dadddba1170c21fe86b2a11d830a0ff3e1df90a0cea1db21abbcac6c7882849cd76f2b4a04733f0f091caf965f235e17a360ff7b5e0ad40f6d60d0a977c8bba79a913b785430f22c2afbef09751b0bca1ccbea57501ee121695e002cf1a86932e9c8058ca7435f6bd35d52305ab2d5faa8d03ecf4fef9d6c4dbd9c6587d73ab2088e6a844ad03b76b0fd3852419758bfddd01eafb06409b8d352146aac63ff6db5a58366a7013eedc8fe39d5c02d08ed4487199cd252ca656a50fa85d2cbe8990281d7690e5a3794ed0ee4b16fdca06ab5f159d1738fdab033b5acf3ce4f9b1f8c78474ea34eae8dc42522c6b12a7be553bdde", 0x2000, &(0x7f0000002bc0)={&(0x7f00000001c0)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x21, 0x0, 0x400000, 0xfff8, 0x200, 0x6, 0x6926}}, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0xff, {0xc5}}, &(0x7f0000000240)={0x18, 0xfffffffffffffff5, 0x40d1529d, {0x9}}, &(0x7f0000000280)={0x18, 0x0, 0x9, {0x7fffffff}}, &(0x7f00000002c0)={0x18, 0x0, 0x52c, {0x4}}, &(0x7f0000000300)={0x28, 0x0, 0xff, {{0x800, 0xa65, 0x2, 0xffffffffffffffff}}}, &(0x7f00000023c0)={0x60, 0x0, 0x0, {{0x100000000, 0xfffffffffffffffa, 0x7, 0xd6d, 0xada, 0xcf, 0x1f, 0x8}}}, &(0x7f0000000340)={0x18, 0x0, 0x2, {0x6}}, &(0x7f0000002440)={0x11, 0x0, 0x3ff, {'\x00'}}, &(0x7f0000002480)={0x20, 0x0, 0x4000000, {0x0, 0x18}}, &(0x7f00000024c0)={0x78, 0x0, 0x1, {0x1, 0xff, 0x0, {0x6, 0x9, 0x7, 0x81, 0xff, 0x6, 0x8, 0x5, 0x7, 0x1000, 0x7ff, 0x0, 0xee00, 0xffffffff, 0x15000}}}, &(0x7f0000002540)={0x90, 0x0, 0x4, {0x2, 0x1, 0x1, 0x0, 0x7, 0x6, {0x3, 0x0, 0x100, 0xff, 0x81, 0x25c, 0x7fffffff, 0x35d9d451, 0x6, 0x2000, 0x1, 0x0, 0xffffffffffffffff, 0x27, 0x43}}}, &(0x7f0000002600)={0xf0, 0x0, 0x240c, [{0x0, 0x7, 0x1, 0x6, '\x00'}, {0x4, 0x80000000, 0x1, 0x81, ','}, {0x2, 0x8, 0x1, 0x5, '\x00'}, {0x0, 0x9, 0x1, 0x1, '\x00'}, {0x0, 0x9, 0x5, 0x5, '(#-$\x15'}, {0x4, 0x47c, 0x1, 0x4, '\x00'}, {0x5, 0x800, 0x2, 0x1000, '@$'}]}, &(0x7f0000002780)={0x1e8, 0x0, 0x1000, [{{0x0, 0x0, 0x9, 0xa08, 0x2, 0x32, {0x0, 0x9, 0x80000001, 0xf18, 0x522, 0x1, 0x4, 0x3f, 0x1000, 0x8000, 0x80000000, r4, 0x0, 0x4, 0x2c7c}}, {0x1, 0x80000001, 0x1, 0xfff, '\x00'}}, {{0x2, 0x1, 0x10001, 0x5111, 0x9, 0x0, {0x5, 0x8001, 0x7fff, 0xee, 0x7fff, 0x3, 0x641, 0x7, 0x3, 0x2000, 0xfff, 0xee01, 0x0, 0x4, 0x1}}, {0x4, 0xf0ed, 0x1, 0x7f, '-'}}, {{0x3, 0x1, 0x6, 0x3, 0x400, 0xc0, {0x3, 0x7, 0x10000, 0x2, 0xb26, 0x7ff, 0xf44, 0xc52, 0x10000, 0x6000, 0x7, 0xffffffffffffffff, 0xee01, 0x74, 0xe9bf}}, {0x2, 0x2, 0x0, 0x2c}}]}, &(0x7f0000002ac0)={0xa0, 0xffffffffffffffda, 0x2, {{0x3, 0x3, 0xff, 0x9, 0x5, 0xf7c, {0x3, 0x6, 0x3, 0x80000001, 0x8000, 0x9, 0x401, 0x1, 0x80, 0x8000, 0xa3d, 0xee00, r5, 0x9, 0x1}}, {0x0, 0x9}}}, &(0x7f0000002b80)={0x20, 0x0, 0x6, {0x1f, 0x4, 0x3d7e, 0xa7}}}) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) dup3(r3, r2, 0x80000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@dev, @private, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x0, 0xff07, 0x800001) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.317504][T21339] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r3 = openat$cgroup_ro(r1, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESHEX=r1], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) ioctl(0xffffffffffffffff, 0x4, &(0x7f00000003c0)="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") sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8080110}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x581f5422080b2c40, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.412796][T21350] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.452333][T21358] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:17 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:17 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:17 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.497537][T21373] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x0) [ 614.555516][T21382] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.558661][T21380] incfs: ino conflict with backing FS 1 06:11:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r0, 0x7ffffb, 0x4) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) lseek(r2, 0x6, 0x4) 06:11:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.603208][T21386] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.653767][T21397] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 1: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0xff07, 0x0) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.698706][T21404] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.728297][T21405] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) openat(r2, &(0x7f0000000040)='./bus\x00', 0x400000, 0x29) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) preadv(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/233, 0xe9}], 0x1, 0xfffffff7, 0xfffffff9) [ 614.790328][T21417] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.835228][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 614.868612][T21425] incfs: ino conflict with backing FS 1 06:11:18 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 614.877258][T21418] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 614.907376][T21432] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) stat(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}], {}, [{0x8, 0x5}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4, 0xee01}, {0x8, 0x0, r4}, {0x8, 0x7, r6}, {}], {0x10, 0x2}}, 0x6c, 0x1) mount$fuse(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000140), 0x8040, &(0x7f00000003c0)=ANY=[@ANYBLOB='fC=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',default_permissions,blksize=0x0000000000001c00,audit,fsname=/dev/rfkill\x00,dont_hash,audit,smackfsroot=/dev/rfkill\x00,pcr=00000000000000000045,\x00']) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r7 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r7, 0x7ffffc, 0x0) write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r7, 0x100000003, 0x0, 0x28120001) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x40001, 0x0) fcntl$setlease(r8, 0x400, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000000)={0x2, [0x0, 0x0]}) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 614.967570][T21446] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 614.981430][T21443] incfs: ino conflict with backing FS 1 [ 614.994430][T21448] incfs: ino conflict with backing FS 1 [ 615.004325][T21449] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 615.006333][T21452] fuse: Unknown parameter 'fC' 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x8) r2 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ftruncate(r2, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x100, 0x400002) r5 = ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendfile(r5, r3, &(0x7f0000002a40)=0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000020c0)={'ip6tnl0\x00', &(0x7f0000002040)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x15, 0x3e, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, 0x0, 0x8000, 0xeb, 0xfffffffe}}) sendmmsg$sock(r4, &(0x7f0000002700)=[{{&(0x7f00000001c0)=@hci={0x1f, 0x1, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="a2fe893a17462d8fee8c33c6a7f238fe3a4bde110a818da5eebd08c2f6a4bfd12290cf855aa8d6b5c5580d588fe8c9", 0x2f}, {&(0x7f0000000280)="5afb7fcb71fab59672be66c1bbe1be69fc1b5ee3c79a020bf09c885d9f88175d60063ba6883993fa5eaf01d385a3ee4b3f0bc402fd2871d9dd2d5c1a95b5798856ccbcbbae2e651928b02ffa7abc1c6ac9465719ae08b314f3dac749a27e04d497dd28566f1da8a87ab54616935febb5a8812a2a04453f218b8d03683ef235503123df625247c50a216007397be4e32bf5c8aa25e207795df6bed969554c1a850f0313a10a02ce63d6bab93f40d4b6d6c2366ecbca1c7ff8880bd57c8becb370db0fbf798ed9c057292352a4b23892", 0xcf}, {&(0x7f00000003c0)="185b698b16f79ce909fc35f55a7254ab5c81c0e7f39c7a38a0f46a1fcc2fcdf2c09918f3648a2da96fd0af2901a43f9e3e3c08198b8061ee257cb69a5f3ca6d8721914d380f90484094a68c552d8865781792ff9a0715d84991a50e6c755344c24d382e2ee6ac9b89df4ea0f36038d8f06134fe4f5446893321ba841dbd1c373dcf715c9dabfa753138bf56661f2d294ba709e7ee3581aad42f86f19436751af9197f87acd85caaf8ea1e4e4c4429b970d5c", 0xb2}], 0x3}}, {{&(0x7f00000004c0)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @multicast1}}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000540)="3c40d646be0082766615022b7599327ff5a9d58e8ceb005daa2687326b71e8256305a55600ba83a8ee83ce8d2bc11e23990defdf6c70579044e732bb80fa99760f2ff5365a77edeb615b4279015a17093c9168934e9dce57d7309f86f7e5372810fa887e72a84845d3fe694666eebe3e85d77f02474821621494e6b2604b382405cd8345cfb5b3081cb357a47dbd13256b7a0ac4", 0x94}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="aa2c7d3fdab418bcc72a6a25e87efb16e6d859a1b830fd6785d7e2ed02dc7f2fa1caaa5ab8d7dfb64d797c30c968bda92e560b909c0414910fcb7f7267a472eb462dcbae2e6cefcfbde51794c8808f0288e68a6cde799edb63f093f72763c912121cdc3056ba3d4aa739fbbcf30e3d4fbbb8a0f6544cc71fb47fd5f63bf4e2d8cd3520cfead4a28a796c91c0aca5bc944aed1b3b479594e89a17ca4599743f28965147e42cb693b99586904773fcce251dac95e6555d6a884ae758aca88c307d09a1198befd7b7f792c97548bb25bccc51", 0xd1}, {&(0x7f0000001700)="d5762f77dc53eeed9a5f5f804e6eecb399b5576e72268ffbdf9a780158f9015f52895a07cb1039e0456e0d5171ef02a0e57814424b2d65a6b88dd8c5eda931c504f93b38b3b1fd", 0x47}, {&(0x7f0000001780)="da2460b6644b3918b836a9536eb2cde3af540d1f3f5e522f7a541a61d514d1ac6e54cbaba927a9cf3a1e8021cc5dffe46d2e37757f7ab812daa4272a", 0x3c}, {&(0x7f00000017c0)="7ed75634ddae660df77927ec339f6c2a3405eaf554db96690afa164aaa717f73eddaab03db7dfa3b45b78ed1eb511db356cf805b5a", 0x35}, {&(0x7f0000001800)="b1b7d8b1c16b8387428d3f2eea05dfb372515c8f0749b0b5e8dd", 0x1a}], 0x7, &(0x7f00000018c0)}}, {{&(0x7f0000001900)=@ipx={0x4, 0x3f, 0x81, "02ef58d846fb"}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001980)="9bb887672fd178db29f5a40568a711929f8da517eba263cd835b92e3707d3120aa6a3e747f027b051c102a662e074e7ed982882df04eff642c923e1a5ce8bfaa04187816092ec1301c3cf8cd717a6b6a5963db8e4dc9ad862530cfa20bd22c2609c9bba50c0e307bb5956d065ea64aa10e7c2d47be025f79c79324f5ebb798b17db4624df93a0c02090849b5185bb4b4592ed0cea2cf914fea923094be2f8e7f67970b5ffefece21a249aa63a6b4a0ae93", 0xb1}], 0x1, &(0x7f0000001a80)}}, {{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000001ac0)="309608020e6b1afe4fd6c65a515eb8c2264216ae2709cf3c098174bec855340416451526b857e358524eb54d23ff71147ffbef95030dd21aae4e8407323216341a069e335a0f0116ca0f0c581cf1bb92d376ee8d7b439b705b12e19c633887ceb2384f56c34cd935218db1036ca967f89bba79c2c4164c60fdf7090593c37819df4f83da9d35d336ed1077d7a7ab0db9c3bb23fe024b99dbd070a8d2a409eb41f8c41f2ff2b240cf93526aa1b79a20848f4ff17abfdfc0be202a18339e2c5b500e6f5e58a8aaf397d63412cf3b3fbe36a07567daba3997f6c8a599279fb2ba96e00fa2c18d7ab953", 0xe8}, {&(0x7f0000001bc0)="53ccecff276c55f57493d9b980504208526c81ef86f8fe70c6f4fe00c2e89ddca965dbace7568462b4ab3615e9396d57e826ae5d9c2f54798b2ea1c1e116aea89ec0dc8ab3db6d79f3d41f64dbd27a3ae8ec902aa5196af043719977dd15c5992e78b2a5030ec50979b1544b46cd58e1f8aa3aa5126154d2492f4a5d4d2733c4a208", 0x82}, {&(0x7f0000001c80)="5bf167395ba2004c877d1db84d1c5e50d514e2563e2487503dcb2f7f28b8a02efb5a099c876737c28ec6577258459caad91c1696b09e032143004121aeceff9047616c30c29240e5e77ef4ce6f3bf6b268ffcc239b6a49fe33a02c9438ba3d85b63c76add6812c7cc4c683113468d2fc50fd5d2685bf52100cd2d35a57bcefb26451890d2ce6de94e1b7d330daf21cceca7828219b9da374255c5039cd22175c8c57a4bb67027a2e09a69f3b232c6ed1dd423cfb6529eb773732a763eb2fb7a75147af2d4088d092b0b8", 0xca}, {&(0x7f0000001d80)="ab6ebb48999c07733bb7703ad178090a8fd9d409bf1f91f20407bf9e5d556009b49ad59a17c718e4cb539a1d94b2325762fccb547802f952fe8667cf9cf28cf73debd70f711720913ffa539a3ccb40b7be30de4bc5aae564113f369ec2d261b13eecba34998d64ac897d02d29b1f736313d76f21c8a991d94c0e5e33249ca55a369cb1c896b72f7d9bc7617298826177d633916de1c1913ae8cb47f63da6bf57b0d31dd4391614e2a9b7198c3c9e2bbc412195b874fc60721f9a2280b5a4786443fee87783817cc06cb671e74b588bcafa76ac1dbbf3e8005b5bc39e3e8fee65297225cbebaf4c655b9a51621c76", 0xee}, {&(0x7f0000001e80)="630f46441df634fd20b31cd05a4716a5c598b6f4093ca8f9db3a9c320c4a27edd2da113d0e2fe12cbb07b24323e58bf915d2d27a85148ff3c6ef5d7a06ba3cb69bf15afccb734ef9b48c07757dd8e1b5ff2c1fce03309a13e09d15783bb26982f0c6448965ec40f51acccdd525b7d0e16449493c081b7fdbee55fb37f04b145641fb7f3e123eb8f7d04b5ab394c9ae092539c3f311d9dc37993692f8c7a48c1a01f8a330d013d17ee74fdf8f50cf7ed62609a54f3800b6c138091225bcce78f7dfcf77ded69e7c1a6c46e0e4aef77059ecfbb1cf0aacfe7540de22c2d6534663d3", 0xe1}], 0x5, &(0x7f0000002000)=[@mark={{0x14, 0x1, 0x24, 0xf7f}}], 0x18}}, {{&(0x7f0000002100)=@xdp={0x2c, 0x1, r6, 0xc}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002180)}, {&(0x7f00000021c0)="3970ebbfafd86808985c5174cffc43b86ba6905693b22a5dd73e3860e091d927f766559d46de2f47aab66d0968cdfb1f869b8db25098faffaf2cdb124756f7090c92eddf0de6eb2baad47ab1c5ec63d7639e69d38485bfe177f21169bb506152ccd1818baad0088daeb572ce4f359d12f6f7d7cbe5876e0c65b1146804428227fa1c3ee1ff58120b48c80dc45b61e4f80cd47403be68308ae3149cdb", 0x9c}, {&(0x7f0000002280)="dfd762c435723d929efa531ac16e7b19771d9150cc0a8b2a787dbf836178577b3085ab649ab711eaeb65e397270904ddc1", 0x31}, {&(0x7f00000022c0)="e22a688ef502eecfae6cbcc2a2daf775084afa2de1b3f0d95846225f0428484020f3f2e21a7ac9218dd9c39b48b05b83ec0cd8300b4abacdbd518d2b2ebced8dbb19f7ef0ece3112457d0ca43d93a542c363ded91730b24f756f107306e3ff1899c12b6a295c7d88e78f7c5ceee676f807b90bd4b09ba187d7ddbaa5f0be9999635de5c7a02bd7f448b5f68777b7", 0x8e}, {&(0x7f0000002380)="0e37ee41d13e369bcfa790576d999e56b162a1eaf1f8feaed76ab578004bf30fbc309cc54d6031527b42fb7af84577f276c8061b31818c00d5343d1c9243676cca63f44b8bdbb7cdac15e5afc62642548641bb68c503f96afa6e31daaf26a37689d80321584d37623717d3969ccb8b4849ae8143d761956632b60352022fcc50b97eaff1c94738b362b0cbc3f377e8512312c0ef8e929cc337d574a95eb7ac0bf3bb9c85c8a22b642660902d200f736a1ab61c7ee9fec87228f443b23ce9737de6ccfbf566f81b5247b32f2aca5097b126491a1ed3cc0688d419ddf7a7c5631b16", 0xe1}, {&(0x7f0000002480)="7ffea6fe1d7d93670fb60cf5bd", 0xd}, {&(0x7f00000024c0)="3714d51ece0f57de61aa58493bc5ed60fd7c4bc344f8aff21e485747943995c67f0a9f172ca8cf88bdc337e435e1a94ba05f02667bd28a3c148dfd43a7b62f4bf2297279a9724c080ce62584d861f3b1f0ab3351ed390ca0bafc16ebf189446c3d9c44721d0e68b28048b2ed248fcf6a1e37d248a0978027d287f288fef8e4", 0x7f}, {&(0x7f0000002540)="b63ba4ba3ecdb2dbad8ba05bb9ca0ce525f0c717af0f2776328bb8ea08920666233ac7948fa225b8ad5a8eb5b0bb42a8530a3f504c923baf84b6961d331a454c04a4bca29016d984aa2a7b04a281618125d17605b5945ccacc9de674c1fde436a6870f09560a224058e1ac54", 0x6c}], 0x8, &(0x7f0000002640)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x929c}}, @mark={{0x14, 0x1, 0x24, 0x1c}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x90}}], 0x5, 0x8040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001a80)={'batadv_slave_0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002840)={{{@in6=@ipv4, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000002180)=0xe8) sendmsg$nl_route(r3, &(0x7f0000002a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)=@ipmr_newroute={0x50, 0x18, 0x400, 0x70bd28, 0x25dfdbfe, {0x80, 0x0, 0x20, 0x1, 0xfe, 0x2, 0xfe, 0x8, 0x2400}, [@RTA_ENCAP_TYPE={0x6}, @RTA_IIF={0x8, 0x3, r7}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x30, 0x5, r6}}, @RTA_SRC={0x8, 0x2, @loopback}, @RTA_IIF={0x8, 0x3, r8}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) [ 615.043078][T21455] fuse: Unknown parameter 'fC' 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.090766][T21458] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.099622][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 615.122522][T21467] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) [ 615.136973][T21470] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.145693][T21468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 615.165156][T21465] incfs: ino conflict with backing FS 1 [ 615.174751][T21466] incfs: ino conflict with backing FS 1 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="210026bd7000fedbdf2506000000080002000700000008000300030000004000018006000500001000000800030055dffddb8a83ac1414420600010002000000080006000200000014ac1414210500"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x804) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x80000001, 0x80000001, 0x6, 0x5, 0x9, 0xfffffffffffffffe, 0xe1fe, 0x40}, &(0x7f0000000140)={0xb95e, 0x7fffffff, 0x40, 0x8000, 0x2, 0x200, 0xdc, 0x8}, &(0x7f00000001c0)={0x5, 0x1, 0x3ff, 0x2, 0x7, 0x8, 0x10001, 0x3c69}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x6]}, 0x8}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r2, 0x28, 0x6, &(0x7f0000000080)={r3, r4/1000+10000}, 0x10) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.223434][T21480] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.235029][T21481] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.276549][T21487] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.313373][T21493] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) [ 615.329426][T21488] incfs: ino conflict with backing FS 1 [ 615.356530][T21494] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x24) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) open_tree(r0, &(0x7f00000000c0)='./bus\x00', 0x80000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r3, 0x5d9c1000) fcntl$setstatus(r4, 0x4, 0xc000) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x80, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write(r3, &(0x7f00000001c0)="63950dff77c0c07a215031f35ecd1f555058082422870dd128a0a35df9321e954cb44e9cec52cd02c2a097b917ac730a1b96e4735ff5319085c55634bacbaaec1958eb384595763807cf44ca095407e2ce", 0x51) r7 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r6, r7, 0x0, 0x6df0) fallocate(r0, 0x100000003, 0xfffffffffffffffe, 0x800001) creat(&(0x7f0000000000)='./bus\x00', 0x100) 06:11:18 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xa, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.379546][T21498] incfs: ino conflict with backing FS 1 [ 615.405179][T21505] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0xa8) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:18 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) [ 615.441854][T21509] incfs: ino conflict with backing FS 1 [ 615.461848][T21514] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:18 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:18 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xb, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.486874][T21518] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x10000000) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x0, @sco={0x1f, @none}, @generic={0x8, "a26bd22ca5b8aef0c31ae4ee49ac"}, @can, 0x5, 0x0, 0x0, 0x0, 0xbbc4, &(0x7f00000000c0)='veth0\x00', 0xffffffffffffffff, 0x1773, 0x9}) fallocate(r2, 0x100000003, 0x0, 0x28120001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) dup2(r2, r3) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 615.538584][T21528] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.540446][T21520] incfs: ino conflict with backing FS 1 [ 615.559512][T21524] incfs: ino conflict with backing FS 1 [ 615.566261][T21530] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x8000, 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) lsetxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "977ad13d65e4930215bb8ff8db317b0423bd22e5"}, 0x15, 0x2) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) creat(&(0x7f0000000140)='./bus\x00', 0xe0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.622637][T21537] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.638775][T21538] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.659678][T21543] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000380)='./bus\x00', 0x0) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xd, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.698868][T21536] incfs: ino conflict with backing FS 1 [ 615.731375][T21547] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) sendfile(r2, r1, &(0x7f0000000080)=0x4, 0x8000) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) creat(&(0x7f0000000000)='./bus\x00', 0x44) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.747557][T21555] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.780481][T21561] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x3a020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000029, 0x0, 0x800001) [ 615.811163][T21554] incfs: ino conflict with backing FS 1 [ 615.824827][T21564] incfs: ino conflict with backing FS 1 [ 615.837360][T21568] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x10, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.881141][T21574] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 615.906260][T21580] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe2(&(0x7f00000000c0), 0x4800) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) creat(&(0x7f0000000080)='./bus\x00', 0x42) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000380)='./bus\x00', 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000000)={0x1, 0x1}) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 615.947378][T21578] incfs: ino conflict with backing FS 1 [ 615.958451][T21588] incfs: ino conflict with backing FS 1 [ 615.980176][T21587] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7303}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.024862][T21596] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0xffffffffffffffff, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 616.064341][T21603] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.066261][T21595] incfs: ino conflict with backing FS 1 [ 616.093498][T21605] incfs: ino conflict with backing FS 1 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x12, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.131468][T21608] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.164404][T21614] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.177027][T21613] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.219942][T21622] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7e00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x42000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 616.221590][T21615] incfs: ino conflict with backing FS 1 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x364) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.277700][T21623] incfs: ino conflict with backing FS 1 [ 616.285515][T21631] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.300292][T21629] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r3, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000002c0)={0x0, 0x4, 0xffffffffffffffff, 0x1}) preadv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000001c0)=""/194, 0xc2}], 0x3, 0x4, 0x2) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x13, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.332562][T21638] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.356364][T21641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe502}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.381824][T21644] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.404844][T21647] incfs: ino conflict with backing FS 1 [ 616.417389][T21648] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) write$binfmt_aout(r0, &(0x7f00000001c0)={{0xf, 0x3, 0x7, 0x192, 0x1cf, 0x4, 0x53, 0x8000}, "54483e2a6792618227880c4f12b76a7c10c29e7f13e60140d9fb999959f9", ['\x00']}, 0x13e) [ 616.454588][T21654] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.481221][T21657] incfs: ino conflict with backing FS 1 06:11:19 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:19 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x15, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:19 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x60020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.509791][T21651] incfs: ino conflict with backing FS 1 [ 616.516676][T21661] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.541176][T21665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) open(&(0x7f0000000000)='./bus\x00', 0x800, 0x8) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.567547][T21668] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 616.615308][T21670] incfs: ino conflict with backing FS 1 [ 616.636752][T21680] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.657009][T21677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = io_uring_setup(0x5d67, &(0x7f0000001c80)={0x0, 0x349f, 0x10, 0x2, 0x1e1, 0x0, r1}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000340), &(0x7f0000001d00)={'U-', 0x4aee}, 0x16, 0x2) lseek(r2, 0x7ffffc, 0x0) r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r5 = accept$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) r7 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=r7, @ANYRESOCT=r0], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) r8 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) sendmsg(r8, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)="91e0c8bce0080cdd4a3255b45d0be748648699feb8a9446b3379fa128419213050cf879e3ce8c034ea22ec59c01c139cc465a8b988b6788bbf0f48f6940a7febfa5654d43b2988bf1d0541f6a57747d672ecc30173f3abf39aab3edc780d66ab82cfab04c2fcf6e8d4c288d8804f0c3aa3d2871a79c5da30fc5fbe1b95736ad6d9f86b", 0x83}, {&(0x7f00000003c0)="b8df264c83a3e62c8c83d0049c468aa464d49daed9766f90790c75f381c96157050080c6a2fc965014d56fa0ba43d0b2ddc24e817fbfe2289b670549d18c2fc46ed86d0a26834d029feb252774d7e138c84785536566ace91b5e95cd33f21e6d01970270bba3b2ee1d7e1ae8762d2820619352bc9c7908ed24000f6246bbe47d6e738b90ccb99249ce308892e1e5251cda23c000315d686b", 0x98}, {&(0x7f0000000480)="092dea9c54f70db18fdddb1f015a00feacc75b88635961ca8d0487f52e264615cd21417efae53893748b23c0d2e9130e7fb0c8d8624e3ffd7c09fd7a06a7ba50b946a9e247e9bb457a58f6296af473fdda6bda78c149e1ac109fb81c4f9d07c4095aa8cc5ec9e71c8ba4711defd6836552946ab62177a3451c88222a6ca220d087f1886ae4ed7d304133928254fb9c03bfe5f7613b858274c8ea07dd535926", 0x9f}, {&(0x7f0000000540)="c5ee91b1201230130653eca53024dd9f9a00491f18ed2e943c7fafce0b4ac3c210ca934c3088fa77c99a14f18e9e88c2d913b7da02e5801e126912003e7cbb51e04ddd6fc8bdeb04e41b76b646831a8eaf3d52e4da5fbd8f0972338442cf459af43fb04b420ee36d5bb3b513a539a73851b341d362232f0f1022a75182d54d2899de8dbf47f2e06b35340f19b147f09fd1cbada6a96aca28f76c69557af3d63b90d0e440997252316709624f0b40e9b7fe5327b31c34408ddd0f4a9b45428478a8c238f53303996a5fd530ec616d6dc2e25e45e989f76581387b9cdbd1daba26d0943fe094a88612", 0xe8}, {&(0x7f0000000640)="43140d9489657b16d787286e1daca0e9007e6bafc4a8f457245945fda06b56ea8efcf9c2f9628bc8c1ae7fd04ca879bec27e28903f6532b828456570d27b690c329e10e7094db52e67e9de6171e759132066821f52233018b85ac9887db5627ee770df37ff21922a9fbd4a3dabe60cb7dd", 0x71}, {&(0x7f00000006c0)="a7bd73ac2b51e48540dc0b121fa969441d7b2d07f8d09573491945ce14a9736d9956bfb4d9d6d3ded2c1fe3f266c6b4b7a50b93f2012038e597323581028138dac834e3a2031393683ba403b9ade0cd5bc61acab08", 0x55}, {&(0x7f0000000740)="b099d28ff0ef156dd453534b3464ac121cacde694b99f209e0010b1c99c0c10821608efc76012f8fae40dc447d7cfe8388410b65b0e9508a82fe32e37ede11b2848d34412b93cd533e6cac65d11d0181654716945cfd59d6893c693d39d06ae4b6bdbaf3f25205536ac6c054b0de3923416a98504128d0bdfaf686aa5c6d61ed93fce70b2c0326016f7431a2ab982b12f4f33b55af24266717b45fb59b2d23b4905a09", 0xa3}, {&(0x7f0000000340)}], 0x8, &(0x7f0000000880)=[{0xb0, 0x118, 0xa171, "2fefa70693c5188079c2c08cd91d696d2b55e70e793780ca0c3ce32e365db2323546ac0e9ab6bf56f1f03cd4ff7da328bd2bc72d2807defd087275eada9e9343a13dead6321480eec83ff5eec57d6924a6c9fc12f7ed16e406fe634ee63529964ebf879527ad5893bb223e5430ec20e71aa3be8fca638ca02c3d5570a7adbdf2ce607aed83ede746267af5ab61dfa3c08c1a53e3727cf1304219"}, {0x88, 0x19a, 0x9, "3d6ad5448beda6555fbfc735c90ba9dea743ba5cbd0773211ce2f78d8e35673e05f4741b2c6e2a203997af66eb8a0929d40749bf94dc3cd41ad3ea100b0b830fe12bc41fe64597b89ee6482988b674f2ca823a06bebd95301091d99422602fd82a8953f42bccbf782d5076790a16766316"}, {0x90, 0x12, 0x7, "48d3a653bbbc6f5cda27dfbef2cde6511ca8ee7f2dc7972de8ea5fb0960184f9052fa54b070d6fe6ae4122f6030ac782892d204332628fa9972fa57f3c6efd8036667d207d7b9d586c616a5cfeafdc661afaa061ad80d0c14b9e51aeb50eb4271ecae1ba30453fec797deec7feeb731594e1dbeb1edf7361d951d9a6ddc8c42e"}, {0x98, 0x309, 0xbe51, "63a884ee6e08120e8926dc2accfc6823b75c72a664f6c071b44550b778014f6d99bdee8dd51b13505b262b556d90d62938392df15d277a4944547ac5e181dad937e9bef1500fe9dd67522ceec4a49e0effbd01cd8cd01accbc9c3a171c50db37f9c29e2fc0eaaaadc10f8e29d62f30eca673c447ea39b92c61f31834d82eaf0f60dfbe24d71592"}, {0x48, 0x116, 0x600000, "5cd89166445b1a0472c8ef31252477dc12042931703b8a928fc6114e7a8f15c1dfdddcb319f32e547227a35120fb1ec615"}, {0x1010, 0x10a, 0x9, "131363888828e1ca8ea2f05ebfcf80aeaf6393427900bfeb01571c93452ad1530909b099d96ece8a2058ea3bb7906dcbff33e64b216256cb9abf5f83e0a57a35219a524ee9f695fc706c03a4c1a8c9025b1cffc0b7d932eea57692d007f0d3ba053a73e067ae73d36184bab3e2238804d7bbff71a99bd9bb81be4f096d6f802e97a986271a1a93bb0e96e74b82ab11301b9ff85b1b05810bc290af3248be0557325a4d95ab74b4d79617d7e96b0b6cc0c146af57f6443c3b421edd53be7447c8ffc5074e5fcb07f608000eb61e655761255b0bf0faf2951c85a35867f4bcf09d52c7538b0e3fa8d4526cce835d089d176fe8473953a1790e737628187a5e0d8f58f8edf5561c656b58aa835d0c9c51d37afcfec3391e2965c394d295a9c7ddef945ea5b6397d0a876d8a853dd7788d61fda038551815ddcc0b56be675b350c0b246b9451a820123232b5b9ffe48e254bf76c38a4fd9f054a238f37e45ff2ee08efd499ed88b6c5a60339576ebc25d0461cde8c4c86447738017afdf6f1c101d4d07f1fd2fc11aaf9eec64984dcf5d329b385188f3a29a4b9983962e3b3a5626ea2c104ef1b8db9c75b7909b082b657c345c03069a9fcd0da02eb8468c09544a5edb3a4d6d1408991b507005f2d98ac3086f11616383c335922f6c4b2552d651462f3e7db0bc7ae31579cbfa8422bb5b33b81873d36bb01b8627c43feb449af10dbb7d280f27f026d27a74e57c889bfec4d7dd003875a59e43f070b2b1f3cb11a05d6d490297d79436a365cc1c7cfec54cba762cee8a9b99519fd51968b5107a223dc7d140832080b207d7d62b87c312ad13a03bdea2d26a10da042298920da395e5bf4c1ccde6994ed13edf6b4dfa09d6c831613ee47a1c6fe20cc9d988d79da50cc7865bb54cf9790ebb5b5875f8d0007b7ca403552dc44b94d492a2a572af4c305d40285d02515269bde248c7ca8bd8aa182bcc94e7b5f3ded4910a155705cfdb9a098171dcf325ebd9f678b48991b61ed254d71abfb0b4f05116dceaec743da0d193131cbf842ef0942475d665d80b45b4e02e18dd270c207cf07664883e80e891733b2ea9397cf3a65af0a200a71578a0ec9c52fbb448c04fb0ccb0f51beb254cb2fcf8e5062e54dbe2a91769dd67510c7cf82bf9affe7c29d507eb86d3e1c1e33710d907d0b01e880ae9f2969778b6a16d1b682417c824996f7c1c60b8a23bf2f5ad950997e4c90fe4ec6daf455365d1e2ddff6442d28bfa997be92ce35fb11395090f9ce0f51835da41525ef767b8821917b9920daed4f5211eb936ab16c9c08726048850efa734c2eb950a22261fca9d1a18a1a48a45d803e167a859792248f0a728ef47f98955c0536729c8d3b890626dc8e56d1ac5cb490298c1d6a9a80c0215e1ca5e9d19989ee62a2d77ac9f39c535ad585907b52edf5ecc0d4ff42b94a6a8f9a542deacbb851bebe0bc9a83ef2c13083c5958354a225444ec6f725fb60e0094ec0714c8c6328a57840d8afc86b036c02e87259aa001358f68b00ca5decd39631f1f19ca66be07c336ba8c0a45c692d0f48e08845e734f84e39442e5eeb0851b8ef6824d0a05e8180b35907f4c2b6b43334d98657bc1e8b77f5f92c0bed48aa593aae6385817066aae79adc5ee021f9498ee80ca21ae9f51dc81253f99d2ac384a541576bb20b8d1dbe3ceb6f5af3a087e992af3c9dd64f948a017d55bd76b00a1e085c9154341eb718f11aa9377d511354f29f6532f493af4cec59b4efc17bac26e7bd62123cefb78d252165c1f5743b615e371bc4b4468d979b809df521247feaab2c5a767972947e5fa1c47513b80bfa921b34db59a72f1b098249d60adeffb5235322bc2e6ede6a28e54a49d28c055a10765efa32d76cbb1be6c8f99ccf6444d87c9bf15e7ab5773f5b195fcd6069a2b3f86baed128ff1c7a32d7d80f54c0a6181aeef4f15502c091cf3d27b0370cfd7c6d1fdd6c6ed33f65add32391440596192744824d94294e6b0af3db6f074558217101d6ff28d3e903b80fcfeeb277558fd18d50ba125e94547d6aca53ac0400278bed6373d198a7e2fb1aca34433a053523ae8b63b043e9c05e9b839d6df43747c7052812c7ecec140354f9c7762023a576fc0a481a8326c8757a456a5b9c8614361073fdd05a69f9c22ad7223dfa4a5bd2844a7d04e8aff8972a6f96ac3fc78e09ad988df3f72b108330cfe7a1ac8a9227773911cc44bc56938870b39934d1628008b3e5bb8c4805a9a56ca8ef31ef2baa004d5cd4aee7840e821c537154f5bf2a6990dd1e4eb5b9f9a583ef68b5978c7eb0bd6c8f34c8c5b82598089219562a6cbd1339401bfae58c301e31fff87d4a08d14882e4afacef2d18d68f932d78efc32757da441f2a19c8f6c771a1f936f5c8dce25333947ca9a81579fcfdfb57ddd5b8c248094ca3c2b268721c0c9c6d24f72b4ce5f385f2afd6bdd17f6777138b8de0cc17dba63d15cc4be42ef7a8a39bcd48758fbdae87c972e476f21104092f4891e6ff65e3957ac112a408ef00dede7fe81b011a8f9654691c1d77a9278df9986f5a99128fea2d4e55a01fa1cb4723205de2b6450be946b9bbae21fbf69f29f85a6ccdc11830150b824aec5fbf1b8ec59244a39c48b26a6a6a9ae0e3509026476fb494ea6b4a672203a440d25c00221aa1e303719cae577e6eb93bfa6247b3c05a0a659bab3d4b0e8f2f7708483da94d28ec8217ab44df30d603aa365909f3a902031feea0ca92b827b5a6f4d805f48ab585d290bb5f853228c428db43ac2f6176ae0b524f0eae818024cdbca41372cbc9a9174bc9de7300da18aa280918da43d598bbb833ea9f82fa4f1684fd913ad0102e604129114809a7bbec7350ca149ca3489e63a7b140d941d2286a6794dabd994bf95efa3713e48b65510def2769cbe35ced9ac271916f335060b1ae5cb0a824d20bdcfb5048c8d1f20e13d8120e294970a9a33220ed9bb28225411f9c152602a38650e8e1a59050eda588e6d4529e389014fd05427494418dd8db2dab62ab91edb97c9964e191919a50809aea09cfb22ed7fb9dad31884d565ae785f56f2afa6cd6a95701d1d37e43c9acd9aabdb1000ea70e60b0ed849c7ef2dc2685b3f4f75fd8ced525d915d57b26fbe998305e1b92a4204675582bb5172cdd72d02be01ee23e3f1b15c7d41989b6e712ce8030df03ea3345af6ba31e0b18a3a65421ab8b577d6a642218b8598ae343fded556228ea72806b43da3ed0195de5aa4592f17ff77b33df515a55533ed023c144699280e2544602bdea7b57a872ed7a141f9518c84f728c71484f41b3b8d8c53ae991743cadb11a111c94ad00eab7b773df579fd82d572afb92d111a594294a4ee4a60c020869e662a2b83559dca567c4533bba3aaba3935aab90b2b937ff682744d2052aff4867c6b23731b03b1bc7be0b66b26974e3e4e467ec366e525187aeedca96c72eefda6d0c541d6aa289c8686f4ff6a4abf0c1cb1a581f7d61426d4dcd22a88b4944183c48dcb9154d83fb0cb2d1411e0441cf9df3c7e4f0128e25259085eb847de97d662356039091fe24bc1ba91c621a957724df41a6c84271ac9afe24aeab461e35f7da3f6dff7ebb49f1770be7fa7b2ee0f1750203f8f4a091daa6089f8a49cb428ed2db7a20fa74373410333c972d1e2475bdc49402d07c065457f42dd381835d2cf3429f5738b66a000af9bfd57dd7c3621ac45099733a81cc10839f3d3bd5096bd5d4a43a0ffbbe250c7df2056102a1f9472e1e8666cccdd1903697a8d46d1525cadfe1126be55c18cf68a41007fa99af8f842a40c4132ed5e754d65b0ca603d2801a6f5bb071ed9cd5f06d1d1816d080fd5d41c2f3895d1a07a8e00aa1b132355f5ce5f7588feed0f85e0f6208e3a8faced9770a95e86d04dc64001919a2ee0025401d3fd8978495508bf2c22ed5eb4e3aa299cd3c6ba9e16d1cb7c4717b4564a87cbf98a569f75f8ef58387791c430e0cb0bb94fa68537950929d8b1bc1a4381c2a1a2fd66770bcbac5eadec965e00962eb6431080d43b764f03627cb72cd8f18dbd0ada577d02700e34cab3ee5a575e54ccd829b35a3c06233e43256e91a9da1ebddad7e1e7f13bd8f7a1b711b2663c02812745ed14028b88c60474b63bf8b759ed69074e1e0ec66a8ffe71b60de5d750c9299eb302045aa43a452c2220bb5443d8414f77b870e2d862d04b337a295a492bf0485fac0d243e2f37687fe79733933b61e685b4db056c2e28bae350cdec612161cf6c0b632a2fd890fab6faa5a31008ab2265da6796b8ece74fcfe8756ed5caf70905f46715fe75320b10942f8a2570c3c5604d4193163c063b5324660bdc7fa20db12b6c4823780cdcb92598bebc5c50817f574054a91b1a2cdea5e97ff001b2cbefc8d0142a64968c746cc0460667cf6302cc95e61815251bc4396add0bfa4131e5211ce4cae8f92c973dd80b5534c4b3ee4271acb4a2d606136da909fa4e3d24e10f8251c5d1ac4e7b3aaf83f3b490ce99606505bf4248d6670d97d4f0aa1a70c7b3638e1947c806a788dd2a01463cb4f56302b3f6919222a8584267a94d6f84e78479891ccc469d9bca2776949cccfff4420cc4f36e7547828f8c0a157b91deb352cdee7ee6ab7f9c35bd7bda725810253d9859a470e910a441f3adf5b404ec654328dcd41eada1affd107705db85fe17dfc1c62cd046b36828a4055e41a00c5b31fdbc1116e6214e767a6bda2be53afc9e2af22929989b1738c276562d05bf185fa506a4baacb45bbea84d81d3ff3c44292dd8c3468783eb39506a6f933b961d90d377b1946c3cc02a83f298f58497c15b2a0c4cf3508ae0c82e93070e746b4915d77ad69d54821056ef6babad4ba3abeccb3ea073be32ac8bd0ce3a36c511a2c4e6b41921cefff33fff25820b7471edca2361c2d3fba6610ee721f6d96ff00f216935e249b6f0c4523251158425416cd8c05280ce83584ff20639f7bbd2ba1406cd859b07d33b838b36e5f77e72effcb229287e7d68518d821d0e3504010b2239883c93f9ad0b316f96377636f38ca4e626013fb469d12bc94759930613e5aa24f40fe55438c6aaff5c3730c03825b1364769da49d1c9821c62db8d3bfb51366fc84adaca244f85bcdbe27ef15f6b997fe65df38bfa7c9cc11d8e0878dd0530bb4f2c5e0551a8281ab385eb3368abe36f23f9b3c7cfbf51363650623b0335b33d934d7449d019b07986daff679ff3c2997a8095f0ba332809c6ef7d6e693b7c7c00f593470032af6cc1d73609a9c7de38bafed93e3d83396e0d0b1fc33d6992fabeee5abc0082e4391a4c56bb9d4e3270de1dd8c84fca5e6d5c2caf52a90650ff3a96242d1cfe92ef7609ee988a6c1a791c8cd7d3de3a491b60378001ef4a935040326036740fea5aac2e4471c8f66e34ed8ede262c456373c74f84d5cbeb111e7f42dd8641f5ab534febe66ff61827a6f9f76e6aabcb46370971a2d2aeeb787f24c64085c96e0f3f884d4de55c208edeb96ccbb3dac881795ac1a673edb4aec25cca7c913daa69bd4823698e66f4d502717bfca4b8c9c0cc1011d78b4fc3edd11b451099f91e35dba2007c57660fd3de2fcc770cd4e74272ffdd07f526a85367a01f3b32a515e1d04758c36c9abd549a54d43c1adaeb6c0fc7317a719fc758b1b06c83356b0dbdbd50a600945b0eb4bd06fbe1bb46e15b12cc215adb16e66419fbb4ab3d5a60214dd907d9eb0654f31c2deb09e26fb97a73bdb030a3aa2d30f13d25be96d3c17a3830e23"}, {0xd0, 0x0, 0x4, "cd51ed18c9307b461d827c77adfd89516e0a795d4ecc3ba2738b3d160f00150de81f7b19d47a7c91a1a1ef52c84ff41a62f568d1cf0e025c29bada1a79333a8d746e02c3dbd515ee08e5a171b5d6668cf0c2827b0d1089a0082aad4c39c7ed6626973b116db298d640129d90256c0356b53b92cf350e20fb0f10a354ae59ee2637b2a98a73f4c77b8ac6f9c28fa869b4c6aa42e556ede5750b02849b593ab35bf41e70f6e5fc1a071db78a3b6b2d99db2f3062f85b274e31d73268cbb643"}], 0x1388}, 0x40800) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x27, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 616.694181][T21681] incfs: ino conflict with backing FS 1 [ 616.699964][T21685] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 2: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x600, 0x180) chdir(&(0x7f0000000000)='./bus\x00') ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0x8c65e000) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x0, 0xb, 0x4) [ 616.742962][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 616.751399][T21694] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.762189][T21693] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x2f, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.802596][T21702] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.830175][T21692] incfs: ino conflict with backing FS 1 [ 616.840644][T21699] incfs: ino conflict with backing FS 1 06:11:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x30, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x40000, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) dup(r3) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x168, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7b}}}}, [@NL80211_ATTR_CQM={0x58, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4acdd9ea}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x23c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x42}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x7, 0x3, 0x2c]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x57}]}, @NL80211_ATTR_CQM={0x38, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x45}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x538}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xfff, 0x5]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x7}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x8, 0x100, 0x7]}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x56d}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3d}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x0, 0xff, 0x3ff, 0xc95, 0x2e, 0xd8, 0x400000, 0x9]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x4}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1ff}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4000080}, 0x4004) fallocate(r0, 0x100000003, 0x0, 0x800001) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x3f6, 0x100, 0x70bd2c, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x800) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.867349][T21712] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.882057][T21713] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 616.924293][T21716] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.949248][T21719] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 616.986865][T21719] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 616.989149][T21727] incfs: ino conflict with backing FS 1 [ 617.008407][T21728] incfs: ino conflict with backing FS 1 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) openat(r1, &(0x7f0000000000)='./bus\x00', 0x4000, 0x24) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) lseek(r3, 0x7ffffc, 0x3) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x64) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f00000001c0)={0x0, r5, 0x20, 0x4, 0x7fff, 0x2}) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x48, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.055529][T21732] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.076262][T21737] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.117581][T21742] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.147769][T21747] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x4c, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x80030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.175472][T21740] incfs: ino conflict with backing FS 1 [ 617.211226][T21755] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = socket$inet(0x10, 0x5, 0x4a) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0x4000000, 0x7, 0x0, 0x4, [{0x2, 0x67e0000, 0x94, '\x00', 0x1}, {0x0, 0x3, 0xffffffff80000000}, {0xfffffffffffffff9, 0x9, 0xfffffffffffffffa}, {0x7, 0x1ff, 0x5, '\x00', 0x3180}]}) 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 617.216761][T21756] incfs: ino conflict with backing FS 1 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8a010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.246593][T21762] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = syz_io_uring_complete(0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@target={'target ', {'PCI:', '14', ':', '2', ':', '10', '.', '1d'}}, 0x16) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x68, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:20 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.314484][T21773] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.327155][T21772] incfs: ino conflict with backing FS 1 [ 617.340948][T21771] incfs: ino conflict with backing FS 1 [ 617.346877][T21774] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3={0x3000000, [{0x7, 0x7fff}, {0x344, 0x7}], 0xee00}, 0x18, 0x3) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x6c, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.393202][T21782] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.419956][T21785] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.442766][T21787] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.458485][T21787] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.488377][T21794] incfs: ino conflict with backing FS 1 06:11:20 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:20 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x101000, 0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x3c5, 0x5, &(0x7f0000000300)=[{&(0x7f00000001c0)="b62fb363b937ae9c2cc44f90e8079a89e596ce41c1a88f490083bc2044640d20dc3e12d6b7e5548ff9b8c993bc20034fe68f4beb6532cb0b2e081094c0ca10d0327ba76366c28be9609458a2e80d91d60e055cd62832cdc353edf5c062628b9e65cb9c42610f9f66a3554eb49fb3a23bfa8267e8bb58080316443dad46da", 0x7e, 0x7fffffff}, {&(0x7f0000000240)="4cbe0445ebe2b192e41db6d82c8472890d6e2f814348b61f3653f202c77b92bfb14af82ca08bb94184ead433942b4911cc44cd849563e902839e512e2a0e67eaad17357558d1fe3455e0c7d254c56f4a97535d25fd923c", 0x57, 0xd0}, {&(0x7f00000000c0)="f239b897b9ba5e055117d3d92668ea3ea03969679298ff1465", 0x19, 0x9a7}, {&(0x7f0000000140)="5f501644a79b01cd35d67b13f453160c36237342dc095f01be", 0x19, 0x7}, {&(0x7f00000002c0)="88dac685275c5ce38007c4", 0xb, 0x1f}], 0x100001, &(0x7f0000000500)=ANY=[@ANYBLOB="6eff070000725f78617474722c6e6f757365725f78617474722c6e6f61636c2c6673757569643d62616265336635652d396636002d326266652d333765392d66343237366462612c66736e616d653d06c77569643cac28381b0b6933e9729d2f5485847ac6ba81f2e90a4bf321115c0134903e93a17bb4df63db4ba5d97b0bfab38a7a", @ANYRESDEC=0xee01, @ANYBLOB=',euid=', @ANYRESDEC=0x0, @ANYBLOB=',obj_user=,\x00']) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0) r3 = openat(r0, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) openat(r3, &(0x7f0000000480)='\x00', 0x42081, 0x188) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r4, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:20 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x74, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:20 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xa4030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.551101][T21799] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.587491][T21810] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x7a, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 617.615365][T21801] incfs: ino conflict with backing FS 1 [ 617.626709][T21809] incfs: ino conflict with backing FS 1 [ 617.648208][T21817] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.661843][T21821] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.694226][T21824] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.706281][T21826] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xfc, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1ee9ef9c", @ANYRES16=0x0, @ANYBLOB="0003f80a0000fedbdf250e00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099006b080000760000000c000e80040001000400010037002a007e1550013fffffffffffff400000008000000000000080bd060802110000006512d1ec1e10cd3affffffffffffffffffffffff0018007f00bd060802110000002a010706020100250300640818000f007107ffffff00ff0008000359f0e92a01022a0100"], 0x9c}, 0x1, 0x0, 0x0, 0x20000810}, 0x20000881) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xc4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.736294][T21824] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.752348][T21828] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0xff, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.825104][T21839] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 617.848978][T21837] incfs: ino conflict with backing FS 1 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xda030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.882338][T21846] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 617.924545][T21849] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f00000000c0)={0x1, 0x1}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280080001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) r5 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000240)='./file0\x00', 0x9, 0x5, &(0x7f0000000700)=[{&(0x7f0000000400)="569d7d89498f58bd3723d659a05425a9a5951df4f0f62b85e655f3ee0fe69e770d0829691e726ac7f2ce28e750f654a9106c180da6d3bd5e41d4d7665790352cdae4179654e7ac740cf48bbda14c8e3f31cd8d1c5d4f4edc516b85277c8ff424c6d656d599a37d2a74e02555381ba2d21157bf976a668847e9d8db74890c06d77ce49d09062d648d86ddaaf1476de430c6cca8de8d6ef54f340f56f3a20d48fa591c509344061e48251311739faa9c5e5550e99263c5bd1c4f6a31100ba5d23f567ae7d9796a", 0xc6, 0x90}, {&(0x7f00000002c0), 0x0, 0xfffffffffffffc00}, {&(0x7f0000000500)="f1349392c08c96af2958da28b57f0bae355159397d94df69aed7d01f68ecea07baee8949c5d82173b50a4aa3343a14ec3841ff90435b1c81919271518e93ad574e03d8bcc7174a53c840a8ab53186da9b84da40f8d8d", 0x56, 0x7fff}, {&(0x7f0000000580)="7ecf6d12a75b775e5233680448c8d60bd6b15c7eb1e58e77a9aec3a1644b02c9ddb8dd2516775ec878edf5470f449a91b960b78d71389a2025ea4421e348cc70d96f6c596fd294f6ea36e16f11d4ba62267a8fb3f33c8ce8c1b67adfc083976622dddeaf", 0x64, 0x6}, {&(0x7f0000000600)="20ac6496972c90b4b182438d5a3b2064d4c04c57c42da6e87036eeee5fd5fdaff148c0bbe996a466e803a0f2c2b245746b34a46d554fe1f3470dc7022af9215dc932d0a11ef7465a3c3756aa8aa020835f0e0b72fabd1cf0d04785bd4887214197123714d258b142335a31f02f1988c8a9e408127a44c8762b6a2773b2d6783fe55d831f6af89b9217ee95a567b0188f85fdbe9e95264742c8d664e44759452fe5078041e19c9a714024fe1b0fc9b9bcb0ed20a44b95e3b734fa9683987dd612502741f5f4104b9c0dece3203d56e6e2457b1e9a8e33c6a8b2e78d882d652c088d46f6594010830bcaafc0bb275ab0f3fdbe7b05cb6ecc", 0xf7, 0x20}], 0x1, &(0x7f0000000800)={[{@test_dummy_encryption}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x100000001}}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_continue}, {@nodiscard}], [{@fowner_gt={'fowner>', r6}}, {@context={'context', 0x3d, 'root'}}, {@subj_type}]}) pipe(&(0x7f0000005600)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r3, &(0x7f0000005780)={&(0x7f00000015c0)=@kern={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000042c0)=[{&(0x7f0000001600)={0x1c, 0x21, 0x0, 0x70bd28, 0x25dfdbfc, "", [@typed={0xc, 0x59, 0x0, 0x0, @u64=0x9}]}, 0x1c}, {&(0x7f0000001680)={0x4f0, 0x16, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="1c2ae73001926bbdd3a0655f6744597688b78a1de29f8ccaab4c4fda93e421fcb23c027911eaf4b55cde08d7639ccd94e90bf4ac36e6049d7ffbaa98151245b66da5df007a8dc96a03739b4817501f7e032a5971fbe969443fd5d17104cee316d392facc5df1612511d4a2cf1e9cdcf4", @nested={0x16a, 0x3b, 0x0, 0x1, [@typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x8, 0x75, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="0aae4f44b08cac36ef8c3d7183582a177079df2963ef186ff3fdc433aeaaf90b8f31e224a93419645294f4447515d6db93df91a8c88cbd05a6593ea8fefb5baeb9edbe2089fab1436f4830d3574221eb76dd7b9fe1b18e47d0bf73bcc3e47d58", @typed={0x8, 0x47, 0x0, 0x0, @fd=r3}, @typed={0x8, 0x55, 0x0, 0x0, @fd}, @typed={0x8, 0x87, 0x0, 0x0, @pid}, @generic="cc1217ae503e318a00411b7bc4832f89260bfb0eb5d226078e40946d0a50f0c98a2f65394cc987f5939e1523bd8ee1490d777066d0d3541cddad37a80e1c0ffab1b25fc99b09801470287570b65d3ea914e491128b6a1de2cc323804a86937d2927b17c00c9d6e7f169e17e4687aedb334d1763571", @generic="ee803696226999ec2b52022ac444a2cb0d46c9498c477d67a98c1992d25b585f61bad9bd52893d722054820db0ebb1214b1849b438bfaf6780b60b696c471dc3c985d5c323851d4aefbc9607b3ce9c8336cf2637", @generic="1c7efb872e8d1a2867"]}, @nested={0x51, 0x38, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0x2f, 0x0, 0x0, @fd}, @generic="f634", @generic="27663f51ce18029abe04c544b4a940e7391fdc058de2aed04d632e3bc6bb934188b6a2da8b3901242ff61d5e67135fd5c0373533f9a7655dd89a4b"]}, @typed={0x8, 0x1b, 0x0, 0x0, @fd}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x7ff}, @nested={0x18a, 0x14, 0x0, 0x1, [@generic="312414c805c771694004d4b9abb188578d8ca386575cd48f9cb98fb7c5832bc7af61cef237eef496cd3e5a4ce4a17655f5805d065f0b7a34779c58e1012567731518e608f7c58db1d294f383fc5fe18e32381913a886aa82058c547417d391392ecbdd7e758b71dd191555d67d9e7024ecf50b9feb36cb8c40faf1de7727d0", @typed={0x9, 0x13, 0x0, 0x0, @str='/.@\\\x00'}, @generic="adbd922e04628b717f8e0783fedbdde43d5e0a916d96000e387ff2fca49a2c0a5c3e51c12007f8edc4490d12bbe542adb8ff00934531e09ab990c5dd803f887fd426af4ad3683e7b5ddbd0fd660fb93bc2c573afe395502ef227c1566164606f3fc7e9c3bb4d95ee1896c826c9c65df4a44fb6c55684274db80fd47af0c5caa22f9ac800e900a4a5e9c8da52987df346207d963c42ecbe04285b4bc2f7bc8129d4e982b2f26dd58842a408b998d8a47a2492b841738c1c34025e7cc4d2bb377168d41b9cc62aa18cbbcacea61d4c28fb48620bc33e608affa3fb9d96fba2b0af87dbae", @typed={0x4, 0x1c}, @typed={0xc, 0xd, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x2f, 0x0, 0x0, @u32}]}, @typed={0x8, 0x3c, 0x0, 0x0, @ipv4=@loopback}, @generic="0bc127626c1acd02629c1f60029869dd3b293da3693083a9c4940d7981ff68265b1ab58b0567b236e6649f6cf943a60be1fe6d2796414cede57bb72e59352e5ad7b9ab18534114a2ce6d89efa072679a4fe89fad903c8c3424afadffbe707c3b3b170951a2adc998ba76726d9b9839c83ff6ef", @generic="2595e289fe20d1750aa625fdca42afdd84a684438795ba8e135511fd25391cff3fea46b49d457190377297a0e53acad0e504d68ff11d1a5c732952cd28e4189e5e42d6dcdfc1cc8ed273a02e7d3791f0346439fcfd9428510442ed7a6f98f97108139436fd97cca7fe1e084baff31e5886c6683f8cc18fd14901ed3c8704960ac836d11fc5b06035378e8319a4908b", @typed={0x8, 0x32, 0x0, 0x0, @u32=0x1}]}, 0x4f0}, {&(0x7f0000001b80)={0x2704, 0x2a, 0x100, 0x70bd29, 0x25dfdbfb, "", [@nested={0x11c, 0x3e, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x8e, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x56, 0x24, 0x0, 0x0, @binary="b6ae1bd6d199177f2e0820394b991de56ca106ba54ca8e06f6344f1d4cc49481599ff654f0f104053ee907f4834f7e7e4a61ea0015bb0242c905473b58edfb37e6bb9ae459f40e44c0aacf79bf8ce51a4574"}, @generic="36dc351cfc5d5709d0bf31a557d98254e7f0e563d0e616db43711876bc14a0b309e1b80e5b8f4f0e1a8b3b3c4e0e6fe22a41fedaa861dd2c9874a37af851d33d27145ecd6828bc2474971982bca02d218c5c2fcd819298793ff80ea20357e63630852992fbba2391c26270", @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@empty}, @generic, @typed={0xc, 0x1, 0x0, 0x0, @u64=0xfba}, @typed={0x8, 0x1f, 0x0, 0x0, @u32=0x7}, @typed={0x4, 0x89}, @generic="3d4cbc05844ce9ad697811c8d061d700cab5156cc0a544dcc3"]}, @nested={0x127e, 0x51, 0x0, 0x1, [@typed={0x8, 0x47, 0x0, 0x0, @ipv4=@loopback}, @typed={0xa9, 0x6a, 0x0, 0x0, @binary="f88e76eeb4f53a175d787322d3a336fba2d8dc7a2142e75a241ee2856abeb5c080e4001866343dcdd361aff6bcfce707b606fa6c346df88b752a30556e3db0d814df9d4f955554cd208781b12b207718de55e701d1eff7c2be5055eb42cb5e11ef3280fdf13d8e35b68f9814c597ba4e906286c5592c62aae39cbc2d737e3bfcc8ef4ac5bb262ac76122b0caae203da59a23757a4df32611b146db922980b853c3d285d4ab"}, @generic="629cd341dc2d931340e0be2083eaa996c8c3e894e197ece64e9cc686c09f5e728cfc109a9c55db9aea0ff4c557d977efd0be22938095c16db7de7e1da46b23cd899f1e6f11044c02bea6681c85909c8836154bcd799318c677e5205924855355add7f5736748f0ffedc11ca23b6914278ef8a53d4d7bd0e0fdb36cdb044091c0e93fbf8944c776185036b2f9d24e2c01a64badedeb0cf5ef0160b7bc770abf8b1a5583f8b21bdee4e48aee42500407421b968515855d9effb77a907cdddc04c524e3f9bb1d7c260eb61aed9be63e874ecab91d713ca277536c2929127885270dd4a43093dbb0d1d002d416b67a", @generic="eb07fd2fac88c4647355f555033d49ba7e0c21d28b91eae7e3a214e109dd612807e558736ffebaef420e6250b8fd2aa1a56bc73f7b18c8710fe19780aa5262c0e3d68252374b67e9014f91d3c1307e64e9847adb9dcf984d6152363577034ba7fd3af1bb47a627320af5fe82ea77ef490fb85eaa1351e56111661eedb9cdc422ed7eb80c8ca594ac05720d064fa4e225f05f5a7c3e1730e54dbd59b0b7c832de605c22a99520bb53c8568258f3", @typed={0xc, 0x3, 0x0, 0x0, @u64=0x2}, @typed={0x1004, 0x23, 0x0, 0x0, @binary="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"}, @typed={0xc, 0x74, 0x0, 0x0, @u64=0x4}, @typed={0x8, 0x23, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x66, 0x0, 0x0, @fd}]}, @generic="686cbdbf4dd5568e519023d18b3b1e3044f889b56742239cda8719dbbca1009ed45c050bcdac5246c7cfcc6018bbdfa2976f667c1bb38db916f4a38f1fb1f8d64fe981cbcf378205ef02560cad92376d3550406584b225f3c9b4d4036111efe9d3861c6b08fb19b9b50a70fbf5be0cdee702bcff341baacd9dbb6c9d7d8a42022e187146b5e04752ba064bf6e866ec95181a8226f6ed76f9cac7f4", @generic="7b469dff15eb34a885b525f30ed551e80e9542445e74a2a78f646bd60611566f8dd09e4f7ec53be45242c46da66c1f3ed029c723d0249b61911d089b7a", @generic="fc54bf59845f3a50fa03bedff05968a4e5734647e34f2bc99545f99a64e38ad2833f6cf3f25d83789ce24f7653d732fe032a7caab02cd1ef462ae687d1e25f2ed625fc551a743530d48a30f4b0c9c0bbc14c3f4c6623a91002beaae33a29353948600d0ca60f0123efa68b66fac30e50a3290bce469a96e6b8238136a7f706f1f1df0e5d21364501", @typed={0x8, 0x17, 0x0, 0x0, @binary="6085b328"}, @nested={0x114e, 0x34, 0x0, 0x1, [@generic="e9dbd7fd98924285b7abd63f35e7312fcf6898b844c0594f393cb406187bb213ae42e991c4f3e2bcefd1e57b99da9c85cd0ef74defbfb431b41f92cebc095020a55029e534c1c1b4916df27e1fe36bd7348d2a5d2ca4d93ac7a6c4ac5aa04d02427a6aa78d62fbf72770d6ee5ec3c3c9790b6d39310d9581a54856e9de7a8fb240a9c424b77d1a4e3ac6036310352f3709c1a4af9269b2bfc7f66d0b9b1729988da5d79a6281130e407c32b83deb56ffaaabc00b3dd1261027a5331ae76f0dd2d1fcae3e3212ab903c9c32d692cf392e75ca718cf33e4a2e5de7ec0b96c88e946fec7409b3a5083332242236d897128878", @generic="57bf1782d8cbdd7b61659180d5dce21bd8005dc95601ed77ff08346fa57694edf23b216136b08125", @generic="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", @generic="957abd8edbb9d351ec7d5c2556a277ff3847e9cdebab649036dc93a3846cceaf275e62e955c9f082fe", @typed={0x8, 0x86, 0x0, 0x0, @uid=0xee01}]}, @generic="86145bd1d24a29c851b4d4f0deaf78f8a0bfdad6c7866156d9ded66223abcdbda7f8d5a9b65a3ed5171166fe75c1ba927b6cdc7bbd0b1790ab7057c69acac60a5d6bfcbfbbb1d072799de49d27c621b4e07599c587ef1ffd2aefae21f04852f310d1fc9faaa04511db56e6950bf1791114007e5301092291b999e59dfa66d5b0c6a2cb858331b9f60d92df7260cadfbceec1d1c8c54a", @typed={0x8, 0x20, 0x0, 0x0, @u32=0x8}]}, 0x2704}], 0x3, &(0x7f0000005640)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r5, r7]}}], 0x110, 0x10000000}, 0x8001) writev(r5, &(0x7f0000001540)=[{&(0x7f00000001c0)="72ea543aef4ad3b9b72c751b82cb28dea77ba1f2505647f33db2ea6c450c3afcd7ae552abbcd2348889bf89668c63d43d91a701a7e0359ac561a354c5c990672600d9e76fb6992128072be3a12152d7c516632651b8feee82a780ca7cd7e0f33cf5e0b12151e924df30f1ea2dcd4bfb5b47aea6f72d195b6172cd0305f6bf0ac6ad902b286c792249f74c90e32c884592542ad0fdc2d3dbef59b98cdeb6625d4ace729d1c2d93933e27a066df5e7b4e4b86a74baa03cc9c5d9aa74e7119ca035b97989ea8054b2c9098e7be2d82771d39c6d24ccc92619749cdfe8b2b878981e2b3737ba27fe3efde0dc67cc08d3da2aa66654ba1823b44b", 0xf8}, {&(0x7f00000002c0)="673751c478a3052a58039c94949dc07c4b961807ed5463f6529e901f8b0a8cdf7fe92311d93dcc63ead518761d1629f5693ab3eb75a9e36e15e6398d5d80710f23743a50594aed6e0556882bfe72052df6830cd1a7c9d4e0f80a935731689c07cf2edd4b5f3d6f192f44b772ff6d43eb341e93d47d99f38dd0a2eb071c5b5a6d2f4c9d4c7e3c2c67440ddd3e6a70", 0x8e}, {&(0x7f00000000c0)}, {&(0x7f00000003c0)="698be3e08d4271d2ef2848569a", 0xd}, {&(0x7f0000000400)="bc9b7611d5a700f9ef65453723e4c62bc7db164a78d459e81cc773001d8a3c126ef30e7aa5576c4a249c55fd73f166cf3caf55fb33ab8fe14be9308b77e2c1bf95f873bbce7e333181c3a5c10a7dbcfe1c35d3d5943b3735da55a306b6ae271bd2c9e1ab5e5905976d5a81df37f5010d2c9eeccbf9d52d493663f2c5bc7b12484acc803e07ff7cac19b664a4f139b10a6a8005567cb32f66a4254826b760db6d5beb65f770b5b9870584fe23acecfac19fb75ab2b6eb85d3840ee452874c150443921d0e", 0xc4}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="00bc7e224f7c4178869cca2d0cde72a315eb11e680ca6c41", 0x18}], 0x7) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:21 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 617.967152][T21852] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.013789][T21859] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.033716][T21864] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 618.042792][T21871] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf3030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:21 executing program 3: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 618.064273][T21873] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.083347][T21861] incfs: ino conflict with backing FS 1 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0xb4) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x109882, 0x2) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r0, 0x42, 0x5, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x2) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 618.129199][T21886] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.148772][T21884] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.160910][T21888] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 618.216732][T21885] incfs: ino conflict with backing FS 1 06:11:21 executing program 3: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ftruncate(r0, 0x401) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.256502][T21899] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.268628][T21903] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 3: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 618.314628][T21906] incfs: ino conflict with backing FS 1 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x5, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x158) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) sendfile(r2, r2, &(0x7f0000000000)=0x40, 0x20) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000080)={0x2d, 0x6, 0x0, {0x1, 0x0, 0x4, 0x0, '#)*\\'}}, 0x2d) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 618.361735][T21915] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.376687][T21920] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:21 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:21 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x120) lseek(r2, 0x7ffffc, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x100000, 0x90) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 618.449298][T21932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.473168][T21936] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:21 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.502880][T21939] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.525211][T21941] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x8, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r1, 0x0) openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0xc0022, 0x31) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) r4 = creat(&(0x7f0000000000)='./bus/file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r5, &(0x7f0000000280), 0x18, 0xd9f, 0x0) execveat(r5, &(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)=[&(0x7f0000000140)='.pending_reads\x00', &(0x7f00000001c0)='.pending_reads\x00'], &(0x7f0000000340)=[&(0x7f0000000240)='.pending_reads\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='.pending_reads\x00', &(0x7f0000000300)='.pending_reads\x00'], 0x400) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:22 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.583683][T21952] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.596985][T21954] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x9, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x42000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000017012205002e2f6282eda450236ae5d6f1ec09627573"], 0xe) r3 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) getsockname(r0, &(0x7f00000001c0)=@ieee802154={0x24, @long}, &(0x7f0000000240)=0x80) lseek(r3, 0x926, 0x1) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) pipe(&(0x7f00000000c0)) fallocate(r2, 0x100000003, 0x0, 0x28120001) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r0, r4, 0x0, 0x1) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 618.648832][T21961] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.664497][T21962] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xa, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.728454][T21976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.746103][T21975] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0x3, 0x0) r3 = timerfd_create(0x0, 0x80000) fallocate(r3, 0x100000003, 0x4000ffffffff, 0x8) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xb, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 1: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x12, r3, 0xb8f15000) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:22 executing program 1: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 618.801749][T21983] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 618.837431][T21987] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x60020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 618.887800][T22002] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 618.957912][T22005] __nla_validate_parse: 10 callbacks suppressed [ 618.957919][T22005] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:22 executing program 1: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 619.039756][T22017] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.052560][T22013] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) creat(&(0x7f0000000000)='./bus\x00', 0xc0) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xd, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.102746][T22028] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) fchmod(r2, 0x40) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.145000][T22038] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.169809][T22041] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xe, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x73030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 619.192704][T22044] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0xd40f6aa1eed53386) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0xa) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)=0x800000) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.252938][T22056] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.273521][T22057] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 1: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x11, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.344408][T22069] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.359706][T22066] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000080)=0x10001) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r3, 0x7ffffc, 0x0) r4 = openat(r0, &(0x7f00000000c0)='./bus\x00', 0x410000, 0xd2) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) fallocate(r0, 0x100000003, 0x0, 0x800001) sendfile(r4, r0, 0x0, 0x2) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x8f6a2000) 06:11:22 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:22 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7e000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x12, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.436723][T22085] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.454833][T22087] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x88000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:22 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = socket$netlink(0x10, 0x3, 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec040000", @ANYRES16=r5, @ANYBLOB="0100f0ffffff000000000100000008000100", @ANYRES32, @ANYBLOB="080007000400000008000100", @ANYRES32=r6, @ANYBLOB="c00408800801008024000200a0b7f83bcc9874341d6ee6399ac92e98979ba130727b71285943a3ff110c9b2e2400010000000000000000000000000000000000000000000000000000000000000000000600050009000000b4000980"], 0x4ec}}, 0x0) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x8844}, 0x80) newfstatat(0xffffffffffffff9c, &(0x7f0000004140)='./bus\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004200)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f00000001c0)=0xe8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000004340), 0x4) r10 = getpgrp(0x0) r11 = pidfd_open(0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000003fc0)=[{&(0x7f00000003c0)={0x243c, 0x40, 0x200, 0x70bd26, 0x25dfdbfb, "", [@generic="62c67a919c299968600e010c2b181f97934db5de6237371976e542631750be6457b4bf66ca0b51b0607d0bc54ae69dcf6e508237a1f2fad01ee2df0f9d74762c0bb23c8fb3bf7ae069d96a8c45bee0275fed559d52d9c5991fa15541e2e4bfcd3f08fe3f0e969c8b13f906db3dd95fa01f255ea64119939cca3bfd92651c9d6489d289805e54f255c0ea260408d05ef15eddf0e7adf04b908e44952385247d30aa8a7ad881ebe6348e10fd77b5ca9e8c50f70fbd", @nested={0x128a, 0x5, 0x0, 0x1, [@typed={0xc, 0x33, 0x0, 0x0, @u64=0x4}, @generic="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", @generic="fd6e1f1c14c9cdd0ed7e8febdece118469071928b02315dbbe7c488f4a1050aebfe5ee0f2df689f60758154489f1068decc70a3695baadf1010dc13cc78b54753ea7678a58b7c468ecaced05d9c1b93d0febafd77d594e3a42f35a0ecf11afe8c1d5e6fa0356b23f9b3aa97a105c9c1f494f408beea186b2865c510d1ae303ee3e72e8be9e1a77638488f1cdf1cfe808fe34ff09a4ced20198b1", @typed={0x8, 0x6a, 0x0, 0x0, @ipv4=@loopback}, @generic="6af8ccbca2976c20756eff878071270019736e2b762a182eb4c11ab8464ed5f15e09d8a631bf919478d4f45f7ec0fb7d5699839958fa4e429bb9a7a2782850dd0de6dec18a294bf18b4a8ffef43ea6b97455ba56f47bd705fce800dc63759e109a1dde2588cc28ca720e", @typed={0x8, 0x7f, 0x0, 0x0, @pid}, @typed={0xa1, 0x6e, 0x0, 0x0, @binary="40442427c826fe8863079a424bc2df313b2273ef80bc7c78277e3ac7a13f4512436267131083207e83a32582eea8f1bc273affb4806ff9f1567c055271a318a44a16659785b7877c8909f1265cffc61107ff6cd48600d8d8bc80fc0606837e85a340499547e8777627a0340bedee55dd05df2611f9b41ffa71e1dd5d2b7a7202e49b8895782b4186f4edb6bb2bc79a94918babee43ec3c643db2637fa5"}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x47, 0x0, 0x0, @fd=r2}, @generic="31241142454e94ffa5a1e7fde6ee23463f333fa56a8aa703468ef696392ee76fedd6977234e72133ff877686488bfb2b04029a007852aca83a67998740e8ea06275a649c58ea7612c02cab1bdbba3629f3df37d9072717e3a5efc13350bf87fbce8cc693d0f1c8583b3cb3315f7631e0e1719f0e6e81f3937212f8d64feb23c95b2d7639e5c615a32062fd925a435c217bbedf92cd93e22ce9eb8e1c3e9526827702e59af948"]}, @typed={0x8, 0x6e, 0x0, 0x0, @pid}, @typed={0x9, 0x6b, 0x0, 0x0, @str=']\xe8/}\x00'}, @nested={0x10, 0x69, 0x0, 0x1, [@typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@remote}, @typed={0x4, 0x53}]}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x100}, @nested={0x10bc, 0x6d, 0x0, 0x1, [@generic="5b3fbfdef9d37a71a7254afa499fb53bab89d03dc0c764be190bff1d805baac5fd175712d5450034b6dc22fa8f8d7e50aa41a93fc9379ce9779ca7264a341e3186f14e5de26ed820c7c62f39c0645f432ad72eeed0eee107657da36d9d15921bd817fa40be9e13fdfd6a3bc68cea0b163da364d19f4291bda241b7810c82200421e72c0fdea50b1b27b0902d15e3fff02a64d4c0e9c79f8f04885541a9847a2e58c689af689eb6e8257b8c91dcef5824", @typed={0x8, 0x3f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e941f1ff4e4ccf2f19b251d3ca0219ad98d9c11123d00b0af885989694ed1e5a321247d0388273315ff58d2e07686938a7874270da48e56e23326769e2eb36ce98b26198dae62bee0da33e83c4b921dfd2452c2da86f15fa625f807616e751eb4dc09094a727770b2c13ad42d45ea0e0947389a0c0b19092f0903e3e6fd883e75d8aca6c89685dd7f17bf56028fcceb700f517a9ad3af7b65ebf4f22cf76588ead099e98a2172c1c5169a6e8f805ad843d5225ccb4446fb2968edae3606e3cd97efceeaa006158dd290f44f38495cd4e776f1829e36fc584fb569c19240453c064fe87228af5193cc7487c42dab0afbe7467af5b381dce5d33556f7643f4224be0a2aa97a055afc61d1803c243fdac78567e67737750326929613aab508c2807db31da1ac1f8f36f37727b5ec2922eab378f92a6042f95c8b211e39a4343b0521746668a27a1c415dd2144bfb3f2d50beb12ffd58e4d7fe139daeac117ce10b00b9c8085c28cc867880b0419b76a3b3d212543f30d67a68f3b2f9fa3a9296b9f8d8c2190ff39e70c3e2eab90e0ace68b59b278753339c39d96cf74c9da9aa4f402fb3fb65ee8e580879c8017878e8f638eca8af94368154474633fece92dbb89a638e2b24b04eeb05cd55712804ae6d981a44622c932e7492c86f1b2cba45c947eb1307c8827999db2ea268bfb2c6ad163d19c9cb4a6ce313707071b56d7ae1af93bf399664f5a72c105f5b1080197640262ae2cb7a57697f32df7a9cd5f245c0984934b73687a963de94a014bdf90b05c1cda5e94f050baf8e6db1a14aab7a937c86c81ff287d2422853476bffbca0ea08d6bfd5a5bf14937727b56dd0f0abe4cdc124d215e7d98948aadb4c3317ba98accada356ce97c0ed20a29906d6c46e4f68f67b7681980684c85ea60b12611327cffdfcd8e5a80a3fa6988e7c177a7e3dbb4b525b5e28d141d5533982fc7976392e28e82673e348df071296fed87add231e5f3121ba74425721a5144b8a0d4ffc30d9a264db97de419b14c7eb043143644b10cf8a2709d8c421e71aaf9a5c5d8a955addb680ddf85d020cf60153ba17db026a3fb4e1c31f9bddf0ff20045cec6d1f07a8ded502f0009ce8562044db1560f00caf8e0f829fa637207b3e9bad9ccc21ad77ba39ec75edda036f069ea0f5afe33f6554ae2d17027529b5cbc4692c11e723a49ece85b07a91fc786ae246abb14b250b5209210f623a34bf538a88603db450899d54c7a6face36fe40ec3856da64e76f9b4a3dce33697e652b3581fbfde20ffaab0b494a176862a1eabb6478598d59259e9cfb852b84654c81522265903d90daa0db3f61ab2b976a0893ac8413b9b4eb74eedb6c53e421ca0139159b0267126d98c849af71f7c54e3db62a9adc1ec1d8dc4be8d50dec2bf573d1908bf6dcc043084ec4a0a839ebc2b4538e5e58c94cb9c69c006495dd1a938590b648e265fcaea7ca263782dacada2ddb8d03244fd152adcc865ec658ae69a0061d5cbaa613d6e17658af2698eaeb209a2f2c4efc9d369e54d69f601366fe9b707004c74b80f40c22e0641f0990808d79df626705818af3f94047b57043047a0146490d6077dcb0c9a0153c5ae3021e78e791e5d000c3f218ea059044d081ddd19c9473b5c37b60ec0435b40e83930fe3deb9c469630f2228306cd04cde229db4ca0406c58bb4818fe632f8a6da435b8b116f42a28ab2381e74d4ec59e05b9b833d3651c05d0bb90bafc88cf67e28a1c5a86504f8e288ee31cece77cf9ed1609fc9516ada1a9abe8455277ba57ba70ced50cd46412f1ca2311f0675fb736ebe2ecac88d81b1722daae4e06ca874186bff6ed96742971e681b0c7d5927ef16643b2b8a33fdf2362e44abc7fadb1f9a6ed24a81a8cb759efdea4e1dd00db399857df7b9c1a9da54b67c4c33a26c09675156884b06328a35d5cf427b420f09b084e9664d816fad5f5ff6ea41e49ec664495517a73a1a0f06ec3369474c5cd6229dcc14b3b39348bafcde8ed7e094b3d6207ec74c78b21b182a8d0406abdec44f587910f0a0e70e02dda8d9aafdccc44904e3607c502bd0ddbda29e496d2d652ecee4ec4e24922c280600c46ea222572147d3da179b3830f955f7dae2310b5baa5d23c1a54814f38e93387ce637da71888cc51823dfc4ffb936b90a81abe1f1fcf92f53e10bd61ccff7e292cb310c667b016bb2dd82426c2661081638c58d727552819b704079af2fe6b2ca7e751f762dcd8fd608a8f5d6cf811619b9b426d0936bfe5d405e690e7eecc28bf757bccf68ed13db50820e62a1f1b7e1e111bcff8ef8089f6ab103e03200fc07c4560ce9378c12ec8a9c53c15a2be655b09a9308676a67b2d14e4df0f07c45e28fdf3647f7bccdf862b051cae70ed37eeeeb46924f4691828e97f9a7273b0af123103b5e51c938dc78f5227102fb1ef08f1a41d13f4a4b2d6ddcc80881a65eb8dba4513084a7b576d11e24551e41f10655b272a435f3e3684ecd5eb390e5592d8ff1b59f6b8d3cdc850fab2315b6c3a44c3215fc0e3d57ca1ee86a7880481dec022786244d880a9f9583968954ed6bb67e24126701ff3ea2049ddf4d263211d0a32e43b5143bfae7a06923029d61b480424e13f0d7cc97e040e2c38f9453d73e955f2fcedd80bccca4828d85b0af0cc801f2ca2a8e96b7db69d134818f4bd5974d8985d56b8e66e206ac4821484d0c7a61ec45224e72b89c20888f8aef9fd7ad4f8cba2d7739b5e95a9cc3ebeedbcb63b39d93d0cc74b486ba0b8ba580635b06205af5aee4a5cedc88c0222e7cf77d8533331aebe23b2f855ee7a281d1f8e55fd42de1a51a9462f36788ebcef4b50fa504377a73ce50bb69296566df52fdcfc9e6e96649c4b3ba2fe101e876de1dea60d86db504f8e49e2c7d6d1dae01be8f6ea219f75f01f29dd41a49b9483523e76759308db5f2327559c327b0be8f55b2da58a17c33afd5d9563d3cced8a21e0cf402af8aed1337fca02fb45cb196d6dd9bb81cbf9c7d9ce4bac004e27cc64e5e59e976502cc80dd39dd77b9e5d7d9242d7fa0e58452cf949945dab3e5be297620e5ddbfcfb27ec29d622805c7807fa188bef806272f0dd48c044155f5e0c06b99062765d4d997697f547c3ab42d8b066c2ba706dfbbde0500409c86e2c9738453d18dd5a84a6ec45398e8ca0552e79fe41dc401d5178f428ba21b2a9fdacb74d96fa6736481081473441b478dc4a3a989f853b7e71309b491e197a2f4ded257bbeb42d7cb58f563648c7daa80fb1e80f0d7013cc07cd30c016219fdf20a920ae1e89e3ea36aa4d1f0bb0e2523bee94dbc20baa60125ca7a84777e87dcf00815b088ccb45b226933e28249bf05ebefb4b9ce5b74ff57b4f1482afdbd872685a7a29cece19cedad56603a32a7c63c5e33a6080709b9eb5d3ac69216d04f34be949c0fc0c765a446b9b4d323df8648df468063ca091103622d4c9404682f9d9bc7b5bd90371393f87be88a307a4f3b2e4444eef92443acd55433b78d5495cf2e47867b4849afb9174bcb9d63e4afd786dd093c69eb2c5120cce4be6d6ade9a23bf3602d22636bc330914842b13c999c84659d23b494ae81c56aa1d105a067b7169d4b3c180b4be6e421032aa520b0b1492c9c19aadb605b5e32bf09ea0925062e6e42418affae43fdb51ffdc421b1188f7f834c6a8804cb0c4186939cb046f0fe3ae0fa851d2e621810d2acdec7cfccd04a41f1f3140a66e1c21f290d12ce7ba85c24099bbc47da197b92efcd89da30f8c81c43c52d1bc078a9814d5d72b286ad4b93910e268dd02a2c7090d12c9448fdc3a261793f25301ec2d88900169a839ae86ab5c78ea44833c3037e9cf818d0b6573377999feed624427e8d86846b41103d2ec540be0c47a1f21ab61632c6ef34bc72750dcac7f4db091a6414992c95db7b2d6ec399dab13ce3f1cc424fb5e3bbc6e2e0909553480cf0d55ea10f489f5615c71380012e2418bbb1657d4778171dd857bca913c92b36e92bcc98d2b7e8f6864479732e814da097c04ba93f389e05704a825edc77a36bb7d7d1a6c1cd6866267aea83b299861240823b0c78fb81889dbf1b78f74dc9ab372a4cdb2cb5f4488eff6f6da9a4609c298afad11cc4b78bb6cc37d5a38a789b2f9d32ceed33fadf1651ff2dfcd769df835a639f9861466270563ef12082357971a4580ea02c15a3054f6da72b66b86f46e674795fd496ce37cd2204bc09f35cb572df560e60724ae02502916779c33c27e5a909e94a4e7b71bd9f60df73dff40a1388ba0a7daf38f5b87fec680e3390293c575d792720fde1b8ce00d4d0fc860524384e3c28715f16a0e551c9d4da069594dd0295c12ce4a4055957bbcf8367543387aed93a5d90858ddb57a4a53de7efbf6916964a25b8894de22c38418e1cec7e97f892e27391659e6de6c9a0a734b4f9880d405e52ce034a2e7f31345ef0b41187db732f121ed4dad827c4de32ebaf61cf6d8bdefe21e5a7a94ace0403935b327503f623f325cdf7573784e6872dba2d61537f06c37a6263bc8832c8e3aa6617f614e6885f80426adc5c20839b464b1d821fdd6dfd5fe5f74382b192477b8f70f38748db7df2f24069df4c97226feea44068303f583b6623eb2fad27f16cbe75421bbb70f7990f02ccc5eeb09e0b649be5b44f527b72da5732be11982df569b23c6df7fcc20968977f5ca41c03bf8984c030670cdfc9938e398540a0f91c85221a626dd7d1691369461864037175820a49b974c96e1902fb9aa51e9981470154d403432b26a0e6f8107c06e97d720eb8c0e6ad769e3a74462e023912ac980a129b9755dfb4679616ca30ad564d19a2198ecf548b4dea769083ecf0f0141c167cfaa22573d584655f1ad7cc1ba59a54a7dcb43b95296370505534ae28523e048bd42321e86ceaf44ce76e21b9da242da2246f106711fd405ee3d4aae92fd27198f8afd4d2b68c5f5465ec27122f71058942104bff6634bf2a160c69c432520c21732e9c2b1e6f8c6651e806170775c72214db7d02d267f04df4ed4824290fafbca986e164f581c248fe5e25c90874dcde2c9c428ecbf9d68b9b3c659878b83268dbcf91d956c0ee9520a0ff03dd20022e2c03acbc534327b2ca258c43f77c890ac55337230263d282e703b45129aa8359b14e2b64290759b4f8e44c037083964707fc0f1fd6b4db5998f8d61419412ce815315982c4596cef6e86ff31bda14c2ac7680ab11bd37751e728922ed704dc809290ed4a2c5fd2488b53195b389118eba06f97af268f02dd361fd4555d06388d98148273b7703423cc18a380aa8e35b57e979e2286e6d81986a7b2dcd5df334105838dd2f39b34089f33f12aa58aa47a8d39343e25332b17619bf3f1f1ec7f6e74f3345fa580d348ef84b0eac16e8cbd36fb64dd8315d2cda91470e36b752c32dc87f4dfc4db7906cab0f06d4497e5d0657577c081be3a406be7d38708675d73d10c0fe914bde4dac5cdc8f0709b96454ae873a3566245f478b8d52a4f5c186ebf14a6b396ddba0540f89ce247925dc0c7a94bed6d919ed8109d0150c3f90757776f08efe8694315dfd898cf309e64464a83092becd7c3b208d28971a740ac96e33b3178cb1ece12f706c21375d958b083d6bb13eb1257e2c5913d96cd464ad9d24ee535ea9ad531e06f3180ee6818d425eef437db4d87fe537a6ef1994ca8c485d222ec0dfc765c057697c6f8ec5b2de32af7635759fb4ee06c4f97c5fa32802fc9ce5ea29684814b0fc3452ff6775491"]}]}, 0x243c}, {&(0x7f00000044c0)=ANY=[@ANYBLOB="cc0000002b00000125bd7000ffdbdf255aaa6b232fdef2f2c21fde4a2127e1b074ddf441e8504cd5ac05da0588d0a16d372d58a12336c2cbe5d06637bdaa20c7ea460b47b039e1c0ddff39ff18c1f5a1789c355925b96366c2a45723718a5c0a3716e7441d3a1575357908f562e22609485fafd7ff63b6dedc75f033cd904af63f5c6e138a8dd8941681ed304a71ea1b5f34dc9ea0b615ac57ebbdf93309ffae3ae41b44c650c71195ad19638d52d5e26dbbe9c5f46e29b7834bc21a502d057e090027003a2c7b7b0000000000907ab22018a5a6ac3fb108862becb4a309b4fd9c4e5a7e541c4b2e065102d33dec5c2083423cd20800c8937f765a15e8a7f759cae65a9194f68e7640c9f5a134afb83b3eec30a67eb1919a91e7026e9248cf40caffffffff6f72a124b992965a12169950e8a5376333ff8c68a8c0b4e682b6756bd99d965dec223c8a732078a2ea17696331510d87410872217b59c9a664707d6fc8c9ddd402d68be60b896d2c8875bfb56ed481446f171ab135b766fc4001d56b2585fd99cd49d9d92c9315d974c4f2c41373dd3dd27900e59c1233aefc46daa71c1220d7a6bd"], 0xcc}, {&(0x7f0000002900)={0x130c, 0x13, 0x400, 0x70bd2d, 0x25dfdbff, "", [@nested={0x73, 0x31, 0x0, 0x1, [@typed={0x8, 0x29, 0x0, 0x0, @str='wg2\x00'}, @generic="b3ddfa5e5330d37fe81d13a86f834d469f2cce11e41c68aa82c5ae6015ef9a1120584aec40c69ef25a83fdc3d6cddcae2cea12ba72b6a63ef2f5f4a585a46e5cde145a4d52a348756631f449e9803d77ae5ff06953d3073b3cf3d6", @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x5}]}, @generic="c4317ecf4d1187791778bd9a96bfb3070346adbf65dd059f098690cff61197a3e1afb28e9e7e1bbafab24a9ca876ba1dd7edc86258a621bb05c1ded156252cdad346c287b4e927609ab00eaa5d9053fb45c80ec4526c3f7d5aab5f07505c8f98466446aa1b492385f0c479e46036190c6618df9094ce73b7b820d5fb638fc2d6542ad2a05489643ca9ff5d4be5e09a7c0f14414c2a34c20929616bb877e5d20fe271f61a29bfda16013ea0d3daa741ee0c", @nested={0x11b, 0x8e, 0x0, 0x1, [@typed={0xe, 0x4e, 0x0, 0x0, @str='wireguard\x00'}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @generic="ae4cf35824838b13a5a393eb60a68c52e22c73b2525c63d58674b1bffabd72d15dceeed75369360aa125644bff3fca7490164f3585ce319ade6304a6de70ede9c323adf964f6c794abff2c044f365006477256e6c2efa51605ea6183ed94f5324c23426b4e0904e10e0a3d812d259090b2233877e8b7b7ab91f06b18701be1d3dade8fb183b7b167760a93e4eefc45aef2bc3268147d2c849fff5effa4fd69d478ad8caaf85cc68c9a8e91e5288330000bae1d636e", @generic="287016db2d1d900162c06ddf11ab3136b8e5a978fd333094791665e5fe2cc8d4d2b4c4950448c8900602e8a4bf48aff2bbf0236036a45041c4bfd1d15e197a17299d", @typed={0x8, 0x61, 0x0, 0x0, @u32=0xfff}]}, @nested={0xc, 0x33, 0x0, 0x1, [@typed={0x8, 0x79, 0x0, 0x0, @pid}]}, @nested={0x10a9, 0x14, 0x0, 0x1, [@generic="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", @generic="13df6a83e5233d30aad0f7ea3abefb72d744c33f815c9ba09ffa30ad56578de0d5396c0b2f52c24cb2236dbfa01969cf5c08a5d2a44900c5f412e9fcdba3921c16b5067475cb0e99972c3a2c81a5f033edf7cc8183312bbd48f80c2d906e79779ef15cc83ce5b3d3", @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@remote}, @generic="a6962eaaad9bf3944eb4b6702e8828d345fc14269cf518eada27c7069c700bfb124d62de7a09f3145afaf73c965316516783bbc391"]}]}, 0x130c}, {&(0x7f0000003c40)={0x278, 0x3c, 0x200, 0x70bd28, 0x25dfdbfc, "", [@generic="08751b4840a8a4be81f41200f16cec0a087ca9d61a4111926525256546055d07d703f9bbd543f7d1f5bb9376cf45c16c5157df6bfeeb693560a3278efee33d452ba2bc666f372d04118cabe98237352890fb443548ec5e4139653881bc463e870e585066bfbfeac1eb7b33a0e1f4264c7bfa2244eff749b983cc1d6c9dce81", @generic="2a340d0f862029c4571a491b854f935849e4a4904cb0f0c4dbfdd9da1c6aff4bad03b16ef75a4e", @nested={0x123, 0x5e, 0x0, 0x1, [@generic="4c4e45bf64e32484ed2dc7fe3e0f9ec5590d2ea6b08199847dd0bff99a4fcf8a1659423b06b0a500d3eae87349dbb4ba656b8af03a41df1b3b6acaab72e04fb175bd3eddece0f8344678f111a1b56fdde6920183c1faaa9daaec", @typed={0x8, 0x92, 0x0, 0x0, @fd}, @typed={0x8, 0x2e, 0x0, 0x0, @fd}, @generic="44fc74f581fc2599079cd82442e387a2337563f7ad28bd2d71523e90eb530c9bfef6a089d5b17fb5c44cc84bd10a8ca3cf1bd4c8839508456b007de15917a2f0585b0ef4b110d630fb0b4dcfdf2abbae2561c92d6cb704cdf31d4c7b74b09f55acdfce9f50949cd3fdf071a23a81c8880489e671b4efdd22c54fbdf68f1cad83dc05a744dddbef51ce4e0dcfe4860a0b7a130ef09422b0c1a9dceb8f35b132a22da3f5d37e5f5de29ec8712dc45997922df3c6a960"]}, @nested={0x99, 0x78, 0x0, 0x1, [@generic="ce0a7cd85c55f3483cebdfb0aae470c436a2160fbac26f02d8cdd622d787f58f1f0e8dfb7b9432b96df5bf55152275e099cd54f11d87a80a3bc95a33c3987b17f8850ded0a89287cf3e136096fbc67b1d667bb26afc18f67c06ecb7c5f738795aee42b01dd0a3c5fc18b96f8d147822a5463d4aa5ffffc191e", @typed={0x14, 0x94, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x3b, 0x0, 0x0, @pid}]}]}, 0x278}, {&(0x7f0000000200)={0x14, 0x1d, 0x2, 0x70bd27, 0x25dfdbfe, "", [@typed={0x4, 0x33}]}, 0x14}, {&(0x7f0000003ec0)={0xf8, 0x6, 0x200, 0x70bd25, 0x25dfdbfc, "", [@generic="97f83e89ae46c877a8b90cf19cda4bd365e85e1e0a0a385e6d0e2f9085c0843dbb6620bd8e0ba07080849d9797c3ffa45658b3303eb895ec0cf278d49e9175dde74dccd2dba84b30437eb70f55cfd62c213c71f19205", @typed={0x4, 0x1e}, @generic="dd87fe091c8079cd577008320eaed67e86e21e7265a1b59556cfc81052b1cd6d5ff5decc558124c30b8c3fd5398399653b5380a0773136234c1ed0a152952729943ddc3a79d71946da5205ea7ca866653ba7957d36a42388b1e2623fb301676c382192b9d665f706bd59ecf8957df3358812c41bd3a15f6fcb09c9f95048fb578d543056219a275a7a0ee9db"]}, 0xf8}], 0x6, &(0x7f0000004380)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r7}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r8, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r9, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x18, 0x1, 0x1, [r11, r2]}}], 0xd0, 0x48c0}, 0xc000) [ 619.495282][T22084] FAT-fs (loop3): bogus number of reserved sectors [ 619.498342][T22092] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.501813][T22084] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:22 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa4030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.539935][T22096] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.562060][T22098] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.596074][T22102] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.614614][T22106] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.617265][T22104] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22104 comm=syz-executor.2 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x13, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) openat$incfs(r1, &(0x7f0000000080)='.pending_reads\x00', 0x501800, 0xcc) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="6f23af60504685c579a104ccbfc5cb4e148e34b4cf8e030b96894633ade617d503272fcf7e503333f56d41a9d270c0ba11186790a1349bc1f194f5e399284bb73947e066d6297cebb46c1d43f1c518fffdcc5aacc06d052f1e07e9ae9f4eb0c2842808abc5b523e1f9cd3ac101", @ANYBLOB="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"], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) creat(&(0x7f0000000000)='./bus\x00', 0xc) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 619.656716][T22104] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22104 comm=syz-executor.2 [ 619.695302][T22116] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x15, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.729161][T22117] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.755921][T22128] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x9, 0x5, &(0x7f00000005c0)=[{&(0x7f00000001c0)="b56c7614c90717b1cc4103f187a5269a62dc0b8c5b5ea00a540e99dfc4fe7167d1a07228bfe94569d4a20eac0e431cf8a16df259940a67caa37431ed0466a71d88871c9bb353c4486fe33712aad138a7e6ece0caa8067ab2a4bbaff4126881907e4fde7587effa9fd5076bd45c5bedb987f0da2815d0793d1ef109036c631179d43addddfadf8003e55154abb0c87c85357321e9702846d675aaeae0152be4b58f4ac9bb940cb5f4", 0xa8}, {&(0x7f0000000280)="e1ff20fb9cfa2a76ee6ff0b194970fecaccab86d6baba2d7ae39edd58821d1eb9841e032749af998d514a7ead2f169c1ba2747b082c9a82d436845cbfb9c78ae5e1979d4238a58104107bbf3e2a96da9fe890defde5bebede5307546b21a1e6612aa020fba2995fdb4303185e7c5a7324295b27309390aa480a699f6716755581a74c4db4017cfd3ff1dd3a0263b441cd85e03c3fef5686c9d78883be91d3379297c33edf2625698c444ee4961df7b8db142f5d776a1d5868676f89aa2dd0c0d988ce759", 0xc4, 0x8}, {&(0x7f00000003c0)="64793aee0019aa0b18bf0ae1db2025311c4217741223d17e291c2e651291c0f71689d224016c2025740a5103f55bc88caaf8b3ad9b3dd0d2149d2b43175ebacf4bc50acea776d8085bcefdc4d493518d2fea88dbb5ca26a6d839dec924b244a5c9d53418772ed2", 0x67, 0x2}, {&(0x7f0000000440)="a568e30cbed0b159a8756d99885d6f62c6899d4dbab0b8098e675e7064c4f773ee90bc7888228a7b541fb56a863aa58a8685a1a95c098dd584648bf1eb6e08700341315ab39c3652a76141d457179cbfceb6810202817c0cd6975067f6ac1520edd15e06e78b2edb1679db86e22fd32cc049a98c156edc2f96f248b7fa7907640648e0d0070515f08d4e8133d441e0db9510d85ea14e74de39ff0f19422cda53d0a51372bd57e7a2869d64ad", 0xac, 0x200}, {&(0x7f0000000500)="be919aabee19dc70f2ae8174f80ac05b0bcce85800ef1c11ccb59a167881bd61353d198caf479c8d25e2ec6525a4a720f7882e66b330709e7601f2845a919b4d995489040384d2185fcc0a0498517a9eb19eada1f378733b8e272e568f48f937a38540a4713001a63d5186ddcf716f717f91b8298a04599adbb266649f24538775ce5534c18a600d5ee9de785c0dc27a48a1ceb6b6d826ea84431d17ee1323c374565d9958e40a7d84", 0xa9, 0x53a}], 0xc0023, &(0x7f0000000640)={[{@nolazytime}], [{@pcr={'pcr', 0x3d, 0x2}}, {@audit}, {@audit}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_role={'subj_role', 0x3d, '/-.\xbb/'}}, {@euid_lt}]}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r3 = syz_open_dev$ptys(0xc, 0x3, 0x0) preadv(r2, &(0x7f0000001d40)=[{&(0x7f0000000700)=""/48, 0x30}, {&(0x7f0000000740)=""/251, 0xfb}, {&(0x7f0000000840)=""/244, 0xf4}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/242, 0xf2}, {&(0x7f0000001a40)=""/237, 0xed}, {&(0x7f0000001b40)=""/142, 0x8e}, {&(0x7f0000001c00)=""/108, 0x6c}, {&(0x7f0000001c80)=""/186, 0xba}], 0x9, 0x7ec09f2b, 0x1ff) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000000c0)={0x0, r3, 0xffffffffffff8001, 0x5, 0x1, 0x81}) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r5 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) fcntl$setstatus(r5, 0x4, 0x4800) lseek(r4, 0x7ffffc, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001e00)={0x4, 0x80, 0x5, 0x3e, 0x5, 0xa0, 0x0, 0x9, 0x8180, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x101, 0x1, @perf_config_ext={0x4, 0xffff}, 0x12006, 0x9, 0x1, 0x9, 0xb0f3, 0x10000, 0x8, 0x0, 0x8, 0x0, 0x9}, 0x0, 0xf, 0xffffffffffffffff, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000140)={0x100, 0x2, 0x7, 0x1, 0x3, "ca7631e9f0ba0188fca7d2e15612b80f5c45bd"}) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfd14) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000006c0), 0x80080, 0x0) fallocate(r7, 0x100000003, 0x3, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.798142][T22118] FAT-fs (loop3): bogus number of reserved sectors [ 619.805046][T22118] FAT-fs (loop3): Can't find a valid FAT filesystem [ 619.813071][T22131] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.829198][T22136] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x27, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.858365][T22142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.887530][T22146] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x2f, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 619.918148][T22150] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 619.942022][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 619.988852][T22155] FAT-fs (loop3): bogus number of reserved sectors [ 619.999311][T22160] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.015619][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.016130][T22155] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lstat(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x8000fb91, 0x7fffff) 06:11:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 620.041830][T22165] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x30, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 620.117442][T22171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.140800][T22173] FAT-fs (loop3): bogus number of reserved sectors [ 620.147638][T22173] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x60003, 0x40) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 620.159058][T22178] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.185064][T22187] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.197355][T22182] FAT-fs (loop1): bogus number of reserved sectors [ 620.204922][T22182] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) open(&(0x7f0000000000)='./bus\x00', 0x80000, 0xf0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x180) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.229831][T22191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x48, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4c, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.272487][T22197] FAT-fs (loop3): bogus number of reserved sectors [ 620.279701][T22197] FAT-fs (loop3): Can't find a valid FAT filesystem [ 620.305005][T22194] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:23 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x581c40, 0x0) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @private=0xa010101}, 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r5, 0x0) r6 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r7 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_elf64(r2, &(0x7f00000014c0)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESDEC=r4, @ANYBLOB="2df1f2a00967efcebbf9", @ANYRES16, @ANYRES32=r5, @ANYBLOB="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", @ANYRESDEC=r7, @ANYBLOB="089a364500e0c3af4fbe5f7d96fc101c39f4cdee7c4da508da709b5724314be4bb670ec9a7ae785823e53c1407cc7103e8cc86b667374250638c7121cc8160bc676ea3e588a7449a4132dc05efda69e47a3d820b90cc6bf6800c2e4b9959b0b22a657c90833d4754f84dc5d40b77dfa51655"], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x900000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.333370][T22204] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.338735][T22206] FAT-fs (loop1): bogus number of reserved sectors [ 620.358079][T22206] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 620.394810][T22214] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:23 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.435900][T22221] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.448063][T22213] FAT-fs (loop3): bogus number of reserved sectors [ 620.455444][T22213] FAT-fs (loop3): Can't find a valid FAT filesystem [ 620.468025][T22223] FAT-fs (loop1): bogus number of reserved sectors [ 620.470169][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:23 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xa00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x6c, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.477024][T22223] FAT-fs (loop1): Can't find a valid FAT filesystem [ 620.505839][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.516160][T22227] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.523626][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.538133][T22227] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.538354][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x483ff43b6c61669d) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000000)={0x2, 0xc7, 0x8001, 0x9, 0xff, "f684fe01aa572ca9ff1349554cd1db04a0ec6c", 0x9, 0x30}) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 620.589842][T22233] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x74, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xb00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.640428][T22241] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.648571][T22240] FAT-fs (loop3): bogus number of reserved sectors [ 620.658789][T22240] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x50) lseek(r2, 0x7ffffc, 0x0) ftruncate(r1, 0x7fff) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 620.683179][T22242] FAT-fs (loop1): bogus number of reserved sectors [ 620.689986][T22242] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x7a, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 620.728864][T22252] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.746131][T22255] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) r3 = syz_io_uring_complete(0x0) dup(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r5 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000000)={0x0, r5, 0xe5e, 0x8, 0xfffffffffffffff7, 0x1ff}) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.823981][T22265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.833067][T22266] FAT-fs (loop3): bogus number of reserved sectors [ 620.848052][T22266] FAT-fs (loop3): Can't find a valid FAT filesystem [ 620.852413][T22275] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.857001][T22270] FAT-fs (loop1): bogus number of reserved sectors 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xd00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.872653][T22270] FAT-fs (loop1): Can't find a valid FAT filesystem [ 620.887947][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 620.896829][T22278] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:24 executing program 2: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) rename(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='.\x00') lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0xff, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 620.948555][T22283] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 620.983437][T22285] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.025773][T22293] FAT-fs (loop3): bogus number of reserved sectors [ 621.035130][T22293] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.044797][T22298] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.061605][T22301] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 621.085090][T22304] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.110138][T22297] FAT-fs (loop1): bogus number of reserved sectors [ 621.122327][T22297] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.134918][T22310] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.173332][T22315] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.185675][T22312] FAT-fs (loop3): bogus number of reserved sectors [ 621.200521][T22312] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.217062][T22320] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}], {}, [{0x8, 0x5}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4, 0xee01}, {}, {0x8, 0x7, r3}, {}], {0x10, 0x2}}, 0x6c, 0x1) stat(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}], {}, [{0x8, 0x5}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4, 0xee01}, {0x8, 0x0, r4}, {0x8, 0x7, r6}, {}], {0x10, 0x2}}, 0x6c, 0x1) r7 = getegid() stat(&(0x7f0000000500)='./file0/file1\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [{0x2, 0x4, 0xffffffffffffffff}, {0x2, 0x1, 0xee01}], {}, [{0x8, 0x5}, {0x8, 0x0, 0xee01}, {}, {0x8, 0x4, 0xee01}, {0x8, 0x0, r8}, {0x8, 0x7, r10}, {}], {0x10, 0x2}}, 0x6c, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000001c0)={{}, {0x1, 0x1}, [{0x2, 0x3}, {0x2, 0x2}, {0x2, 0x1, 0xee00}], {0x4, 0x5}, [{0x8, 0x5}, {0x8, 0x4, 0xee01}, {0x8, 0x4}, {0x8, 0x5}, {0x8, 0x2}, {0x8, 0x3}, {0x8, 0x1, r3}, {0x8, 0x3, r4}, {0x8, 0x5, r7}, {0x8, 0x4, r8}], {0x10, 0x3}}, 0x8c, 0x5) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 621.238786][T22324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.275818][T22322] FAT-fs (loop1): bogus number of reserved sectors 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.293853][T22332] FAT-fs (loop3): bogus number of reserved sectors [ 621.300455][T22332] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.303539][T22322] FAT-fs (loop1): Can't find a valid FAT filesystem [ 621.319657][T22336] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ftruncate(r1, 0x8) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x7, 0x80, 0x2, 0x3, 0x4, [{0x8, 0xfffffffffffffff7, 0x5, '\x00', 0x1302}, {0x7, 0xd994, 0x9, '\x00', 0x80}, {0x3, 0xfffffffffffffffe, 0x6, '\x00', 0x4}, {0x1, 0x8ec, 0x2, '\x00', 0x200}]}) 06:11:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:24 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.342737][T22337] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.373320][T22342] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:24 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) syncfs(r2) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 621.442612][T22351] FAT-fs (loop3): bogus number of reserved sectors [ 621.452320][T22351] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.465284][T22348] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.485877][T22355] FAT-fs (loop1): bogus number of reserved sectors 06:11:24 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:24 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:24 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.495174][T22355] FAT-fs (loop1): Can't find a valid FAT filesystem [ 621.510969][T22356] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x40a42, 0x10) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x13, r2, 0x2d17000) open(&(0x7f0000000000)='./bus\x00', 0x2300, 0x30) fallocate(r2, 0x100000003, 0x0, 0x28120001) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) fallocate(r3, 0xfa, 0xfffffffffffffcb5, 0x7ff) r4 = socket$inet(0x10, 0x80002, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="24000000210007041dfffd946f610500020000e8fe0208010001080008000d000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_elf64(r4, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x81, 0x7d, 0xa, 0x100000000, 0x2, 0x3e, 0x8001, 0x3d1, 0x40, 0xb8, 0x9c, 0xd727, 0x38, 0x1, 0x1, 0x7, 0x7}, [{0x60000000, 0xffff, 0x3, 0x8, 0x80000001, 0x213, 0x80000000, 0x81e}, {0x2, 0xeea2, 0xfffffffffffffffa, 0x2, 0x1, 0x4000000000000, 0x8, 0x80}], "d30a6cbc992c2f16de85f733b4524507159e663237def3d262ebadfb4b8081d5f81cb2be2cd141939fbe8e2e97a370519136f415826ef05b09ede2d10f51780de75d9740c334efb5191df02264bb6e3274a2480adb25c5d3bd77ee1d69acb2e1e91e1ce43bb780993f64e5e9fe8a66ac88ed23295e6c01dcaa323942", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x82c) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x1f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.555703][T22364] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 621.597888][T22367] FAT-fs (loop3): bogus number of reserved sectors [ 621.598754][T22372] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x8 [ 621.616259][T22367] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.619100][T22376] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.637897][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:25 executing program 2: creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r2, 0x100000023, 0x4e, 0x800001) 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.639862][T22377] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.650252][T22375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x2700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x10000002b, 0x1, 0x800001) [ 621.732371][T22389] FAT-fs (loop3): bogus number of reserved sectors [ 621.739234][T22383] FAT-fs (loop1): bogus number of reserved sectors [ 621.747318][T22383] FAT-fs (loop1): Can't find a valid FAT filesystem [ 621.758950][T22389] FAT-fs (loop3): Can't find a valid FAT filesystem [ 621.768240][T22397] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0xa 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x2f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x900000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.780948][T22394] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.793839][T22398] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 621.833006][T22403] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 621.874565][T22403] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.893494][T22409] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.895143][T22408] FAT-fs (loop3): bogus number of reserved sectors 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x3a02000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x90) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) open(&(0x7f0000000000)='./bus\x00', 0x802, 0x5) [ 621.916659][T22416] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0xc [ 621.918466][T22413] FAT-fs (loop1): bogus number of reserved sectors [ 621.934581][T22413] FAT-fs (loop1): Can't find a valid FAT filesystem [ 621.948134][T22418] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 621.955761][T22408] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 621.963150][T22420] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) sendfile(r3, r1, &(0x7f0000000080)=0xfffffffeffffffff, 0x5) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 622.025762][T22427] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.049137][T22432] FAT-fs (loop1): bogus number of reserved sectors [ 622.056130][T22432] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x2) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @empty, 0x6, 0x7ff, 0xff, 0x0, 0x4, 0x200080}) 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.074882][T22439] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0xe [ 622.088679][T22441] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.107663][T22444] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.133725][T22437] FAT-fs (loop3): bogus number of reserved sectors [ 622.151099][T22437] FAT-fs (loop3): Can't find a valid FAT filesystem [ 622.162395][T22449] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.175029][T22452] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x10 [ 622.188439][T22455] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x7, 0x3, 0x97, 0x7fffffff, 0x7fff, 0x8]}, &(0x7f0000000000)=0x78) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.226840][T22454] FAT-fs (loop1): bogus number of reserved sectors [ 622.249930][T22464] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.250314][T22454] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.272650][T22465] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.306172][T22467] FAT-fs (loop3): bogus number of reserved sectors [ 622.307307][T22474] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(0xfffffffffffffffe, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x71) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec040000", @ANYRES16=r5, @ANYBLOB="0100f0ffffff000000000100000008000100", @ANYRES32, @ANYBLOB="080007000400000008000100", @ANYRES32=r6, @ANYBLOB="c00408800801008024000200a0b7f83bcc9874341d6ee6399ac92e98979ba130727b71285943a3ff110c9b2e2400010000000000000000000000000000000000000000000000000000000000000000000600050009000000b4000980"], 0x4ec}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x9000820}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=@newnexthop={0x68, 0x68, 0x200, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x4}, [@NHA_GROUP={0x34, 0x2, [{0x1, 0x56}, {0x0, 0x4}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x2}, {0x1, 0x7}]}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xc, 0x2, '{(-::,-\x00'}}}, @NHA_OIF={0x8, 0x5, r6}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040051}, 0x20000080) [ 622.315979][T22467] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 622.348932][T22476] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.363212][T22476] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000000), 0x7fff, 0x2a0140) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x0, 0x900, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x4) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 622.399992][T22483] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x12 [ 622.422058][T22488] FAT-fs (loop3): bogus number of reserved sectors [ 622.428800][T22488] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:25 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:25 executing program 2: openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x4100, 0x1aa) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x141042, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r3, 0x1c) fcntl$setstatus(r2, 0x4, 0x6100) write$FUSE_NOTIFY_STORE(r2, 0x0, 0x87ffffc) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17ffff2, 0x4002011, r4, 0x0) ftruncate(r1, 0x200004) r5 = open(&(0x7f0000000080)='./bus\x00', 0x17e, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r6, 0x0) preadv(r6, &(0x7f0000000280), 0x18, 0xd9f, 0x0) sendfile(r5, r5, 0x0, 0x8080fffffffe) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.440210][T22482] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.451975][T22493] FAT-fs (loop1): bogus number of reserved sectors [ 622.460716][T22493] FAT-fs (loop1): Can't find a valid FAT filesystem [ 622.469846][T22489] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:25 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:25 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:25 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.499988][T22500] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.539049][T22504] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x6002000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.562032][T22509] FAT-fs (loop1): bogus number of reserved sectors [ 622.568914][T22509] FAT-fs (loop1): Can't find a valid FAT filesystem [ 622.590428][T22508] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x102 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x104}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.604160][T22512] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 622.648597][T22513] FAT-fs (loop3): invalid media value (0x00) [ 622.660413][T22513] FAT-fs (loop3): Can't find a valid FAT filesystem [ 622.669417][T22517] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 2: creat(&(0x7f0000000180)='./bus\x00', 0x169) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'vlan1\x00', 0x9}) open(&(0x7f0000000080)='.\x00', 0x448102, 0xee) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x0, 0x28120001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r3, 0x0, 0x47de, 0x800001) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x604002, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, &(0x7f00000001c0)=""/235, &(0x7f00000002c0)=0xeb) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.695492][T22523] FAT-fs (loop1): bogus number of reserved sectors [ 622.695883][T22524] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x104 [ 622.702613][T22523] FAT-fs (loop1): Can't find a valid FAT filesystem [ 622.726945][T22526] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.770302][T22531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.790431][T22537] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) fallocate(r3, 0x7, 0x8, 0x4) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 622.811558][T22538] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x1fe [ 622.837795][T22540] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.841023][T22535] FAT-fs (loop3): invalid media value (0x00) [ 622.859600][T22535] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.883041][T22549] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.900227][T22551] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 622.908464][T22546] FAT-fs (loop1): bogus number of reserved sectors 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1e4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) rmdir(&(0x7f0000000000)='./bus\x00') write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.929274][T22554] FAT-fs (loop3): invalid media value (0x00) [ 622.937277][T22554] FAT-fs (loop3): Can't find a valid FAT filesystem [ 622.941973][T22546] FAT-fs (loop1): Can't find a valid FAT filesystem [ 622.954768][T22556] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2c01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4001000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 622.979657][T22565] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.038650][T22574] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.054202][T22577] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.074174][T22575] FAT-fs (loop3): invalid media value (0x00) 06:11:26 executing program 2: r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) creat(&(0x7f0000000000)='.\x00', 0x2) lseek(r1, 0x7ffffc, 0x0) write$binfmt_elf64(r1, &(0x7f0000000080)=ANY=[], 0xfd14) socket$inet(0x2, 0x4, 0x81) fallocate(r1, 0x100000003, 0x0, 0x28120001) fallocate(0xffffffffffffffff, 0x100000003, 0x0, 0x800001) [ 623.084454][T22575] FAT-fs (loop3): Can't find a valid FAT filesystem [ 623.095963][T22576] FAT-fs (loop1): bogus number of reserved sectors [ 623.096428][T22583] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.117923][T22576] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8a01000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.127526][T22584] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x3000 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x30, r1, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, r0, &(0x7f0000000000)={0x100, 0xbe, 0x9}, &(0x7f0000000080)='./bus\x00', 0x18, 0x0, 0x23456}, 0x3f) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) ioctl(r0, 0x2, 0xffffffffffffffff) lseek(r3, 0x7ffffc, 0x0) write$binfmt_elf64(r3, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r3, 0x100000003, 0x0, 0x28120001) 06:11:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 623.160525][T22591] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.198585][T22598] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = accept4$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000080)=0x10, 0x80000) sendmsg$inet(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="f9fe7732c502820d41df66731f4fcbccfd0625bb12a03b5b5ce07792df98b3ab26fb4ac700650f35cd909d41d9168da6d1229aac62a00aa939563fc1965b3067767a6603235fd5c2", 0x48}, {&(0x7f0000000240)="f0febbadb8a1e0d236b7db043cd5ff5579d8e6210531c2a03f9b39a8ea50837a4cdb687a85e188dc15860e031dbfbb60e73293ce597385f03e4c023d28a85f9165e6abe23abe5dbc7fc7cf61aa76b3aa9e36dfaba87d18f5e7c487fb7019016ec833bbf7efc323355c9aed188bf5ebccfd09e01a4c2d0fcefbdd2f21730394e9696364dcb42793f09a41d4ba5db2b219adc6905f2f38ff2338231d406fbe1668eb5a0c157d83fab5cbecb5b953669e5f2ce52cb617d16a74af563b311be8ba341b7010ffa4790849bf9c251bf269aea814410d00f8494702", 0xd8}], 0x2, &(0x7f0000000140)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000280), 0x18, 0xd9f, 0x0) bind(r3, &(0x7f00000003c0)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r4 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r4, 0x7ffffc, 0x0) write$binfmt_elf64(r4, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r4, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) [ 623.217239][T22602] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x3002 [ 623.231828][T22597] FAT-fs (loop3): invalid media value (0x00) [ 623.239363][T22597] FAT-fs (loop3): Can't find a valid FAT filesystem [ 623.254579][T22605] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 623.276246][T22613] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.291278][T22609] FAT-fs (loop1): bogus number of reserved sectors [ 623.309815][T22609] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xa403000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r3 = syz_open_pts(r1, 0x20000) fcntl$setstatus(r3, 0x4, 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3801}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6002000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.324463][T22617] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x3102 [ 623.345381][T22622] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xb401000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, 0xffffffffffffffff, 0x1833000) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 623.381190][T22619] FAT-fs (loop3): invalid media value (0x00) [ 623.390600][T22619] FAT-fs (loop3): Can't find a valid FAT filesystem [ 623.393480][T22631] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.416862][T22632] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:26 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.477813][T22647] FAT-fs (loop3): bogus number of FAT sectors [ 623.486937][T22644] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4002 [ 623.492302][T22647] FAT-fs (loop3): Can't find a valid FAT filesystem [ 623.500040][T22651] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.516674][T22653] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:26 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xc401000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:26 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 623.524378][T22640] FAT-fs (loop1): invalid media value (0x00) [ 623.538811][T22654] FAT-fs (loop2): bogus number of reserved sectors [ 623.554623][T22654] FAT-fs (loop2): Can't find a valid FAT filesystem [ 623.560894][T22640] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xda03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7303000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.572805][T22660] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.585554][T22662] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.616626][T22667] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x8002 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xe502000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.645443][T22669] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.664992][T22671] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.694732][T22666] FAT-fs (loop3): bogus number of FAT sectors [ 623.695365][T22676] FAT-fs (loop1): invalid media value (0x00) [ 623.706228][T22666] FAT-fs (loop3): Can't find a valid FAT filesystem [ 623.727056][T22682] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0xc002 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0xc003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf303000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.741538][T22676] FAT-fs (loop1): Can't find a valid FAT filesystem [ 623.753041][T22679] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.766704][T22685] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.799945][T22691] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.815581][T22686] FAT-fs (loop2): bogus number of reserved sectors [ 623.833109][T22686] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xf803000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7e00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.853122][T22700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.865335][T22702] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.878920][T22703] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 623.903863][T22698] FAT-fs (loop1): invalid media value (0x00) [ 623.910162][T22697] FAT-fs (loop3): bogus number of FAT sectors [ 623.910332][T22698] FAT-fs (loop1): Can't find a valid FAT filesystem [ 623.925561][T22710] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.932331][T22697] FAT-fs (loop3): Can't find a valid FAT filesystem 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 623.939545][T22712] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 623.958344][T22708] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 623.970158][T22713] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.014913][T22720] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.028386][T22721] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.047876][T22719] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:27 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x68, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.060958][T22723] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.088667][T22728] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.100822][T22732] FAT-fs (loop1): invalid media value (0x00) 06:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa403000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb401000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.109493][T22731] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.124022][T22732] FAT-fs (loop1): Can't find a valid FAT filesystem [ 624.130624][T22737] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.143334][T22736] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:27 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) open(&(0x7f0000000000)='./bus\x00', 0x80000, 0xf0) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x180) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe502000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.160846][T22739] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.186206][T22742] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.197895][T22745] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 624.210869][T22746] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.263811][T22754] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.285478][T22758] FAT-fs (loop1): invalid media value (0x00) [ 624.288731][T22757] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.291612][T22758] FAT-fs (loop1): Can't find a valid FAT filesystem 06:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf803000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 624.303267][T22760] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.352931][T22768] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.371754][T22767] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.390031][T22772] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 2: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) r3 = syz_io_uring_complete(0x0) write$vga_arbiter(r3, &(0x7f0000000000)=@target={'target ', {'PCI:', '14', ':', '2', ':', '10', '.', '1d'}}, 0x16) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.431742][T22780] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.444007][T22774] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.456187][T22781] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:27 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.481707][T22785] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.500600][T22786] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.503380][T22779] FAT-fs (loop1): invalid media value (0x00) 06:11:27 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:27 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:27 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.531750][T22791] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.545733][T22779] FAT-fs (loop1): Can't find a valid FAT filesystem [ 624.583392][T22796] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.595240][T22798] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.626798][T22793] incfs: Backing dir is not set, filesystem can't be mounted. [ 624.633160][T22799] incfs: ino conflict with backing FS 1 06:11:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.668105][T22805] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.681812][T22808] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.695806][T22807] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.715305][T22813] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.758219][T22809] FAT-fs (loop1): bogus number of FAT sectors 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.758932][T22818] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.765261][T22809] FAT-fs (loop1): Can't find a valid FAT filesystem [ 624.780407][T22819] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.806186][T22822] incfs: Backing dir is not set, filesystem can't be mounted. 06:11:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 624.821461][T22814] incfs: ino conflict with backing FS 1 [ 624.835139][T22823] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.862083][T22827] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.887261][T22831] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 624.904159][T22833] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.931451][T22839] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 624.943595][T22841] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) [ 624.963894][T22829] incfs: Backing dir is not set, filesystem can't be mounted. [ 624.975742][T22842] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 624.977674][T22835] incfs: ino conflict with backing FS 1 [ 624.997746][T22846] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.030833][T22851] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.034593][T22847] FAT-fs (loop1): bogus number of FAT sectors [ 625.051521][T22847] FAT-fs (loop1): Can't find a valid FAT filesystem [ 625.054593][T22852] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.094677][T22856] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.115977][T22858] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.136670][T22860] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.160009][T22863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.182318][T22865] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.203988][T22869] incfs: ino conflict with backing FS 1 [ 625.211174][T22870] FAT-fs (loop1): bogus number of FAT sectors [ 625.219288][T22870] FAT-fs (loop1): Can't find a valid FAT filesystem [ 625.233009][T22875] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.258391][T22879] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.272442][T22880] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.299212][T22882] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.321175][T22884] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:28 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 625.366679][T22891] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.381477][T22892] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.394584][T22897] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.425660][T22902] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.437001][T22901] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.468312][T22903] incfs: ino conflict with backing FS 1 06:11:28 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 06:11:28 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:28 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.548178][T22912] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.560724][T22914] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.581483][T22913] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.594721][T22917] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.624210][T22920] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.635910][T22921] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.676735][T22928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.688286][T22930] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.700520][T22929] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.938617][T22949] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 625.950469][T22951] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 625.963751][T22946] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 625.984039][T22948] incfs: ino conflict with backing FS 1 [ 626.001393][T22952] incfs: Backing dir is not set, filesystem can't be mounted. [ 626.012709][T22956] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.042509][T22958] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.055551][T22960] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.079766][T22963] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.100290][T22965] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.115374][T22965] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.126971][T22968] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.139413][T22970] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) [ 626.168396][T22972] incfs: ino conflict with backing FS 1 [ 626.187602][T22979] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.200110][T22980] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.212773][T22984] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.264422][T22992] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.276340][T22994] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.288663][T22995] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.306232][T22991] incfs: ino conflict with backing FS 1 06:11:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.312651][T22998] incfs: Backing dir is not set, filesystem can't be mounted. [ 626.347009][T23005] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.367905][T23007] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.368253][T23000] incfs: ino conflict with backing FS 1 [ 626.379840][T23006] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.403253][T23007] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:29 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.419063][T23010] incfs: Backing dir is not set, filesystem can't be mounted. [ 626.430486][T23016] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.443936][T23017] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:29 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 626.464497][T23019] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.493535][T23022] incfs: ino conflict with backing FS 1 06:11:29 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:29 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.517705][T23029] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.531382][T23032] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.544236][T23031] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 626.565652][T23034] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.578430][T23034] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 626.619968][T23041] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.633954][T23043] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.648378][T23046] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 2: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 626.671381][T23039] incfs: ino conflict with backing FS 1 [ 626.677846][T23044] incfs: ino conflict with backing FS 1 [ 626.703959][T23051] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:30 executing program 2: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x120}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.736886][T23053] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.759416][T23062] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.773443][T23065] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:30 executing program 2: mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x122}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.798445][T23066] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.811278][T23060] incfs: ino conflict with backing FS 1 [ 626.822777][T23071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x373}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.852886][T23076] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.867017][T23080] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1d0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.897143][T23083] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.914382][T23084] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.927177][T23089] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.953519][T23096] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 626.977384][T23100] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 626.993858][T23088] incfs: ino conflict with backing FS 1 06:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x18a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 626.994575][T23101] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.015474][T23103] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 627.049879][T23107] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.062184][T23106] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.081000][T23109] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1c4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.131537][T23119] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.147498][T23122] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.159498][T23114] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.194061][T23128] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 2: syz_mount_image$vfat(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x23a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x211}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.235959][T23132] incfs: ino conflict with backing FS 1 [ 627.244766][T23133] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.257089][T23134] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x230}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.322087][T23139] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.334701][T23142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.346695][T23141] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.360945][T23145] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.388563][T23150] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.411241][T23153] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.430954][T23155] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:30 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) 06:11:30 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:30 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:30 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2d4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.460984][T23158] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.476324][T23148] incfs: ino conflict with backing FS 1 [ 627.485849][T23160] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.506628][T23163] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2de}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 627.581983][T23171] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.594532][T23161] incfs: ino conflict with backing FS 1 [ 627.602400][T23173] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.625550][T23170] incfs: ino conflict with backing FS 1 06:11:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(0x0, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.636714][T23176] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.657756][T23178] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x380}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.688261][T23183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.700156][T23184] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.712130][T23185] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.726593][T23188] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.746825][T23192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.777443][T23201] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.787854][T23195] incfs: ino conflict with backing FS 1 06:11:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), 0x0, 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.794629][T23194] incfs: ino conflict with backing FS 1 [ 627.800391][T23199] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3da}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.839032][T23205] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.851318][T23208] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 627.864406][T23209] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 627.883442][T23212] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.903477][T23215] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 627.928416][T23221] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.948407][T23224] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 627.960856][T23225] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x308}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 627.988318][T23213] incfs: ino conflict with backing FS 1 [ 627.999992][T23222] incfs: ino conflict with backing FS 1 [ 628.024926][T23233] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.037638][T23235] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.053571][T23234] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.071524][T23240] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.092037][T23242] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.113005][T23244] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.138401][T23238] incfs: ino conflict with backing FS 1 [ 628.161391][T23250] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.179954][T23254] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x398}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.200924][T23257] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.227895][T23263] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.240331][T23265] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) 06:11:31 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x39e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 628.253757][T23261] FAT-fs (loop2): bogus number of reserved sectors [ 628.255526][T23255] incfs: ino conflict with backing FS 1 [ 628.263433][T23261] FAT-fs (loop2): Can't find a valid FAT filesystem [ 628.281671][T23267] incfs: ino conflict with backing FS 1 06:11:31 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.321167][T23270] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.333021][T23271] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.357093][T23273] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7303}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:31 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.377480][T23277] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.400624][T23279] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.412674][T23281] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:31 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.432070][T23283] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.466332][T23275] FAT-fs (loop2): bogus number of reserved sectors [ 628.470438][T23293] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.475097][T23275] FAT-fs (loop2): Can't find a valid FAT filesystem [ 628.498427][T23289] incfs: ino conflict with backing FS 1 [ 628.514872][T23294] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 628.526942][T23296] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 628.583711][T23295] incfs: ino conflict with backing FS 1 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7e00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.632405][T23305] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.645162][T23309] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.658800][T23307] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x511}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.676603][T23306] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 628.689235][T23315] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.702201][T23304] FAT-fs (loop2): bogus number of reserved sectors [ 628.706929][T23308] incfs: ino conflict with backing FS 1 [ 628.718499][T23304] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(0x0, &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x8800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.731508][T23313] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.762284][T23321] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x11, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xa403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xb401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.775702][T23319] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 628.791357][T23324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.813700][T23327] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) [ 628.834967][T23329] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.858138][T23322] incfs: ino conflict with backing FS 1 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe502}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.888771][T23334] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.898644][T23338] FAT-fs (loop2): bogus number of reserved sectors [ 628.907484][T23338] FAT-fs (loop2): Can't find a valid FAT filesystem [ 628.916170][T23337] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:32 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', 0x10800, 0x104) chdir(&(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "356fe8f6275361ab44c07191ad27f058"}, 0x11, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r1, 0x7ffffc, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xf803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 628.929354][T23333] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 628.941200][T23340] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 628.965023][T23342] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 629.005146][T23344] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.026101][T23351] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2) [ 629.045078][T23350] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.066863][T23349] incfs: ino conflict with backing FS 1 [ 629.074603][T23353] incfs: ino conflict with backing FS 1 [ 629.086160][T23356] FAT-fs (loop2): bogus number of reserved sectors [ 629.094991][T23356] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:32 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x8000, 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) lsetxattr$security_evm(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080), &(0x7f00000000c0)=@sha1={0x1, "977ad13d65e4930215bb8ff8db317b0423bd22e5"}, 0x15, 0x2) fallocate(r2, 0x100000003, 0x0, 0x28120001) fallocate(r0, 0x100000003, 0x0, 0x800001) creat(&(0x7f0000000140)='./bus\x00', 0xe0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.106299][T23360] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.121970][T23361] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.144969][T23365] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 629.166760][T23368] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.188125][T23370] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.225452][T23374] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.236863][T23378] incfs: ino conflict with backing FS 1 [ 629.244415][T23377] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.268706][T23380] FAT-fs (loop2): bogus number of reserved sectors 06:11:32 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0xff, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.275502][T23384] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.276246][T23380] FAT-fs (loop2): Can't find a valid FAT filesystem [ 629.297740][T23384] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.309468][T23385] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 3: r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[], 0xfd14) fallocate(r2, 0x100000003, 0x0, 0x0) fallocate(r0, 0x100000003, 0xff07, 0x800001) [ 629.331110][T23388] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.358819][T23394] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.370319][T23392] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 1: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x7000006, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/170, 0xaa}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000280), 0x18, 0xd9f, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x80, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose}, {@cachetag={'cachetag', 0x3d, 'smaps_rollup\x00'}}, {@loose}, {@access_user}, {@access_any}, {@version_9p2000}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}}) [ 629.388775][T23390] incfs: ino conflict with backing FS 1 [ 629.393899][T23397] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.423326][T23399] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:32 executing program 3: perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f000005d000/0x400000)=nil, 0x400000, 0x7000006, 0x392d6ad36ec2c8b2, 0xffffffffffffffff, 0x0) write$P9_RMKNOD(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x13, 0x1, {0x2, 0x2, 0x1}}, 0x14) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000080)=""/170, 0xaa}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xd9f, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x4000010, r1, 0x0) mmap(&(0x7f000000f000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x44787000) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000280)={0x2, 0x7, 0x2, 0x2, 0x5, [{0x8, 0x101, 0x7, '\x00', 0x4}, {0x0, 0x6, 0x10001, '\x00', 0x2200}, {0xe1, 0x3, 0x84aa, '\x00', 0x230a}, {0x7, 0x4, 0x3, '\x00', 0x80}, {0x1f, 0x7f, 0x0, '\x00', 0x1002}]}) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x7f, 0x0, 0x0, 0xff, 0x0, 0x0, 0xa009, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x1804, 0x18000000000000, 0x9, 0x8, 0x7, 0x700, 0x2, 0x0, 0x5, 0x0, 0xedf}, 0xffffffffffffffff, 0x9, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/92, 0x5c}, {&(0x7f0000000440)=""/153, 0x99}], 0x2, 0xd9f, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000200)={{0x7, 0xffff, 0x6, 0x8}, 'syz1\x00', 0x25}) [ 629.436890][T23404] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:32 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.483594][T23405] FAT-fs (loop2): bogus number of reserved sectors [ 629.500610][T23413] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.515879][T23405] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:32 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 629.536385][T23414] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.560192][T23416] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.626075][T23421] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.654960][T23428] FAT-fs (loop2): bogus number of reserved sectors [ 629.661901][T23422] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:33 executing program 1 (fault-call:4 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 06:11:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.670195][T23428] FAT-fs (loop2): Can't find a valid FAT filesystem [ 629.692563][T23426] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.742956][T23432] incfs: ino conflict with backing FS 1 [ 629.750663][T23432] FAULT_INJECTION: forcing a failure. [ 629.750663][T23432] name failslab, interval 1, probability 0, space 0, times 0 [ 629.769055][T23439] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.778022][T23432] CPU: 1 PID: 23432 Comm: syz-executor.1 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.790641][T23442] FAT-fs (loop2): bogus number of reserved sectors [ 629.790665][T23432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 629.798114][T23442] FAT-fs (loop2): Can't find a valid FAT filesystem [ 629.807182][T23432] Call Trace: [ 629.807201][T23432] dump_stack+0x1d8/0x24e [ 629.807210][T23432] ? devkmsg_release+0x11c/0x11c [ 629.807218][T23432] ? show_regs_print_info+0x12/0x12 [ 629.807229][T23432] should_fail+0x6f6/0x860 [ 629.807238][T23432] ? setup_fault_attr+0x3d0/0x3d0 [ 629.807253][T23432] ? __kernel_write+0x340/0x340 [ 629.815832][T23440] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.817088][T23432] ? check_preemption_disabled+0x9e/0x330 [ 629.817097][T23432] ? getname_flags+0xba/0x640 [ 629.817112][T23432] should_failslab+0x5/0x20 [ 629.825115][T23441] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 629.826358][T23432] kmem_cache_alloc+0x36/0x290 [ 629.826367][T23432] ? __fsnotify_parent+0x310/0x310 [ 629.826381][T23432] getname_flags+0xba/0x640 [ 629.853857][T23446] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 629.857223][T23432] user_path_at_empty+0x28/0x50 [ 629.857240][T23432] path_setxattr+0xad/0x240 [ 629.918947][T23432] ? fput_many+0x42/0x1a0 [ 629.923252][T23432] ? check_preemption_disabled+0x154/0x330 [ 629.929043][T23432] ? simple_xattr_list_add+0xf0/0xf0 [ 629.934342][T23432] ? __ia32_sys_read+0x80/0x80 [ 629.939097][T23432] __x64_sys_lsetxattr+0xb4/0xd0 [ 629.944102][T23432] do_syscall_64+0xcb/0x1e0 [ 629.948604][T23432] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 629.954564][T23432] RIP: 0033:0x4665d9 [ 629.958436][T23432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 629.978040][T23432] RSP: 002b:00007f5b5793f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd 06:11:33 executing program 3 (fault-call:4 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 629.986430][T23432] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 629.994383][T23432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 630.002595][T23432] RBP: 00007f5b5793f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.010894][T23432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.018898][T23432] R13: 00007ffdaa365eaf R14: 00007f5b5793f300 R15: 0000000000022000 06:11:33 executing program 1 (fault-call:4 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.036178][T23449] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.076592][T23458] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.089982][T23453] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.104389][T23456] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 630.112420][T23460] incfs: ino conflict with backing FS 1 06:11:33 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:33 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.126959][T23460] FAULT_INJECTION: forcing a failure. [ 630.126959][T23460] name failslab, interval 1, probability 0, space 0, times 0 [ 630.145988][T23465] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.146190][T23454] incfs: ino conflict with backing FS 1 [ 630.168458][T23466] FAT-fs (loop2): bogus number of reserved sectors 06:11:33 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 630.175840][T23466] FAT-fs (loop2): Can't find a valid FAT filesystem [ 630.187512][T23454] FAULT_INJECTION: forcing a failure. [ 630.187512][T23454] name failslab, interval 1, probability 0, space 0, times 0 [ 630.188021][T23460] CPU: 0 PID: 23460 Comm: syz-executor.1 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 630.210319][T23460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.220494][T23460] Call Trace: [ 630.223865][T23460] dump_stack+0x1d8/0x24e [ 630.228193][T23460] ? devkmsg_release+0x11c/0x11c [ 630.233192][T23460] ? filename_lookup+0x223/0x6a0 [ 630.238211][T23460] ? show_regs_print_info+0x12/0x12 [ 630.243413][T23460] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.249464][T23460] should_fail+0x6f6/0x860 [ 630.253881][T23460] ? setup_fault_attr+0x3d0/0x3d0 [ 630.257108][T23470] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.258895][T23460] ? __d_alloc+0x2a/0x6a0 06:11:33 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.258904][T23460] should_failslab+0x5/0x20 [ 630.258918][T23460] kmem_cache_alloc+0x36/0x290 [ 630.283825][T23460] __d_alloc+0x2a/0x6a0 [ 630.287979][T23460] d_alloc_parallel+0xf3/0x1350 [ 630.292829][T23460] ? lockref_put_return+0x1da/0x290 [ 630.298216][T23460] ? lockref_get_or_lock+0x330/0x330 [ 630.303488][T23460] ? _raw_spin_unlock+0x49/0x60 [ 630.307631][T23474] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.308327][T23460] ? d_hash_and_lookup+0x1e0/0x1e0 [ 630.308339][T23460] ? dput+0x4de/0x5d0 [ 630.328782][T23460] ? lookup_fast+0xc92/0xfd0 [ 630.333351][T23460] __lookup_slow+0x14f/0x450 [ 630.337924][T23460] ? lookup_one_len+0x2c0/0x2c0 [ 630.342758][T23460] walk_component+0x3e1/0x960 [ 630.347432][T23460] ? follow_managed+0x950/0x950 [ 630.352266][T23460] ? path_init+0x11f0/0x11f0 [ 630.356834][T23460] ? path_init+0xaab/0x11f0 [ 630.361312][T23460] path_lookupat+0x219/0xa40 [ 630.365878][T23460] ? __kasan_kmalloc+0x137/0x1e0 [ 630.370785][T23460] ? kmem_cache_alloc+0x115/0x290 [ 630.376039][T23460] ? filename_lookup+0x6a0/0x6a0 [ 630.380977][T23460] filename_lookup+0x223/0x6a0 [ 630.385724][T23460] ? hashlen_string+0x110/0x110 [ 630.390727][T23460] ? getname_flags+0x1fe/0x640 [ 630.395477][T23460] path_setxattr+0xad/0x240 [ 630.399953][T23460] ? fput_many+0x42/0x1a0 [ 630.404256][T23460] ? check_preemption_disabled+0x154/0x330 [ 630.410035][T23460] ? simple_xattr_list_add+0xf0/0xf0 [ 630.415290][T23460] ? __ia32_sys_read+0x80/0x80 [ 630.420028][T23460] __x64_sys_lsetxattr+0xb4/0xd0 [ 630.424941][T23460] do_syscall_64+0xcb/0x1e0 [ 630.429423][T23460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.435389][T23460] RIP: 0033:0x4665d9 [ 630.439370][T23460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 630.458963][T23460] RSP: 002b:00007f5b5793f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 630.462916][T23472] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 630.467354][T23460] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 630.467359][T23460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 630.467364][T23460] RBP: 00007f5b5793f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.467368][T23460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.467379][T23460] R13: 00007ffdaa365eaf R14: 00007f5b5793f300 R15: 0000000000022000 [ 630.518306][T23454] CPU: 1 PID: 23454 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 630.528648][T23454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.538907][T23454] Call Trace: [ 630.542171][T23454] dump_stack+0x1d8/0x24e [ 630.546483][T23454] ? devkmsg_release+0x11c/0x11c [ 630.551391][T23454] ? show_regs_print_info+0x12/0x12 [ 630.556558][T23454] ? proc_fail_nth_read+0x1c0/0x1c0 [ 630.561727][T23454] should_fail+0x6f6/0x860 [ 630.566352][T23454] ? setup_fault_attr+0x3d0/0x3d0 [ 630.571358][T23454] ? check_preemption_disabled+0x9e/0x330 [ 630.577327][T23454] ? debug_smp_processor_id+0x20/0x20 [ 630.582677][T23454] ? getname_flags+0xba/0x640 [ 630.587331][T23454] should_failslab+0x5/0x20 [ 630.591807][T23454] kmem_cache_alloc+0x36/0x290 [ 630.596545][T23454] getname_flags+0xba/0x640 [ 630.601029][T23454] do_sys_open+0x33e/0x7c0 [ 630.605438][T23454] ? check_preemption_disabled+0x154/0x330 [ 630.611218][T23454] ? file_open_root+0x450/0x450 [ 630.616182][T23454] do_syscall_64+0xcb/0x1e0 [ 630.620663][T23454] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.626604][T23454] RIP: 0033:0x4665d9 [ 630.630868][T23454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 630.650440][T23454] RSP: 002b:00007f38798fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 630.658937][T23454] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 630.667099][T23454] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 06:11:34 executing program 3 (fault-call:4 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 1 (fault-call:4 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) [ 630.675168][T23454] RBP: 00007f38798fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 630.683108][T23454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.691063][T23454] R13: 00007ffc4103e45f R14: 00007f38798fd300 R15: 0000000000022000 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1102}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.726636][T23480] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.742001][T23482] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 630.758418][T23483] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 630.770783][T23487] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.803952][T23481] FAT-fs (loop2): bogus number of reserved sectors [ 630.812257][T23485] incfs: ino conflict with backing FS 1 [ 630.817903][T23481] FAT-fs (loop2): Can't find a valid FAT filesystem [ 630.826016][T23485] FAULT_INJECTION: forcing a failure. [ 630.826016][T23485] name failslab, interval 1, probability 0, space 0, times 0 [ 630.834572][T23499] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 630.842151][T23485] CPU: 0 PID: 23485 Comm: syz-executor.1 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 630.859948][T23485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 630.860584][T23495] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.869988][T23485] Call Trace: [ 630.870006][T23485] dump_stack+0x1d8/0x24e [ 630.870015][T23485] ? devkmsg_release+0x11c/0x11c [ 630.870023][T23485] ? filename_lookup+0x223/0x6a0 [ 630.870030][T23485] ? show_regs_print_info+0x12/0x12 [ 630.870045][T23485] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 630.890599][T23498] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 630.894089][T23485] should_fail+0x6f6/0x860 [ 630.894100][T23485] ? setup_fault_attr+0x3d0/0x3d0 [ 630.894109][T23485] ? __d_alloc+0x2a/0x6a0 [ 630.894123][T23485] should_failslab+0x5/0x20 [ 630.906821][T23494] incfs: ino conflict with backing FS 1 [ 630.910267][T23485] kmem_cache_alloc+0x36/0x290 [ 630.924824][T23501] FAULT_INJECTION: forcing a failure. [ 630.924824][T23501] name failslab, interval 1, probability 0, space 0, times 0 [ 630.926018][T23485] __d_alloc+0x2a/0x6a0 [ 630.926033][T23485] d_alloc_parallel+0xf3/0x1350 [ 630.971675][T23485] ? lockref_put_return+0x1da/0x290 [ 630.976850][T23485] ? lockref_get_or_lock+0x330/0x330 [ 630.982203][T23485] ? _raw_spin_unlock+0x49/0x60 [ 630.987026][T23485] ? d_hash_and_lookup+0x1e0/0x1e0 [ 630.992106][T23485] ? dput+0x4de/0x5d0 [ 630.996064][T23485] ? lookup_fast+0xc92/0xfd0 [ 631.000639][T23485] __lookup_slow+0x14f/0x450 [ 631.005215][T23485] ? lookup_one_len+0x2c0/0x2c0 [ 631.010048][T23485] walk_component+0x3e1/0x960 [ 631.014706][T23485] ? follow_managed+0x950/0x950 [ 631.019545][T23485] ? path_init+0x11f0/0x11f0 [ 631.024106][T23485] ? path_init+0xaab/0x11f0 [ 631.028585][T23485] path_lookupat+0x219/0xa40 [ 631.033413][T23485] ? __kasan_kmalloc+0x137/0x1e0 [ 631.038321][T23485] ? kmem_cache_alloc+0x115/0x290 [ 631.043321][T23485] ? filename_lookup+0x6a0/0x6a0 [ 631.048319][T23485] filename_lookup+0x223/0x6a0 [ 631.053056][T23485] ? hashlen_string+0x110/0x110 [ 631.057882][T23485] ? getname_flags+0x1fe/0x640 [ 631.062711][T23485] path_setxattr+0xad/0x240 [ 631.067192][T23485] ? fput_many+0x42/0x1a0 [ 631.071494][T23485] ? check_preemption_disabled+0x154/0x330 [ 631.077272][T23485] ? simple_xattr_list_add+0xf0/0xf0 [ 631.082528][T23485] ? __ia32_sys_read+0x80/0x80 [ 631.087266][T23485] __x64_sys_lsetxattr+0xb4/0xd0 [ 631.092181][T23485] do_syscall_64+0xcb/0x1e0 [ 631.096690][T23485] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 631.102553][T23485] RIP: 0033:0x4665d9 [ 631.106421][T23485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 631.126004][T23485] RSP: 002b:00007f5b5793f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 631.134390][T23485] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 631.142341][T23485] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 631.150327][T23485] RBP: 00007f5b5793f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.158271][T23485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.166424][T23485] R13: 00007ffdaa365eaf R14: 00007f5b5793f300 R15: 0000000000022000 [ 631.174393][T23501] CPU: 1 PID: 23501 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 631.184634][T23501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.194676][T23501] Call Trace: [ 631.197703][T23503] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 631.197952][T23501] dump_stack+0x1d8/0x24e [ 631.197966][T23501] ? devkmsg_release+0x11c/0x11c [ 631.218553][T23501] ? show_regs_print_info+0x12/0x12 [ 631.223864][T23501] should_fail+0x6f6/0x860 [ 631.228252][T23501] ? setup_fault_attr+0x3d0/0x3d0 [ 631.233437][T23501] ? mntput_no_expire+0x114/0xbd0 [ 631.238693][T23501] ? stack_trace_save+0x1f0/0x1f0 [ 631.243689][T23501] ? __alloc_file+0x26/0x380 [ 631.248288][T23501] should_failslab+0x5/0x20 [ 631.252865][T23501] kmem_cache_alloc+0x36/0x290 [ 631.257647][T23501] __alloc_file+0x26/0x380 [ 631.262033][T23501] ? alloc_empty_file+0x49/0x1b0 [ 631.266939][T23501] alloc_empty_file+0xa9/0x1b0 [ 631.271671][T23501] path_openat+0x125/0x3da0 [ 631.276144][T23501] ? arch_stack_walk+0xf8/0x140 [ 631.280981][T23501] ? stack_trace_snprint+0x150/0x150 [ 631.286238][T23501] ? kstrtouint_from_user+0x20f/0x2a0 [ 631.291579][T23501] ? do_filp_open+0x450/0x450 [ 631.297268][T23501] ? __kasan_kmalloc+0x137/0x1e0 [ 631.302173][T23501] ? kmem_cache_alloc+0x115/0x290 [ 631.307183][T23501] ? getname_flags+0xba/0x640 [ 631.311828][T23501] ? do_sys_open+0x33e/0x7c0 [ 631.316388][T23501] ? do_syscall_64+0xcb/0x1e0 [ 631.321033][T23501] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 631.327070][T23501] do_filp_open+0x208/0x450 [ 631.331540][T23501] ? vfs_tmpfile+0x210/0x210 [ 631.336204][T23501] ? _raw_spin_unlock+0x49/0x60 [ 631.341028][T23501] ? __alloc_fd+0x4f1/0x590 [ 631.345558][T23501] do_sys_open+0x383/0x7c0 [ 631.349955][T23501] ? check_preemption_disabled+0x154/0x330 [ 631.355732][T23501] ? file_open_root+0x450/0x450 [ 631.360555][T23501] do_syscall_64+0xcb/0x1e0 [ 631.365037][T23501] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 631.370970][T23501] RIP: 0033:0x4665d9 [ 631.374837][T23501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 631.394414][T23501] RSP: 002b:00007f38798dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 631.402822][T23501] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 631.410770][T23501] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 631.418731][T23501] RBP: 00007f38798dc1d0 R08: 0000000000000000 R09: 0000000000000000 06:11:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{0x0}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1105}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3a02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 1 (fault-call:4 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 3 (fault-call:4 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 631.426863][T23501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.434808][T23501] R13: 00007ffc4103e45f R14: 00007f38798dc300 R15: 0000000000022000 06:11:34 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:34 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 631.470235][T23506] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 631.481937][T23508] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 631.493646][T23509] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 631.526411][T23513] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 631.556616][T23519] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 631.573058][T23511] incfs: ino conflict with backing FS 1 [ 631.581086][T23511] FAULT_INJECTION: forcing a failure. [ 631.581086][T23511] name failslab, interval 1, probability 0, space 0, times 0 [ 631.597261][T23522] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 631.602116][T23511] CPU: 0 PID: 23511 Comm: syz-executor.1 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 06:11:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 631.617188][T23525] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 631.619192][T23511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 631.619197][T23511] Call Trace: [ 631.619213][T23511] dump_stack+0x1d8/0x24e [ 631.619228][T23511] ? devkmsg_release+0x11c/0x11c [ 631.653145][T23511] ? show_regs_print_info+0x12/0x12 [ 631.658352][T23511] should_fail+0x6f6/0x860 [ 631.662757][T23511] ? setup_fault_attr+0x3d0/0x3d0 [ 631.667760][T23511] ? fat_get_entry+0x955/0xa80 [ 631.672502][T23511] ? fat_parse_long+0x8d/0x9c0 [ 631.677243][T23511] should_failslab+0x5/0x20 [ 631.681730][T23511] kmem_cache_alloc+0x36/0x290 [ 631.686472][T23511] fat_parse_long+0x8d/0x9c0 [ 631.691033][T23511] fat_search_long+0x3a6/0x1390 [ 631.695859][T23511] ? asan.module_dtor+0x20/0x20 [ 631.700679][T23511] ? _raw_spin_lock+0xa3/0x1b0 [ 631.705413][T23511] ? __rcu_read_lock+0x50/0x50 [ 631.710150][T23511] ? mutex_lock+0x60/0x110 [ 631.714539][T23511] ? mutex_trylock+0xb0/0xb0 [ 631.719101][T23511] vfat_lookup+0x1a5/0x530 [ 631.723488][T23511] ? avc_denied+0x1c0/0x1c0 [ 631.727961][T23511] ? setup+0xf0/0xf0 [ 631.731828][T23511] __lookup_slow+0x2f8/0x450 [ 631.736390][T23511] ? lookup_one_len+0x2c0/0x2c0 [ 631.741211][T23511] ? dput+0x4de/0x5d0 [ 631.745163][T23511] lookup_one_len+0x17f/0x2c0 [ 631.749830][T23511] ? lookup_one_len_common+0x430/0x430 [ 631.755258][T23511] ? asan.module_dtor+0x20/0x20 [ 631.760080][T23511] incfs_lookup_dentry+0x5b/0xb0 [ 631.764986][T23511] dir_lookup+0x3b8/0x6e0 [ 631.769286][T23511] ? d_hash_and_lookup+0x1e0/0x1e0 [ 631.774368][T23511] ? read_single_page+0xaf0/0xaf0 [ 631.779361][T23511] ? lookup_fast+0xc92/0xfd0 [ 631.783923][T23511] __lookup_slow+0x2f8/0x450 [ 631.788483][T23511] ? lookup_one_len+0x2c0/0x2c0 [ 631.793304][T23511] walk_component+0x3e1/0x960 [ 631.797954][T23511] ? follow_managed+0x950/0x950 [ 631.802772][T23511] ? path_init+0x11f0/0x11f0 [ 631.807331][T23511] ? path_init+0xaab/0x11f0 [ 631.811805][T23511] path_lookupat+0x219/0xa40 [ 631.816365][T23511] ? __kasan_kmalloc+0x137/0x1e0 [ 631.821272][T23511] ? kmem_cache_alloc+0x115/0x290 [ 631.826285][T23511] ? filename_lookup+0x6a0/0x6a0 [ 631.831304][T23511] filename_lookup+0x223/0x6a0 [ 631.836042][T23511] ? hashlen_string+0x110/0x110 [ 631.840867][T23511] ? getname_flags+0x1fe/0x640 [ 631.845605][T23511] path_setxattr+0xad/0x240 [ 631.850079][T23511] ? fput_many+0x42/0x1a0 [ 631.854388][T23511] ? check_preemption_disabled+0x154/0x330 [ 631.860340][T23511] ? simple_xattr_list_add+0xf0/0xf0 [ 631.865596][T23511] ? __ia32_sys_read+0x80/0x80 [ 631.870420][T23511] __x64_sys_lsetxattr+0xb4/0xd0 [ 631.875330][T23511] do_syscall_64+0xcb/0x1e0 [ 631.879807][T23511] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 631.885671][T23511] RIP: 0033:0x4665d9 [ 631.889627][T23511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 631.909199][T23511] RSP: 002b:00007f5b5793f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 631.917667][T23511] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 06:11:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 631.925612][T23511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 631.933555][T23511] RBP: 00007f5b5793f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 631.941599][T23511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.949541][T23511] R13: 00007ffdaa365eaf R14: 00007f5b5793f300 R15: 0000000000022000 [ 631.961624][T23511] incfs_lookup_dentry err:-12 [ 631.968947][T23521] FAT-fs (loop2): bogus number of reserved sectors [ 631.979948][T23527] FAULT_INJECTION: forcing a failure. [ 631.979948][T23527] name failslab, interval 1, probability 0, space 0, times 0 [ 632.006658][T23521] FAT-fs (loop2): Can't find a valid FAT filesystem [ 632.010369][T23531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.025411][T23527] CPU: 0 PID: 23527 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 632.035728][T23527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.045955][T23527] Call Trace: [ 632.049230][T23527] dump_stack+0x1d8/0x24e [ 632.053560][T23527] ? devkmsg_release+0x11c/0x11c [ 632.058483][T23527] ? show_regs_print_info+0x12/0x12 [ 632.063669][T23527] ? stack_trace_save+0x120/0x1f0 [ 632.068667][T23527] should_fail+0x6f6/0x860 [ 632.073055][T23527] ? setup_fault_attr+0x3d0/0x3d0 [ 632.078059][T23527] ? __mod_zone_page_state+0x7f/0xd0 [ 632.083327][T23527] ? stack_trace_save+0x1f0/0x1f0 [ 632.088321][T23527] ? __alloc_file+0x26/0x380 [ 632.092881][T23527] should_failslab+0x5/0x20 [ 632.097468][T23527] kmem_cache_alloc+0x36/0x290 [ 632.102235][T23527] __alloc_file+0x26/0x380 [ 632.106634][T23527] ? alloc_empty_file+0x49/0x1b0 [ 632.111553][T23527] alloc_empty_file+0xa9/0x1b0 [ 632.116379][T23527] path_openat+0x125/0x3da0 [ 632.120945][T23527] ? arch_stack_walk+0xf8/0x140 [ 632.125773][T23527] ? stack_trace_snprint+0x150/0x150 [ 632.131047][T23527] ? do_filp_open+0x450/0x450 [ 632.135704][T23527] ? __kasan_kmalloc+0x137/0x1e0 [ 632.140617][T23527] ? kmem_cache_alloc+0x115/0x290 [ 632.145743][T23527] ? getname_flags+0xba/0x640 [ 632.150397][T23527] ? do_sys_open+0x33e/0x7c0 [ 632.154975][T23527] ? do_syscall_64+0xcb/0x1e0 [ 632.159715][T23527] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 632.165763][T23527] do_filp_open+0x208/0x450 [ 632.170330][T23527] ? vfs_tmpfile+0x210/0x210 [ 632.174921][T23527] ? _raw_spin_unlock+0x49/0x60 [ 632.179763][T23527] ? __alloc_fd+0x4f1/0x590 [ 632.184277][T23527] do_sys_open+0x383/0x7c0 [ 632.188674][T23527] ? check_preemption_disabled+0x154/0x330 [ 632.194508][T23527] ? file_open_root+0x450/0x450 [ 632.199545][T23527] do_syscall_64+0xcb/0x1e0 [ 632.204147][T23527] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 632.210022][T23527] RIP: 0033:0x4665d9 [ 632.213899][T23527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.233482][T23527] RSP: 002b:00007f38798dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 632.241868][T23527] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 632.249828][T23527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 632.257772][T23527] RBP: 00007f38798dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 632.265720][T23527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:11:35 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:35 executing program 1 (fault-call:4 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) 06:11:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 632.273666][T23527] R13: 00007ffc4103e45f R14: 00007f38798dc300 R15: 0000000000022000 [ 632.283299][T23532] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 632.343211][T23534] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:35 executing program 3 (fault-call:4 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:35 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:35 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 632.432473][T23543] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 632.448291][T23544] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.460273][T23541] FAT-fs (loop2): bogus number of reserved sectors [ 632.471494][T23541] FAT-fs (loop2): Can't find a valid FAT filesystem [ 632.479142][T23540] incfs: ino conflict with backing FS 1 [ 632.489420][T23540] FAULT_INJECTION: forcing a failure. [ 632.489420][T23540] name failslab, interval 1, probability 0, space 0, times 0 [ 632.503460][T23540] CPU: 0 PID: 23540 Comm: syz-executor.1 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 632.505618][T23542] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:35 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 632.513785][T23540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.513789][T23540] Call Trace: [ 632.513808][T23540] dump_stack+0x1d8/0x24e [ 632.513819][T23540] ? devkmsg_release+0x11c/0x11c [ 632.513827][T23540] ? __lookup_slow+0x340/0x450 [ 632.513837][T23540] ? show_regs_print_info+0x12/0x12 [ 632.513845][T23540] ? lookup_one_len+0x2c0/0x2c0 [ 632.513856][T23540] should_fail+0x6f6/0x860 [ 632.513866][T23540] ? setup_fault_attr+0x3d0/0x3d0 [ 632.513874][T23540] ? up_write+0xa6/0x270 [ 632.513882][T23540] ? up_read+0x10/0x10 [ 632.513888][T23540] ? dir_lookup+0x48a/0x6e0 [ 632.513903][T23540] should_failslab+0x5/0x20 [ 632.543110][T23550] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 632.547975][T23540] kmem_cache_alloc_trace+0x39/0x2b0 [ 632.547987][T23540] dir_lookup+0x48a/0x6e0 [ 632.548000][T23540] ? read_single_page+0xaf0/0xaf0 [ 632.615917][T23540] ? lookup_fast+0xc92/0xfd0 [ 632.620507][T23540] __lookup_slow+0x2f8/0x450 [ 632.625093][T23540] ? lookup_one_len+0x2c0/0x2c0 [ 632.629961][T23540] walk_component+0x3e1/0x960 [ 632.634617][T23540] ? follow_managed+0x950/0x950 [ 632.639443][T23540] ? path_init+0x11f0/0x11f0 [ 632.644544][T23540] ? path_init+0xaab/0x11f0 [ 632.649063][T23540] path_lookupat+0x219/0xa40 [ 632.653638][T23540] ? __kasan_kmalloc+0x137/0x1e0 [ 632.658588][T23540] ? kmem_cache_alloc+0x115/0x290 [ 632.663599][T23540] ? filename_lookup+0x6a0/0x6a0 [ 632.668513][T23540] filename_lookup+0x223/0x6a0 [ 632.673277][T23540] ? hashlen_string+0x110/0x110 [ 632.678243][T23540] ? getname_flags+0x1fe/0x640 [ 632.682988][T23540] path_setxattr+0xad/0x240 [ 632.687580][T23540] ? fput_many+0x42/0x1a0 [ 632.692127][T23540] ? check_preemption_disabled+0x154/0x330 [ 632.697923][T23540] ? simple_xattr_list_add+0xf0/0xf0 [ 632.703688][T23540] ? __ia32_sys_read+0x80/0x80 [ 632.708430][T23540] __x64_sys_lsetxattr+0xb4/0xd0 [ 632.713347][T23540] do_syscall_64+0xcb/0x1e0 [ 632.717857][T23540] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 632.723770][T23540] RIP: 0033:0x4665d9 [ 632.727737][T23540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 632.747339][T23540] RSP: 002b:00007f5b5793f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 632.755736][T23540] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 632.763684][T23540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 632.771630][T23540] RBP: 00007f5b5793f1d0 R08: 0000000000000000 R09: 0000000000000000 06:11:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 1 (fault-call:4 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) [ 632.779588][T23540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.787535][T23540] R13: 00007ffdaa365eaf R14: 00007f5b5793f300 R15: 0000000000022000 [ 632.814502][T23554] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.815543][T23552] FAULT_INJECTION: forcing a failure. [ 632.815543][T23552] name failslab, interval 1, probability 0, space 0, times 0 [ 632.839457][T23552] CPU: 1 PID: 23552 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 632.849695][T23552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 632.854644][T23558] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.859739][T23552] Call Trace: [ 632.859755][T23552] dump_stack+0x1d8/0x24e [ 632.859770][T23552] ? devkmsg_release+0x11c/0x11c 06:11:36 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 632.883629][T23552] ? show_regs_print_info+0x12/0x12 [ 632.888827][T23552] should_fail+0x6f6/0x860 [ 632.893236][T23552] ? setup_fault_attr+0x3d0/0x3d0 [ 632.896145][T23562] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 632.898252][T23552] ? security_file_alloc+0x32/0x1f0 [ 632.898261][T23552] should_failslab+0x5/0x20 [ 632.898275][T23552] kmem_cache_alloc+0x36/0x290 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2201}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 632.910297][T23563] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.914560][T23552] security_file_alloc+0x32/0x1f0 [ 632.914570][T23552] __alloc_file+0xba/0x380 [ 632.914578][T23552] alloc_empty_file+0xa9/0x1b0 [ 632.914586][T23552] path_openat+0x125/0x3da0 [ 632.914594][T23552] ? arch_stack_walk+0xf8/0x140 [ 632.914612][T23552] ? stack_trace_snprint+0x150/0x150 [ 632.944777][T23565] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.949341][T23552] ? kstrtouint_from_user+0x20f/0x2a0 [ 632.949352][T23552] ? do_filp_open+0x450/0x450 [ 632.949366][T23552] ? __kasan_kmalloc+0x137/0x1e0 [ 632.965817][T23566] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 632.975313][T23552] ? kmem_cache_alloc+0x115/0x290 [ 632.975322][T23552] ? getname_flags+0xba/0x640 [ 632.975329][T23552] ? do_sys_open+0x33e/0x7c0 [ 632.975337][T23552] ? do_syscall_64+0xcb/0x1e0 [ 632.975345][T23552] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 632.975359][T23552] do_filp_open+0x208/0x450 [ 633.031989][T23552] ? vfs_tmpfile+0x210/0x210 [ 633.036588][T23552] ? _raw_spin_unlock+0x49/0x60 [ 633.041415][T23552] ? __alloc_fd+0x4f1/0x590 [ 633.045896][T23552] do_sys_open+0x383/0x7c0 [ 633.050383][T23552] ? check_preemption_disabled+0x154/0x330 [ 633.056181][T23552] ? file_open_root+0x450/0x450 [ 633.061078][T23552] do_syscall_64+0xcb/0x1e0 [ 633.065703][T23552] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 633.071701][T23552] RIP: 0033:0x4665d9 [ 633.075584][T23552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.095429][T23552] RSP: 002b:00007f38798dc188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 633.103820][T23552] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 633.111771][T23552] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 633.120156][T23552] RBP: 00007f38798dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.128372][T23552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.136439][T23552] R13: 00007ffc4103e45f R14: 00007f38798dc300 R15: 0000000000022000 06:11:36 executing program 3 (fault-call:4 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.207114][T23549] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 633.225158][T23573] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:36 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x0) [ 633.255789][T23572] FAT-fs (loop2): bogus number of reserved sectors [ 633.265527][T23574] incfs: ino conflict with backing FS 1 [ 633.271318][T23572] FAT-fs (loop2): Can't find a valid FAT filesystem [ 633.281859][T23582] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.285354][T23580] incfs: ino conflict with backing FS 1 [ 633.300649][T23584] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.304875][T23580] FAULT_INJECTION: forcing a failure. [ 633.304875][T23580] name failslab, interval 1, probability 0, space 0, times 0 [ 633.324744][T23580] CPU: 0 PID: 23580 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 633.330869][T23585] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:36 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:36 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x40010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.335162][T23580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.335166][T23580] Call Trace: [ 633.335185][T23580] dump_stack+0x1d8/0x24e [ 633.335196][T23580] ? devkmsg_release+0x11c/0x11c [ 633.335204][T23580] ? show_regs_print_info+0x12/0x12 [ 633.335214][T23580] ? stack_trace_save+0x1f0/0x1f0 [ 633.335225][T23580] should_fail+0x6f6/0x860 [ 633.335234][T23580] ? setup_fault_attr+0x3d0/0x3d0 [ 633.335243][T23580] ? ebitmap_cmp+0x1b8/0x220 [ 633.335250][T23580] ? mls_compute_context_len+0x7dd/0x810 [ 633.335265][T23580] ? context_struct_to_string+0x43b/0x8b0 [ 633.366554][T23589] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.370742][T23580] should_failslab+0x5/0x20 [ 633.370751][T23580] __kmalloc+0x5f/0x2f0 [ 633.370767][T23580] context_struct_to_string+0x43b/0x8b0 [ 633.432525][T23580] ? security_bounded_transition+0x560/0x560 [ 633.438484][T23580] ? symhash+0xe0/0xe0 [ 633.442537][T23580] ? hashtab_search+0x1bf/0x200 [ 633.447496][T23580] context_add_hash+0x13f/0x270 [ 633.452330][T23580] ? security_sid_to_context_inval+0x40/0x40 [ 633.458286][T23580] ? mls_context_isvalid+0x98/0x380 [ 633.463457][T23580] ? policydb_context_isvalid+0x1b6/0x400 [ 633.469151][T23580] security_compute_sid+0x1142/0x1d00 [ 633.474499][T23580] ? __rcu_read_lock+0x50/0x50 [ 633.479290][T23580] ? security_transition_sid+0x90/0x90 [ 633.484737][T23580] ? avc_denied+0x1c0/0x1c0 [ 633.489223][T23580] ? avc_has_perm_noaudit+0x400/0x400 [ 633.494687][T23580] security_transition_sid+0x78/0x90 [ 633.500056][T23580] may_create+0x62b/0x960 [ 633.504362][T23580] ? show_sid+0x250/0x250 [ 633.508933][T23580] ? from_kgid+0x206/0x350 [ 633.513939][T23580] ? _raw_spin_unlock+0x49/0x60 [ 633.519051][T23580] ? make_kgid+0x390/0x390 [ 633.523535][T23580] ? generic_permission+0x13a/0x490 [ 633.528717][T23580] security_inode_create+0x96/0x120 [ 633.533898][T23580] path_openat+0x1326/0x3da0 [ 633.538470][T23580] ? do_filp_open+0x450/0x450 [ 633.543132][T23580] ? do_sys_open+0x33e/0x7c0 [ 633.547699][T23580] ? do_syscall_64+0xcb/0x1e0 [ 633.552351][T23580] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 633.558512][T23580] do_filp_open+0x208/0x450 [ 633.562996][T23580] ? vfs_tmpfile+0x210/0x210 [ 633.567920][T23580] ? _raw_spin_unlock+0x49/0x60 [ 633.572746][T23580] ? __alloc_fd+0x4f1/0x590 [ 633.581743][T23580] do_sys_open+0x383/0x7c0 [ 633.586137][T23580] ? check_preemption_disabled+0x154/0x330 [ 633.591941][T23580] ? file_open_root+0x450/0x450 [ 633.596854][T23580] do_syscall_64+0xcb/0x1e0 [ 633.601332][T23580] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 633.607218][T23580] RIP: 0033:0x4665d9 [ 633.611123][T23580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 633.630725][T23580] RSP: 002b:00007f38798fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 633.639134][T23580] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 633.647179][T23580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 06:11:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x42000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 3 (fault-call:4 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.655136][T23580] RBP: 00007f38798fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 633.663173][T23580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.671125][T23580] R13: 00007ffc4103e45f R14: 00007f38798fd300 R15: 0000000000022000 [ 633.697157][T23591] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.717185][T23593] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.748022][T23598] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x60020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.764915][T23600] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.776753][T23602] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.810870][T23599] FAT-fs (loop2): bogus number of reserved sectors [ 633.815057][T23606] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.821770][T23599] FAT-fs (loop2): Can't find a valid FAT filesystem [ 633.833389][T23611] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.847826][T23612] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x2, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 633.868768][T23610] incfs: ino conflict with backing FS 1 [ 633.876001][T23613] incfs: ino conflict with backing FS 1 [ 633.886560][T23613] FAULT_INJECTION: forcing a failure. [ 633.886560][T23613] name failslab, interval 1, probability 0, space 0, times 0 [ 633.898949][T23618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.901466][T23613] CPU: 1 PID: 23613 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 633.920082][T23620] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 633.920844][T23613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 633.920848][T23613] Call Trace: [ 633.920864][T23613] dump_stack+0x1d8/0x24e [ 633.920878][T23613] ? devkmsg_release+0x11c/0x11c [ 633.954820][T23613] ? show_regs_print_info+0x12/0x12 [ 633.960140][T23613] ? __rcu_read_lock+0x50/0x50 [ 633.964937][T23613] should_fail+0x6f6/0x860 [ 633.969330][T23613] ? setup_fault_attr+0x3d0/0x3d0 [ 633.974419][T23613] ? context_to_sid+0x63c/0x6b0 [ 633.979243][T23613] ? __d_alloc+0x2a/0x6a0 [ 633.983635][T23613] should_failslab+0x5/0x20 [ 633.988115][T23613] kmem_cache_alloc+0x36/0x290 [ 633.992855][T23613] __d_alloc+0x2a/0x6a0 [ 633.996984][T23613] ? security_sid_to_context_inval+0x40/0x40 [ 634.002936][T23613] d_alloc_parallel+0xf3/0x1350 [ 634.007760][T23613] ? check_preemption_disabled+0x154/0x330 [ 634.013543][T23613] ? debug_smp_processor_id+0x20/0x20 [ 634.018892][T23613] ? avc_denied+0x1c0/0x1c0 [ 634.023477][T23613] ? d_hash_and_lookup+0x1e0/0x1e0 [ 634.028563][T23613] __lookup_slow+0x14f/0x450 [ 634.033138][T23613] ? lookup_one_len+0x2c0/0x2c0 [ 634.038126][T23613] ? dput+0x4de/0x5d0 [ 634.042081][T23613] lookup_one_len+0x17f/0x2c0 [ 634.046819][T23613] ? lookup_one_len_common+0x430/0x430 [ 634.052252][T23613] ? asan.module_dtor+0x20/0x20 [ 634.057080][T23613] ? may_create+0x6f4/0x960 [ 634.061560][T23613] incfs_lookup_dentry+0x5b/0xb0 [ 634.066475][T23613] dir_lookup+0x3b8/0x6e0 [ 634.070778][T23613] ? read_single_page+0xaf0/0xaf0 [ 634.075777][T23613] ? make_kgid+0x390/0x390 [ 634.080175][T23613] ? generic_permission+0x13a/0x490 [ 634.085353][T23613] ? security_inode_create+0xdd/0x120 [ 634.090699][T23613] path_openat+0x1734/0x3da0 [ 634.095267][T23613] ? do_filp_open+0x450/0x450 [ 634.099916][T23613] ? do_sys_open+0x33e/0x7c0 [ 634.104487][T23613] ? do_syscall_64+0xcb/0x1e0 [ 634.109136][T23613] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.115176][T23613] do_filp_open+0x208/0x450 [ 634.119651][T23613] ? vfs_tmpfile+0x210/0x210 [ 634.124216][T23613] ? _raw_spin_unlock+0x49/0x60 [ 634.129039][T23613] ? __alloc_fd+0x4f1/0x590 [ 634.133515][T23613] do_sys_open+0x383/0x7c0 [ 634.137902][T23613] ? check_preemption_disabled+0x154/0x330 [ 634.143678][T23613] ? file_open_root+0x450/0x450 [ 634.148501][T23613] do_syscall_64+0xcb/0x1e0 [ 634.152979][T23613] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.158842][T23613] RIP: 0033:0x4665d9 [ 634.162706][T23613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.182457][T23613] RSP: 002b:00007f38798fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 634.190845][T23613] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 634.198816][T23613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 634.206851][T23613] RBP: 00007f38798fd1d0 R08: 0000000000000000 R09: 0000000000000000 06:11:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:37 executing program 3 (fault-call:4 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 634.214796][T23613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.222742][T23613] R13: 00007ffc4103e45f R14: 00007f38798fd300 R15: 0000000000022000 [ 634.237548][T23613] incfs_lookup_dentry err:-12 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x73030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.272658][T23626] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.284837][T23628] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.297574][T23627] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 634.310494][T23630] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:37 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x3, 0x0) [ 634.344384][T23623] incfs: ino conflict with backing FS 1 [ 634.366041][T23637] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.378549][T23643] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:37 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.380285][T23638] incfs: ino conflict with backing FS 1 [ 634.396532][T23640] FAT-fs (loop2): bogus number of reserved sectors [ 634.396568][T23641] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.405314][T23640] FAT-fs (loop2): Can't find a valid FAT filesystem [ 634.424873][T23638] FAULT_INJECTION: forcing a failure. [ 634.424873][T23638] name failslab, interval 1, probability 0, space 0, times 0 06:11:37 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x7e000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:37 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x88000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.435539][T23646] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.440255][T23638] CPU: 1 PID: 23638 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 634.459741][T23638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.464238][T23649] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.469784][T23638] Call Trace: [ 634.469800][T23638] dump_stack+0x1d8/0x24e [ 634.469816][T23638] ? devkmsg_release+0x11c/0x11c [ 634.493668][T23638] ? show_regs_print_info+0x12/0x12 [ 634.498863][T23638] ? slab_free_freelist_hook+0x7b/0x150 [ 634.498996][T23651] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.504401][T23638] ? context_add_hash+0x1c1/0x270 [ 634.504408][T23638] ? security_compute_sid+0x1142/0x1d00 [ 634.504415][T23638] ? security_transition_sid+0x78/0x90 [ 634.504425][T23638] should_fail+0x6f6/0x860 [ 634.504440][T23638] ? setup_fault_attr+0x3d0/0x3d0 [ 634.541273][T23638] ? fat_get_entry+0x955/0xa80 [ 634.546251][T23638] ? fat_parse_long+0x8d/0x9c0 [ 634.551122][T23638] should_failslab+0x5/0x20 [ 634.555601][T23638] kmem_cache_alloc+0x36/0x290 [ 634.560480][T23638] fat_parse_long+0x8d/0x9c0 [ 634.565136][T23638] fat_search_long+0x3a6/0x1390 [ 634.570223][T23638] ? asan.module_dtor+0x20/0x20 [ 634.575104][T23638] ? _raw_spin_lock+0xa3/0x1b0 [ 634.579846][T23638] ? __rcu_read_lock+0x50/0x50 [ 634.584602][T23638] ? mutex_lock+0x60/0x110 [ 634.589227][T23638] ? mutex_trylock+0xb0/0xb0 [ 634.593797][T23638] vfat_lookup+0x1a5/0x530 [ 634.598299][T23638] ? avc_denied+0x1c0/0x1c0 [ 634.602776][T23638] ? setup+0xf0/0xf0 [ 634.606646][T23638] __lookup_slow+0x2f8/0x450 [ 634.611211][T23638] ? lookup_one_len+0x2c0/0x2c0 [ 634.616152][T23638] ? dput+0x4de/0x5d0 [ 634.620109][T23638] lookup_one_len+0x17f/0x2c0 [ 634.624765][T23638] ? lookup_one_len_common+0x430/0x430 [ 634.630205][T23638] ? asan.module_dtor+0x20/0x20 [ 634.635059][T23638] ? may_create+0x6f4/0x960 [ 634.639539][T23638] incfs_lookup_dentry+0x5b/0xb0 [ 634.644982][T23638] dir_lookup+0x3b8/0x6e0 [ 634.649369][T23638] ? read_single_page+0xaf0/0xaf0 [ 634.654381][T23638] ? make_kgid+0x390/0x390 [ 634.658771][T23638] ? generic_permission+0x13a/0x490 [ 634.664000][T23638] ? security_inode_create+0xdd/0x120 [ 634.669378][T23638] path_openat+0x1734/0x3da0 [ 634.673948][T23638] ? do_filp_open+0x450/0x450 [ 634.678597][T23638] ? do_sys_open+0x33e/0x7c0 [ 634.683195][T23638] ? do_syscall_64+0xcb/0x1e0 [ 634.687847][T23638] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.693889][T23638] do_filp_open+0x208/0x450 [ 634.698368][T23638] ? vfs_tmpfile+0x210/0x210 [ 634.702934][T23638] ? _raw_spin_unlock+0x49/0x60 [ 634.707755][T23638] ? __alloc_fd+0x4f1/0x590 [ 634.712235][T23638] do_sys_open+0x383/0x7c0 [ 634.716645][T23638] ? check_preemption_disabled+0x154/0x330 [ 634.722426][T23638] ? file_open_root+0x450/0x450 [ 634.727272][T23638] do_syscall_64+0xcb/0x1e0 [ 634.731752][T23638] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 634.737708][T23638] RIP: 0033:0x4665d9 [ 634.741577][T23638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 634.761417][T23638] RSP: 002b:00007f38798fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 634.769802][T23638] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 634.777761][T23638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 [ 634.785708][T23638] RBP: 00007f38798fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 634.793662][T23638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.801626][T23638] R13: 00007ffc4103e45f R14: 00007f38798fd300 R15: 0000000000022000 [ 634.810132][T23638] incfs_lookup_dentry err:-12 06:11:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 3 (fault-call:4 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) [ 634.843993][T23656] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 634.875440][T23657] incfs: ino conflict with backing FS 1 06:11:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8a01}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x4, 0x0) 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xa4030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.883865][T23660] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.904844][T23661] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.926289][T23666] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.940244][T23665] FAT-fs (loop2): bogus number of reserved sectors [ 634.947249][T23665] FAT-fs (loop2): Can't find a valid FAT filesystem [ 634.951818][T23672] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 634.966185][T23673] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 634.990664][T23677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 635.003032][T23678] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.016023][T23681] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400", 0xc}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.043830][T23670] incfs: ino conflict with backing FS 1 [ 635.055610][T23670] FAULT_INJECTION: forcing a failure. [ 635.055610][T23670] name failslab, interval 1, probability 0, space 0, times 0 [ 635.064508][T23686] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.084916][T23690] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.102023][T23670] CPU: 1 PID: 23670 Comm: syz-executor.3 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 635.112271][T23670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 635.122322][T23670] Call Trace: [ 635.125073][T23692] FAT-fs (loop2): bogus number of reserved sectors [ 635.125694][T23670] dump_stack+0x1d8/0x24e [ 635.125708][T23670] ? devkmsg_release+0x11c/0x11c [ 635.134777][T23692] FAT-fs (loop2): Can't find a valid FAT filesystem [ 635.136501][T23670] ? __lookup_slow+0x340/0x450 [ 635.136517][T23670] ? show_regs_print_info+0x12/0x12 [ 635.156589][T23685] incfs: ino conflict with backing FS 1 [ 635.157924][T23670] ? lookup_one_len+0x2c0/0x2c0 [ 635.157941][T23670] should_fail+0x6f6/0x860 [ 635.172700][T23670] ? setup_fault_attr+0x3d0/0x3d0 [ 635.177809][T23670] ? up_write+0xa6/0x270 [ 635.182066][T23670] ? up_read+0x10/0x10 [ 635.186135][T23670] ? dir_lookup+0x48a/0x6e0 [ 635.190638][T23670] should_failslab+0x5/0x20 [ 635.195147][T23670] kmem_cache_alloc_trace+0x39/0x2b0 [ 635.200432][T23670] dir_lookup+0x48a/0x6e0 [ 635.204740][T23670] ? read_single_page+0xaf0/0xaf0 [ 635.209740][T23670] ? make_kgid+0x390/0x390 [ 635.214134][T23670] ? generic_permission+0x13a/0x490 [ 635.219312][T23670] ? security_inode_create+0xdd/0x120 [ 635.224664][T23670] path_openat+0x1734/0x3da0 [ 635.229255][T23670] ? do_filp_open+0x450/0x450 [ 635.233924][T23670] ? do_sys_open+0x33e/0x7c0 [ 635.238498][T23670] ? do_syscall_64+0xcb/0x1e0 [ 635.243149][T23670] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.249190][T23670] do_filp_open+0x208/0x450 [ 635.253667][T23670] ? vfs_tmpfile+0x210/0x210 [ 635.258234][T23670] ? _raw_spin_unlock+0x49/0x60 [ 635.263057][T23670] ? __alloc_fd+0x4f1/0x590 [ 635.267536][T23670] do_sys_open+0x383/0x7c0 [ 635.271941][T23670] ? check_preemption_disabled+0x154/0x330 [ 635.277742][T23670] ? file_open_root+0x450/0x450 [ 635.282571][T23670] do_syscall_64+0xcb/0x1e0 [ 635.288005][T23670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 635.293876][T23670] RIP: 0033:0x4665d9 [ 635.297781][T23670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.317793][T23670] RSP: 002b:00007f38798fd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 635.326311][T23670] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 635.334268][T23670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000100 06:11:38 executing program 3 (fault-call:4 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf, 0x0) 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.342215][T23670] RBP: 00007f38798fd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 635.350163][T23670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 635.358306][T23670] R13: 00007ffc4103e45f R14: 00007f38798fd300 R15: 0000000000022000 [ 635.367287][T23688] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xda03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.397073][T23697] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.417555][T23700] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.447066][T23706] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.466689][T23701] FAT-fs (loop2): invalid media value (0x00) [ 635.483639][T23704] incfs: ino conflict with backing FS 1 [ 635.494771][T23701] FAT-fs (loop2): Can't find a valid FAT filesystem [ 635.511352][T23717] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.514049][T23715] incfs: ino conflict with backing FS 1 [ 635.531592][T23721] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:38 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 06:11:38 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x10, 0x0) 06:11:38 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe502}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:38 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.544878][T23719] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 635.568851][T23724] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf303}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.596963][T23726] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.612033][T23728] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.655211][T23735] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 635.672405][T23730] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.685204][T23738] FAT-fs (loop2): invalid media value (0x00) [ 635.691660][T23737] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x2) [ 635.697571][T23738] FAT-fs (loop2): Can't find a valid FAT filesystem [ 635.719081][T23739] incfs: ino conflict with backing FS 1 [ 635.733840][T23742] incfs: ino conflict with backing FS 1 06:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x13, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240", 0x12}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.747452][T23746] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 635.758999][T23747] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.780721][T23750] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.836670][T23753] incfs: ino conflict with backing FS 1 [ 635.847229][T23759] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 635.864568][T23761] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x3) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 635.880603][T23762] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.901595][T23765] incfs: ino conflict with backing FS 1 [ 635.907833][T23760] FAT-fs (loop2): invalid media value (0x00) [ 635.917547][T23760] FAT-fs (loop2): Can't find a valid FAT filesystem [ 635.925990][T23769] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 635.954230][T23774] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 635.967089][T23776] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x300, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4) [ 636.000363][T23775] incfs: ino conflict with backing FS 1 [ 636.010240][T23782] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.027673][T23783] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.054439][T23790] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.073779][T23792] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.110841][T23800] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.122820][T23803] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.135523][T23802] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.149645][T23785] FAT-fs (loop2): invalid media value (0x00) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.156543][T23785] FAT-fs (loop2): Can't find a valid FAT filesystem [ 636.171649][T23801] incfs: ino conflict with backing FS 1 [ 636.180765][T23796] incfs: ino conflict with backing FS 1 [ 636.189573][T23811] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 636.201905][T23813] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.213452][T23812] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf00, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd402}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x5) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xde02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.254697][T23818] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.276662][T23823] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.288945][T23824] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.312904][T23826] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.343275][T23819] FAT-fs (loop2): invalid media value (0x00) [ 636.355071][T23819] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe302}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.369252][T23831] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.382763][T23832] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.397831][T23836] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000", 0x15}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 636.410374][T23841] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:39 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1300, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.446559][T23837] incfs: ino conflict with backing FS 1 [ 636.453645][T23839] incfs: ino conflict with backing FS 1 [ 636.474127][T23846] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x6) 06:11:39 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe502}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:39 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.498100][T23847] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.515687][T23854] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.529552][T23849] FAT-fs (loop2): invalid media value (0x00) [ 636.536430][T23849] FAT-fs (loop2): Can't find a valid FAT filesystem 06:11:39 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x4000, 0x0) [ 636.546811][T23858] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.559285][T23860] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.574392][T23857] incfs: ino conflict with backing FS 1 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.600317][T23863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.613170][T23869] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.638758][T23872] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x7) [ 636.667226][T23870] incfs: ino conflict with backing FS 1 [ 636.678101][T23881] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.679530][T23874] FAT-fs (loop2): bogus number of FAT sectors [ 636.696463][T23882] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.711823][T23874] FAT-fs (loop2): Can't find a valid FAT filesystem [ 636.718809][T23885] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8) [ 636.757101][T23894] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.768757][T23896] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.781382][T23897] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.801063][T23884] incfs: ino conflict with backing FS 1 [ 636.808512][T23893] incfs: ino conflict with backing FS 1 06:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x80040, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff07}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.836333][T23901] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.885602][T23910] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.897659][T23912] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 636.909844][T23911] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 636.922238][T23915] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 636.943273][T23909] FAT-fs (loop2): bogus number of FAT sectors [ 636.950541][T23909] FAT-fs (loop2): Can't find a valid FAT filesystem [ 636.959996][T23916] incfs: ino conflict with backing FS 1 06:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x9) 06:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1000000, 0x0) [ 636.986139][T23923] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.002498][T23924] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.014751][T23928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.140606][T23932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.155226][T23940] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.167224][T23939] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.179598][T23941] FAT-fs (loop2): bogus number of FAT sectors 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.193757][T23937] incfs: ino conflict with backing FS 1 [ 637.197045][T23941] FAT-fs (loop2): Can't find a valid FAT filesystem [ 637.210934][T23934] incfs: ino conflict with backing FS 1 [ 637.211762][T23945] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 637.239194][T23947] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xa) 06:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x2000000, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x104000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.287974][T23953] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.308674][T23955] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.320945][T23957] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.346784][T23962] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.384652][T23970] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x105400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 637.396181][T23971] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.409340][T23972] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.432802][T23972] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x110000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.445200][T23976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.457455][T23977] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.471924][T23980] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.481158][T23969] incfs: ino conflict with backing FS 1 06:11:40 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xb) 06:11:40 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x3000000, 0x0) 06:11:40 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:40 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1b3ae8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.517255][T23985] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.535842][T23989] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.554511][T23991] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.579331][T23993] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.596727][T23995] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.621919][T23997] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.636817][T24001] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.659241][T24007] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.684885][T24003] incfs: ino conflict with backing FS 1 [ 637.692083][T24010] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 637.715390][T24013] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.727123][T24015] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xc) 06:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x4000000, 0x0) 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.797740][T24017] incfs: ino conflict with backing FS 1 [ 637.830656][T24026] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4af000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.845095][T24027] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.856802][T24025] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.878634][T24032] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xd) 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 637.897474][T24023] incfs: Backing dir is not set, filesystem can't be mounted. [ 637.906887][T24030] incfs: ino conflict with backing FS 1 [ 637.920532][T24032] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.934960][T24038] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4fd000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 637.949966][T24039] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 637.969485][T24042] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf000000, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x541000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xe) [ 637.998492][T24047] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.022912][T24044] incfs: ino conflict with backing FS 1 [ 638.032330][T24050] incfs: Backing dir is not set, filesystem can't be mounted. [ 638.032824][T24040] incfs: ino conflict with backing FS 1 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x550000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.067970][T24057] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.080240][T24058] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.099728][T24059] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x373}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.125650][T24063] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.158809][T24068] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.171012][T24069] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.193795][T24071] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.225118][T24078] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.240132][T24076] incfs: Backing dir is not set, filesystem can't be mounted. [ 638.256608][T24067] incfs: ino conflict with backing FS 1 [ 638.277987][T24079] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x10000000, 0x0) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) 06:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xf) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x570000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.356909][T24081] incfs: ino conflict with backing FS 1 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:41 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.400491][T24095] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.413524][T24098] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.425785][T24096] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) 06:11:41 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x908e02}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.444254][T24103] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.458204][T24094] incfs: ino conflict with backing FS 1 [ 638.487922][T24108] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:41 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x10) 06:11:41 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.500463][T24109] incfs: ino conflict with backing FS 1 [ 638.517275][T24114] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.537258][T24118] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x13000000, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x970000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000200), 0x0, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd04f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3a020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.624044][T24127] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.636004][T24129] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.648398][T24128] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.672395][T24133] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.700197][T24135] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.713157][T24140] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x11) 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x40000000, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf04a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.734347][T24143] incfs: ino conflict with backing FS 1 [ 638.748479][T24145] incfs: ino conflict with backing FS 1 [ 638.756285][T24139] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.768920][T24147] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf0ff1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 638.807273][T24152] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 638.842784][T24159] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) [ 638.865304][T24161] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x40000800, 0x0) [ 638.916590][T24165] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.937718][T24166] incfs: ino conflict with backing FS 1 [ 638.968631][T24173] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.980548][T24175] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 638.993016][T24176] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x12) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe03}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x42000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xe5ffffff, 0x0) [ 639.026695][T24172] incfs: ino conflict with backing FS 1 [ 639.060550][T24179] incfs: ino conflict with backing FS 1 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.093320][T24191] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.105553][T24192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.118652][T24193] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.138867][T24197] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.162817][T24194] incfs: ino conflict with backing FS 1 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x2000000, 0x0) 06:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x13) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2110000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.187660][T24203] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.200208][T24205] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.212662][T24208] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.245312][T24214] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.269024][T24217] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.279586][T24206] incfs: ino conflict with backing FS 1 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf6ffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x60020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 2: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8) [ 639.290519][T24210] incfs: ino conflict with backing FS 1 [ 639.305160][T24218] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.327257][T24224] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.339968][T24221] incfs: ino conflict with backing FS 1 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x28e9000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x300) [ 639.352455][T24226] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.385517][T24231] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.410041][T24229] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.430389][T24236] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.443214][T24240] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:42 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:42 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xffffffe5, 0x0) 06:11:42 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x480) [ 639.473044][T24247] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.490368][T24242] incfs: ino conflict with backing FS 1 [ 639.497947][T24248] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.510591][T24249] incfs: ino conflict with backing FS 1 [ 639.516628][T24239] incfs: ino conflict with backing FS 1 06:11:42 executing program 2 (fault-call:1 fault-nth:0): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3f00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.541935][T24252] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.555292][T24254] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.580840][T24260] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.613488][T24262] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.628594][T24259] incfs: ino conflict with backing FS 1 [ 639.636428][T24256] incfs: ino conflict with backing FS 1 [ 639.643830][T24266] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4f5) 06:11:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xfffffff6, 0x0) 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.673531][T24268] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.703151][T24275] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x80030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5110000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 639.715957][T24278] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 639.740896][T24280] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.775653][T24284] FAULT_INJECTION: forcing a failure. [ 639.775653][T24284] name failslab, interval 1, probability 0, space 0, times 0 [ 639.795661][T24289] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 639.804795][T24292] incfs: ino conflict with backing FS 1 [ 639.813037][T24284] CPU: 0 PID: 24284 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 639.818307][T24288] incfs: ino conflict with backing FS 1 [ 639.823265][T24284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 639.823269][T24284] Call Trace: [ 639.823285][T24284] dump_stack+0x1d8/0x24e [ 639.823295][T24284] ? devkmsg_release+0x11c/0x11c [ 639.823304][T24284] ? show_regs_print_info+0x12/0x12 [ 639.823312][T24284] ? check_preemption_disabled+0x9e/0x330 [ 639.823320][T24284] ? debug_smp_processor_id+0x20/0x20 [ 639.823330][T24284] should_fail+0x6f6/0x860 [ 639.823340][T24284] ? setup_fault_attr+0x3d0/0x3d0 [ 639.823354][T24284] ? __sb_end_write+0xb5/0x100 [ 639.823363][T24284] ? vfs_write+0x422/0x4e0 [ 639.823371][T24284] ? ksys_mount+0x30/0xf0 [ 639.823380][T24284] should_failslab+0x5/0x20 [ 639.823389][T24284] __kmalloc_track_caller+0x5d/0x2e0 [ 639.823402][T24284] ? strnlen_user+0x186/0x210 [ 639.905068][T24284] strndup_user+0x73/0x150 [ 639.909545][T24284] ksys_mount+0x30/0xf0 [ 639.913676][T24284] __x64_sys_mount+0xb1/0xc0 [ 639.918251][T24284] do_syscall_64+0xcb/0x1e0 [ 639.922729][T24284] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 639.928877][T24284] RIP: 0033:0x4665d9 [ 639.932792][T24284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 639.952376][T24284] RSP: 002b:00007ff222d8b188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 639.960753][T24284] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 639.968696][T24284] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:43 executing program 2 (fault-call:1 fault-nth:1): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x100000000000000, 0x0) [ 639.976651][T24284] RBP: 00007ff222d8b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 639.984617][T24284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.992653][T24284] R13: 00007ffe6da31d5f R14: 00007ff222d8b300 R15: 0000000000022000 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8a010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x500) [ 640.024047][T24290] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 640.037501][T24298] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.063874][T24302] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 640.083063][T24305] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.112652][T24308] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.124621][T24310] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.143888][T24313] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.158670][T24303] FAULT_INJECTION: forcing a failure. [ 640.158670][T24303] name failslab, interval 1, probability 0, space 0, times 0 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6c00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.178227][T24311] incfs: ino conflict with backing FS 1 [ 640.195351][T24319] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 640.200985][T24303] CPU: 0 PID: 24303 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 640.215180][T24321] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.216618][T24303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.238124][T24303] Call Trace: [ 640.241434][T24303] dump_stack+0x1d8/0x24e [ 640.245771][T24303] ? devkmsg_release+0x11c/0x11c [ 640.250725][T24303] ? show_regs_print_info+0x12/0x12 [ 640.255922][T24303] should_fail+0x6f6/0x860 [ 640.258371][T24324] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.260342][T24303] ? setup_fault_attr+0x3d0/0x3d0 [ 640.260360][T24303] ? ksys_mount+0x62/0xf0 [ 640.281114][T24303] should_failslab+0x5/0x20 [ 640.285614][T24303] __kmalloc_track_caller+0x5d/0x2e0 [ 640.290895][T24303] ? strnlen_user+0x186/0x210 [ 640.292321][T24323] incfs: ino conflict with backing FS 1 [ 640.295569][T24303] strndup_user+0x73/0x150 [ 640.295584][T24303] ksys_mount+0x62/0xf0 [ 640.309662][T24303] __x64_sys_mount+0xb1/0xc0 [ 640.314247][T24303] do_syscall_64+0xcb/0x1e0 [ 640.318732][T24303] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 640.324606][T24303] RIP: 0033:0x4665d9 [ 640.328613][T24303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.348299][T24303] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.357121][T24303] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.365075][T24303] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:43 executing program 2 (fault-call:1 fault-nth:2): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:43 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x200000000000000, 0x0) 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa4030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7303}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x600) [ 640.373024][T24303] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 640.381094][T24303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.389041][T24303] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 640.418008][T24332] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7a00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.429906][T24334] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 640.442380][T24333] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.463001][T24337] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.488589][T24340] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.505089][T24345] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:43 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7e00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:43 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.533233][T24346] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 640.559942][T24356] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.574536][T24350] incfs: ino conflict with backing FS 1 [ 640.583753][T24359] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.609778][T24352] FAULT_INJECTION: forcing a failure. [ 640.609778][T24352] name failslab, interval 1, probability 0, space 0, times 0 [ 640.627237][T24352] CPU: 1 PID: 24352 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 640.637588][T24352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 640.647694][T24352] Call Trace: [ 640.651074][T24352] dump_stack+0x1d8/0x24e [ 640.655383][T24352] ? devkmsg_release+0x11c/0x11c [ 640.660298][T24352] ? show_regs_print_info+0x12/0x12 [ 640.665475][T24352] should_fail+0x6f6/0x860 [ 640.669881][T24352] ? setup_fault_attr+0x3d0/0x3d0 [ 640.674977][T24352] ? __kasan_kmalloc+0x137/0x1e0 [ 640.679954][T24352] ? __kmalloc_track_caller+0x13a/0x2e0 [ 640.685524][T24352] ? strndup_user+0x73/0x150 [ 640.690094][T24352] ? ksys_mount+0x62/0xf0 [ 640.694414][T24352] ? do_syscall_64+0xcb/0x1e0 [ 640.699087][T24352] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 640.705129][T24352] ? getname_flags+0xba/0x640 [ 640.709777][T24352] should_failslab+0x5/0x20 [ 640.714262][T24352] kmem_cache_alloc+0x36/0x290 [ 640.719023][T24352] getname_flags+0xba/0x640 [ 640.723507][T24352] user_path_at_empty+0x28/0x50 [ 640.728796][T24352] do_mount+0x15c/0x2670 [ 640.733020][T24352] ? copy_mount_string+0x30/0x30 [ 640.737937][T24352] ? _copy_from_user+0xa4/0xe0 [ 640.742680][T24352] ? copy_mount_options+0xc9/0x300 [ 640.747764][T24352] ? ksys_mount+0x8f/0xf0 [ 640.752065][T24352] ksys_mount+0xc2/0xf0 [ 640.756205][T24352] __x64_sys_mount+0xb1/0xc0 [ 640.761021][T24352] do_syscall_64+0xcb/0x1e0 [ 640.765634][T24352] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 640.771518][T24352] RIP: 0033:0x4665d9 [ 640.775393][T24352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 640.795090][T24352] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 640.803651][T24352] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 640.811611][T24352] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 640.819702][T24352] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 640.827743][T24352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:11:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x700) 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x8800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xda030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 2 (fault-call:1 fault-nth:3): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x300000000000000, 0x0) [ 640.835750][T24352] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xa403}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.873714][T24371] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.885521][T24370] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.898573][T24369] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 640.916100][T24376] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.930416][T24368] incfs: ino conflict with backing FS 1 [ 640.938411][T24372] incfs: ino conflict with backing FS 1 06:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x400000000000000, 0x0) [ 640.972959][T24386] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 640.976803][T24387] FAULT_INJECTION: forcing a failure. [ 640.976803][T24387] name failslab, interval 1, probability 0, space 0, times 0 [ 641.000479][T24387] CPU: 1 PID: 24387 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 641.009546][T24389] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 641.010731][T24387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.031853][T24387] Call Trace: [ 641.035140][T24387] dump_stack+0x1d8/0x24e [ 641.039479][T24387] ? devkmsg_release+0x11c/0x11c [ 641.044421][T24387] ? show_regs_print_info+0x12/0x12 [ 641.049619][T24387] should_fail+0x6f6/0x860 [ 641.054036][T24387] ? setup_fault_attr+0x3d0/0x3d0 [ 641.058236][T24392] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf3030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.059056][T24387] ? alloc_fs_context+0x60/0x610 [ 641.075319][T24387] should_failslab+0x5/0x20 [ 641.079816][T24387] kmem_cache_alloc_trace+0x39/0x2b0 [ 641.085096][T24387] ? __module_get+0x130/0x130 [ 641.089770][T24387] alloc_fs_context+0x60/0x610 [ 641.094541][T24387] ? _raw_read_unlock+0x21/0x40 [ 641.099388][T24387] do_mount+0x141d/0x2670 [ 641.101776][T24395] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.103724][T24387] ? copy_mount_string+0x30/0x30 [ 641.103739][T24387] ? _copy_from_user+0xa4/0xe0 [ 641.125375][T24387] ? copy_mount_options+0xc9/0x300 [ 641.130475][T24387] ? ksys_mount+0x8f/0xf0 [ 641.134794][T24387] ksys_mount+0xc2/0xf0 [ 641.138941][T24387] __x64_sys_mount+0xb1/0xc0 [ 641.143783][T24387] do_syscall_64+0xcb/0x1e0 [ 641.148261][T24387] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 641.154123][T24387] RIP: 0033:0x4665d9 [ 641.158000][T24387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.177590][T24387] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.185975][T24387] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 641.194024][T24387] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 641.201983][T24387] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.209927][T24387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:11:44 executing program 2 (fault-call:1 fault-nth:4): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x900) 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xb401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.217904][T24387] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe502}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.248249][T24401] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.259862][T24403] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 641.272715][T24402] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xf803}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.296949][T24406] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.317902][T24410] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.358253][T24413] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.382901][T24408] incfs: ino conflict with backing FS 1 [ 641.390707][T24417] FAULT_INJECTION: forcing a failure. [ 641.390707][T24417] name failslab, interval 1, probability 0, space 0, times 0 06:11:44 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf00000000000000, 0x0) 06:11:44 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:44 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.407590][T24421] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 641.411052][T24417] CPU: 0 PID: 24417 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 641.428928][T24417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.438988][T24417] Call Trace: [ 641.442376][T24417] dump_stack+0x1d8/0x24e [ 641.446785][T24417] ? devkmsg_release+0x11c/0x11c [ 641.447466][T24426] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.451717][T24417] ? show_regs_print_info+0x12/0x12 [ 641.451728][T24417] should_fail+0x6f6/0x860 [ 641.451737][T24417] ? setup_fault_attr+0x3d0/0x3d0 [ 641.451746][T24417] ? refcount_inc_not_zero_checked+0x1a1/0x280 [ 641.451759][T24417] ? legacy_init_fs_context+0x4d/0xb0 [ 641.463844][T24427] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.468410][T24417] should_failslab+0x5/0x20 [ 641.468420][T24417] kmem_cache_alloc_trace+0x39/0x2b0 [ 641.468435][T24417] legacy_init_fs_context+0x4d/0xb0 [ 641.512132][T24422] incfs: ino conflict with backing FS 1 [ 641.515986][T24417] alloc_fs_context+0x51e/0x610 [ 641.526349][T24417] do_mount+0x141d/0x2670 [ 641.530757][T24417] ? copy_mount_string+0x30/0x30 [ 641.535723][T24417] ? _copy_from_user+0xa4/0xe0 [ 641.540519][T24417] ? copy_mount_options+0xc9/0x300 [ 641.545620][T24417] ? ksys_mount+0x8f/0xf0 [ 641.550199][T24417] ksys_mount+0xc2/0xf0 [ 641.554347][T24417] __x64_sys_mount+0xb1/0xc0 [ 641.558935][T24417] do_syscall_64+0xcb/0x1e0 [ 641.563525][T24417] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 641.569413][T24417] RIP: 0033:0x4665d9 [ 641.573492][T24417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 641.593329][T24417] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.601721][T24417] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 06:11:45 executing program 2 (fault-call:1 fault-nth:5): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xa00) [ 641.609779][T24417] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 641.617732][T24417] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 641.625720][T24417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.633803][T24417] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.658779][T24434] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 641.672513][T24436] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.684638][T24435] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.706334][T24441] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.728737][T24443] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1000000000000000, 0x0) 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 641.759316][T24450] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.769403][T24439] incfs: ino conflict with backing FS 1 [ 641.784393][T24451] incfs: ino conflict with backing FS 1 [ 641.790924][T24454] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 641.834042][T24463] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.848688][T24464] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 641.868778][T24458] FAULT_INJECTION: forcing a failure. [ 641.868778][T24458] name failslab, interval 1, probability 0, space 0, times 0 [ 641.884253][T24458] CPU: 0 PID: 24458 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 641.894601][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 641.904631][T24458] Call Trace: [ 641.907899][T24458] dump_stack+0x1d8/0x24e [ 641.912195][T24458] ? devkmsg_release+0x11c/0x11c [ 641.917102][T24458] ? show_regs_print_info+0x12/0x12 [ 641.922272][T24458] should_fail+0x6f6/0x860 [ 641.927585][T24458] ? setup_fault_attr+0x3d0/0x3d0 [ 641.932610][T24458] ? vfs_parse_fs_string+0x180/0x290 [ 641.937976][T24458] should_failslab+0x5/0x20 [ 641.942476][T24458] __kmalloc_track_caller+0x5d/0x2e0 [ 641.947744][T24458] kmemdup_nul+0x27/0xa0 [ 641.951969][T24458] vfs_parse_fs_string+0x180/0x290 [ 641.957084][T24458] ? kmem_cache_alloc_trace+0x139/0x2b0 [ 641.962685][T24458] ? logfc+0x6c0/0x6c0 [ 641.966726][T24458] ? __module_put_and_exit+0x20/0x20 [ 641.972129][T24458] ? alloc_fs_context+0x532/0x610 [ 641.977141][T24458] do_mount+0x1678/0x2670 [ 641.981457][T24458] ? copy_mount_string+0x30/0x30 [ 641.986368][T24458] ? _copy_from_user+0xa4/0xe0 [ 641.991112][T24458] ? copy_mount_options+0xc9/0x300 [ 641.996216][T24458] ? ksys_mount+0x8f/0xf0 [ 642.000518][T24458] ksys_mount+0xc2/0xf0 [ 642.004647][T24458] __x64_sys_mount+0xb1/0xc0 [ 642.009210][T24458] do_syscall_64+0xcb/0x1e0 [ 642.013703][T24458] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.019565][T24458] RIP: 0033:0x4665d9 [ 642.023431][T24458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.043004][T24458] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 642.051556][T24458] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 642.059515][T24458] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 642.067459][T24458] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.075402][T24458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 06:11:45 executing program 2 (fault-call:1 fault-nth:6): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xb00) 06:11:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x80ffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x1300000000000000, 0x0) [ 642.083440][T24458] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 642.093119][T24468] incfs: ino conflict with backing FS 1 06:11:45 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.136846][T24474] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 642.148128][T24478] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.163332][T24477] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.185544][T24482] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.207014][T24484] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:45 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xc00) 06:11:45 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.232592][T24475] incfs: ino conflict with backing FS 1 [ 642.239235][T24476] incfs: ino conflict with backing FS 1 [ 642.245332][T24480] FAULT_INJECTION: forcing a failure. [ 642.245332][T24480] name failslab, interval 1, probability 0, space 0, times 0 [ 642.276158][T24492] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.280959][T24480] CPU: 0 PID: 24480 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 642.297865][T24480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.307897][T24480] Call Trace: [ 642.311175][T24480] dump_stack+0x1d8/0x24e [ 642.315503][T24480] ? devkmsg_release+0x11c/0x11c [ 642.320413][T24480] ? show_regs_print_info+0x12/0x12 [ 642.325669][T24480] ? __kasan_kmalloc+0x1a3/0x1e0 [ 642.330578][T24480] ? __kasan_kmalloc+0x137/0x1e0 [ 642.335486][T24480] ? __kmalloc_track_caller+0x13a/0x2e0 [ 642.341016][T24480] ? kmemdup_nul+0x27/0xa0 [ 642.345416][T24480] should_fail+0x6f6/0x860 [ 642.349804][T24480] ? setup_fault_attr+0x3d0/0x3d0 [ 642.354809][T24480] ? __rcu_read_lock+0x50/0x50 [ 642.359577][T24480] ? avc_has_perm_noaudit+0x37d/0x400 [ 642.364918][T24480] ? alloc_super+0x56/0x750 [ 642.369393][T24480] should_failslab+0x5/0x20 [ 642.373868][T24480] kmem_cache_alloc_trace+0x39/0x2b0 [ 642.379130][T24480] ? _raw_spin_lock+0xa3/0x1b0 [ 642.383865][T24480] ? _raw_spin_trylock_bh+0x1a0/0x1a0 [ 642.389208][T24480] alloc_super+0x56/0x750 [ 642.393507][T24480] sget+0x20e/0x4e0 [ 642.397284][T24480] ? free_anon_bdev+0x20/0x20 [ 642.401942][T24480] incfs_mount_fs+0xca/0x840 [ 642.406526][T24480] ? incfs_unlink+0x80/0x80 [ 642.411020][T24480] ? vfs_parse_fs_param+0x2cb/0x430 [ 642.416297][T24480] ? vfs_parse_fs_string+0x1e9/0x290 [ 642.421554][T24480] ? cap_capable+0x23f/0x280 [ 642.426120][T24480] legacy_get_tree+0xde/0x170 [ 642.430777][T24480] ? incfs_unlink+0x80/0x80 [ 642.435277][T24480] vfs_get_tree+0x83/0x260 [ 642.439666][T24480] do_mount+0x19d0/0x2670 [ 642.443973][T24480] ? copy_mount_string+0x30/0x30 [ 642.448893][T24480] ? _copy_from_user+0xa4/0xe0 [ 642.453641][T24480] ? copy_mount_options+0xc9/0x300 [ 642.458734][T24480] ? ksys_mount+0x8f/0xf0 [ 642.463033][T24480] ksys_mount+0xc2/0xf0 [ 642.467160][T24480] __x64_sys_mount+0xb1/0xc0 [ 642.471721][T24480] do_syscall_64+0xcb/0x1e0 [ 642.476196][T24480] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.482058][T24480] RIP: 0033:0x4665d9 [ 642.485944][T24480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.505518][T24480] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 642.513897][T24480] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 642.521838][T24480] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 642.529778][T24480] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.537863][T24480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.545827][T24480] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 642.563459][T24497] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:46 executing program 2 (fault-call:1 fault-nth:7): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x4000000000000000, 0x0) 06:11:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x5000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.578189][T24499] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.602542][T24503] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.624777][T24505] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.655042][T24511] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 642.668790][T24501] incfs: ino conflict with backing FS 1 [ 642.674033][T24496] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 642.679065][T24513] FAULT_INJECTION: forcing a failure. [ 642.679065][T24513] name failslab, interval 1, probability 0, space 0, times 0 [ 642.696011][T24513] CPU: 1 PID: 24513 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 642.706269][T24513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 642.716315][T24513] Call Trace: [ 642.716816][T24516] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.719596][T24513] dump_stack+0x1d8/0x24e [ 642.719606][T24513] ? devkmsg_release+0x11c/0x11c [ 642.719620][T24513] ? show_regs_print_info+0x12/0x12 06:11:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x4000080000000000, 0x0) 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 642.732705][T24517] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.735368][T24513] should_fail+0x6f6/0x860 [ 642.735378][T24513] ? setup_fault_attr+0x3d0/0x3d0 [ 642.735393][T24513] ? selinux_sb_alloc_security+0x4f/0x200 [ 642.767553][T24519] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 642.772256][T24513] should_failslab+0x5/0x20 [ 642.772266][T24513] kmem_cache_alloc_trace+0x39/0x2b0 [ 642.772274][T24513] ? down_write+0xd8/0x150 [ 642.772289][T24513] selinux_sb_alloc_security+0x4f/0x200 [ 642.803539][T24513] security_sb_alloc+0x50/0xb0 [ 642.808278][T24513] alloc_super+0x133/0x750 [ 642.812676][T24513] sget+0x20e/0x4e0 [ 642.816462][T24513] ? free_anon_bdev+0x20/0x20 [ 642.821110][T24513] incfs_mount_fs+0xca/0x840 [ 642.825727][T24513] ? incfs_unlink+0x80/0x80 [ 642.830329][T24513] ? vfs_parse_fs_param+0x2cb/0x430 [ 642.835494][T24513] ? vfs_parse_fs_string+0x1e9/0x290 [ 642.840774][T24513] ? cap_capable+0x23f/0x280 [ 642.845338][T24513] legacy_get_tree+0xde/0x170 [ 642.850084][T24513] ? incfs_unlink+0x80/0x80 [ 642.854584][T24513] vfs_get_tree+0x83/0x260 [ 642.858969][T24513] do_mount+0x19d0/0x2670 [ 642.863268][T24513] ? copy_mount_string+0x30/0x30 [ 642.868220][T24513] ? _copy_from_user+0xa4/0xe0 [ 642.872952][T24513] ? copy_mount_options+0xc9/0x300 [ 642.878033][T24513] ? ksys_mount+0x8f/0xf0 [ 642.882378][T24513] ksys_mount+0xc2/0xf0 [ 642.886651][T24513] __x64_sys_mount+0xb1/0xc0 [ 642.891218][T24513] do_syscall_64+0xcb/0x1e0 [ 642.895709][T24513] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 642.901572][T24513] RIP: 0033:0x4665d9 [ 642.905437][T24513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 642.925532][T24513] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 642.933916][T24513] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 642.942008][T24513] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 642.950301][T24513] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 642.958352][T24513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.966328][T24513] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 642.997619][T24521] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xd00) 06:11:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 2 (fault-call:1 fault-nth:8): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.091195][T24496] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 643.119377][T24530] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x9000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x13000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.131428][T24533] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.143091][T24531] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 643.166638][T24535] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xa000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.188730][T24541] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.205096][T24525] incfs: ino conflict with backing FS 1 [ 643.213952][T24532] FAULT_INJECTION: forcing a failure. [ 643.213952][T24532] name failslab, interval 1, probability 0, space 0, times 0 [ 643.227280][T24537] incfs: ino conflict with backing FS 1 [ 643.227410][T24545] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 643.237736][T24532] CPU: 0 PID: 24532 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 643.250614][T24546] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.254300][T24532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.254304][T24532] Call Trace: [ 643.254320][T24532] dump_stack+0x1d8/0x24e [ 643.254332][T24532] ? devkmsg_release+0x11c/0x11c [ 643.254342][T24532] ? show_regs_print_info+0x12/0x12 [ 643.254350][T24532] ? pcpu_alloc_area+0x753/0x8b0 [ 643.254364][T24532] should_fail+0x6f6/0x860 [ 643.302902][T24532] ? setup_fault_attr+0x3d0/0x3d0 [ 643.308004][T24532] ? cpumask_next+0xc/0x20 [ 643.312502][T24532] ? pcpu_alloc+0xc8a/0x1180 [ 643.317207][T24532] ? prealloc_shrinker+0x50/0x210 [ 643.322230][T24532] should_failslab+0x5/0x20 [ 643.326727][T24532] kmem_cache_alloc_trace+0x39/0x2b0 [ 643.332310][T24532] prealloc_shrinker+0x50/0x210 [ 643.337141][T24532] alloc_super+0x5e5/0x750 [ 643.341545][T24532] sget+0x20e/0x4e0 [ 643.345508][T24532] ? free_anon_bdev+0x20/0x20 [ 643.350159][T24532] incfs_mount_fs+0xca/0x840 [ 643.354723][T24532] ? incfs_unlink+0x80/0x80 [ 643.359212][T24532] ? vfs_parse_fs_param+0x2cb/0x430 [ 643.364397][T24532] ? vfs_parse_fs_string+0x1e9/0x290 [ 643.369757][T24532] ? cap_capable+0x23f/0x280 [ 643.374387][T24532] legacy_get_tree+0xde/0x170 [ 643.379134][T24532] ? incfs_unlink+0x80/0x80 [ 643.383611][T24532] vfs_get_tree+0x83/0x260 [ 643.387996][T24532] do_mount+0x19d0/0x2670 [ 643.392346][T24532] ? copy_mount_string+0x30/0x30 [ 643.397254][T24532] ? _copy_from_user+0xa4/0xe0 [ 643.402011][T24532] ? copy_mount_options+0xc9/0x300 [ 643.407148][T24532] ? ksys_mount+0x8f/0xf0 [ 643.411445][T24532] ksys_mount+0xc2/0xf0 [ 643.415585][T24532] __x64_sys_mount+0xb1/0xc0 [ 643.420157][T24532] do_syscall_64+0xcb/0x1e0 [ 643.425077][T24532] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 643.430940][T24532] RIP: 0033:0x4665d9 [ 643.434802][T24532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 643.455530][T24532] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.463914][T24532] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 643.471856][T24532] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 643.479933][T24532] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 06:11:46 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xe5ffffff00000000, 0x0) 06:11:46 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xe00) 06:11:46 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xb000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:46 executing program 2 (fault-call:1 fault-nth:9): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 643.487874][T24532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.495908][T24532] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 643.530095][T24554] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:46 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x80ffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.545953][T24555] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.560051][T24558] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ffff000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.598095][T24569] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.610490][T24571] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 643.623040][T24570] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xd000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.645236][T24577] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.649867][T24563] FAULT_INJECTION: forcing a failure. [ 643.649867][T24563] name failslab, interval 1, probability 0, space 0, times 0 [ 643.658368][T24568] incfs: ino conflict with backing FS 1 [ 643.676613][T24562] incfs: ino conflict with backing FS 1 [ 643.704575][T24563] CPU: 1 PID: 24563 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 643.704664][T24579] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 643.714821][T24563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 643.714825][T24563] Call Trace: [ 643.714842][T24563] dump_stack+0x1d8/0x24e [ 643.714851][T24563] ? devkmsg_release+0x11c/0x11c [ 643.714860][T24563] ? show_regs_print_info+0x12/0x12 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.714870][T24563] ? idr_get_free+0x740/0x900 [ 643.714881][T24563] should_fail+0x6f6/0x860 [ 643.714890][T24563] ? setup_fault_attr+0x3d0/0x3d0 [ 643.714901][T24563] ? __down_read+0xf1/0x210 [ 643.714909][T24563] ? __list_lru_init+0xa7/0x550 [ 643.714929][T24563] should_failslab+0x5/0x20 [ 643.714937][T24563] kmem_cache_alloc_trace+0x39/0x2b0 [ 643.714950][T24563] __list_lru_init+0xa7/0x550 [ 643.788375][T24585] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x300000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.792046][T24563] ? prealloc_shrinker+0x1c0/0x210 [ 643.792055][T24563] alloc_super+0x611/0x750 [ 643.792062][T24563] sget+0x20e/0x4e0 [ 643.792069][T24563] ? free_anon_bdev+0x20/0x20 [ 643.792085][T24563] incfs_mount_fs+0xca/0x840 [ 643.804313][T24581] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.808581][T24563] ? incfs_unlink+0x80/0x80 [ 643.808590][T24563] ? vfs_parse_fs_param+0x2cb/0x430 [ 643.808597][T24563] ? vfs_parse_fs_string+0x1e9/0x290 06:11:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xf6ffffff00000000, 0x0) [ 643.808610][T24563] ? cap_capable+0x23f/0x280 [ 643.846087][T24587] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 643.847345][T24563] legacy_get_tree+0xde/0x170 [ 643.847353][T24563] ? incfs_unlink+0x80/0x80 [ 643.847366][T24563] vfs_get_tree+0x83/0x260 [ 643.882266][T24563] do_mount+0x19d0/0x2670 [ 643.886589][T24563] ? copy_mount_string+0x30/0x30 [ 643.891639][T24563] ? _copy_from_user+0xa4/0xe0 [ 643.896373][T24563] ? copy_mount_options+0xc9/0x300 [ 643.901449][T24563] ? ksys_mount+0x8f/0xf0 [ 643.905748][T24563] ksys_mount+0xc2/0xf0 [ 643.909873][T24563] __x64_sys_mount+0xb1/0xc0 [ 643.914519][T24563] do_syscall_64+0xcb/0x1e0 [ 643.919112][T24563] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 643.924990][T24563] RIP: 0033:0x4665d9 [ 643.928856][T24563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:11:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xf00) 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 2 (fault-call:1 fault-nth:10): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 643.948430][T24563] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 643.956811][T24563] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 643.964860][T24563] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 643.972803][T24563] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 643.980840][T24563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 643.989049][T24563] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.026575][T24594] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.042626][T24597] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 644.053982][T24596] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.069922][T24604] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.103736][T24595] incfs: ino conflict with backing FS 1 [ 644.115661][T24600] FAULT_INJECTION: forcing a failure. [ 644.115661][T24600] name failslab, interval 1, probability 0, space 0, times 0 [ 644.129957][T24610] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.148166][T24600] CPU: 0 PID: 24600 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 644.155946][T24614] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.158412][T24600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.158417][T24600] Call Trace: [ 644.158433][T24600] dump_stack+0x1d8/0x24e [ 644.158449][T24600] ? devkmsg_release+0x11c/0x11c [ 644.177548][T24613] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x11000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0xffffffff00000000, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x600000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.179844][T24600] ? show_regs_print_info+0x12/0x12 [ 644.179861][T24600] should_fail+0x6f6/0x860 [ 644.198563][T24618] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.203351][T24600] ? setup_fault_attr+0x3d0/0x3d0 [ 644.203363][T24600] ? kvmalloc_node+0x7e/0xf0 [ 644.203372][T24600] should_failslab+0x5/0x20 [ 644.203385][T24600] __kmalloc+0x5f/0x2f0 [ 644.242744][T24600] ? __list_lru_init+0xa7/0x550 [ 644.247592][T24600] kvmalloc_node+0x7e/0xf0 [ 644.252009][T24600] __list_lru_init+0x1c6/0x550 [ 644.256782][T24600] ? prealloc_shrinker+0x1c0/0x210 [ 644.261886][T24600] alloc_super+0x611/0x750 [ 644.266293][T24600] sget+0x20e/0x4e0 [ 644.267436][T24623] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.270101][T24600] ? free_anon_bdev+0x20/0x20 [ 644.270116][T24600] incfs_mount_fs+0xca/0x840 [ 644.290834][T24600] ? incfs_unlink+0x80/0x80 [ 644.291075][T24615] incfs: ino conflict with backing FS 1 [ 644.295330][T24600] ? vfs_parse_fs_param+0x2cb/0x430 [ 644.306149][T24600] ? vfs_parse_fs_string+0x1e9/0x290 [ 644.311423][T24600] ? cap_capable+0x23f/0x280 [ 644.316005][T24600] legacy_get_tree+0xde/0x170 [ 644.320673][T24600] ? incfs_unlink+0x80/0x80 [ 644.325435][T24600] vfs_get_tree+0x83/0x260 [ 644.329848][T24600] do_mount+0x19d0/0x2670 [ 644.334262][T24600] ? copy_mount_string+0x30/0x30 [ 644.339187][T24600] ? _copy_from_user+0xa4/0xe0 [ 644.344269][T24600] ? copy_mount_options+0xc9/0x300 [ 644.349473][T24600] ? ksys_mount+0x8f/0xf0 [ 644.353853][T24600] ksys_mount+0xc2/0xf0 [ 644.357995][T24600] __x64_sys_mount+0xb1/0xc0 [ 644.367254][T24600] do_syscall_64+0xcb/0x1e0 [ 644.371820][T24600] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 644.377733][T24600] RIP: 0033:0x4665d9 [ 644.381597][T24600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:11:47 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1100) 06:11:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x21000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.401303][T24600] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.409687][T24600] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 644.417637][T24600] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 644.425580][T24600] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.433567][T24600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.441546][T24600] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:47 executing program 2 (fault-call:1 fault-nth:11): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x12000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x22010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x15000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.459509][T24628] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 644.479343][T24631] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.495170][T24632] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x1f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:47 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.516302][T24635] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.538671][T24638] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.561563][T24640] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.672675][T24650] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.684733][T24652] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 644.685224][T24648] FAULT_INJECTION: forcing a failure. [ 644.685224][T24648] name failslab, interval 1, probability 0, space 0, times 0 [ 644.713128][T24648] CPU: 1 PID: 24648 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 644.723382][T24648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 644.733607][T24648] Call Trace: [ 644.736899][T24648] dump_stack+0x1d8/0x24e [ 644.738976][T24653] incfs: ino conflict with backing FS 1 [ 644.741225][T24648] ? devkmsg_release+0x11c/0x11c [ 644.741234][T24648] ? show_regs_print_info+0x12/0x12 [ 644.741245][T24648] should_fail+0x6f6/0x860 [ 644.741258][T24648] ? setup_fault_attr+0x3d0/0x3d0 [ 644.766378][T24648] ? __down_read+0xf1/0x210 [ 644.770875][T24648] ? __list_lru_init+0xa7/0x550 [ 644.775138][T24649] incfs: ino conflict with backing FS 1 [ 644.775716][T24648] should_failslab+0x5/0x20 [ 644.785729][T24648] kmem_cache_alloc_trace+0x39/0x2b0 [ 644.791008][T24648] __list_lru_init+0xa7/0x550 [ 644.795763][T24648] ? prealloc_shrinker+0x1c0/0x210 [ 644.800866][T24648] alloc_super+0x640/0x750 [ 644.805272][T24648] sget+0x20e/0x4e0 [ 644.809251][T24648] ? free_anon_bdev+0x20/0x20 [ 644.814028][T24648] incfs_mount_fs+0xca/0x840 [ 644.818617][T24648] ? incfs_unlink+0x80/0x80 [ 644.823090][T24648] ? vfs_parse_fs_param+0x2cb/0x430 [ 644.828384][T24648] ? vfs_parse_fs_string+0x1e9/0x290 [ 644.833781][T24648] ? cap_capable+0x23f/0x280 [ 644.838340][T24648] legacy_get_tree+0xde/0x170 [ 644.842988][T24648] ? incfs_unlink+0x80/0x80 [ 644.847465][T24648] vfs_get_tree+0x83/0x260 [ 644.851878][T24648] do_mount+0x19d0/0x2670 [ 644.856204][T24648] ? copy_mount_string+0x30/0x30 [ 644.861113][T24648] ? _copy_from_user+0xa4/0xe0 [ 644.865849][T24648] ? copy_mount_options+0xc9/0x300 [ 644.871029][T24648] ? ksys_mount+0x8f/0xf0 [ 644.875333][T24648] ksys_mount+0xc2/0xf0 [ 644.879474][T24648] __x64_sys_mount+0xb1/0xc0 [ 644.884188][T24648] do_syscall_64+0xcb/0x1e0 [ 644.888673][T24648] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 644.894543][T24648] RIP: 0033:0x4665d9 [ 644.898426][T24648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 06:11:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x900000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x27000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.918205][T24648] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.926603][T24648] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 644.934550][T24648] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 644.942493][T24648] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 644.950456][T24648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 644.958418][T24648] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:48 executing program 2 (fault-call:1 fault-nth:12): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1200) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x3f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2f000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 644.976954][T24663] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 644.988939][T24665] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.001030][T24664] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x40010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.022269][T24669] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.044171][T24672] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.067041][T24677] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.078984][T24679] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.111219][T24684] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:48 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x3) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x42000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x30020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.123014][T24674] incfs: ino conflict with backing FS 1 [ 645.136556][T24686] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:48 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1300) [ 645.170998][T24695] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.183154][T24696] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.199774][T24688] FAULT_INJECTION: forcing a failure. [ 645.199774][T24688] name failslab, interval 1, probability 0, space 0, times 0 [ 645.214081][T24688] CPU: 1 PID: 24688 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 645.224317][T24688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.234363][T24688] Call Trace: [ 645.237641][T24688] dump_stack+0x1d8/0x24e [ 645.241939][T24688] ? devkmsg_release+0x11c/0x11c [ 645.246849][T24688] ? show_regs_print_info+0x12/0x12 [ 645.252041][T24688] should_fail+0x6f6/0x860 [ 645.256524][T24688] ? setup_fault_attr+0x3d0/0x3d0 [ 645.261550][T24688] ? kvmalloc_node+0x7e/0xf0 [ 645.266143][T24688] should_failslab+0x5/0x20 [ 645.270639][T24688] __kmalloc+0x5f/0x2f0 [ 645.274796][T24688] ? __list_lru_init+0xa7/0x550 [ 645.279629][T24688] kvmalloc_node+0x7e/0xf0 [ 645.284042][T24688] __list_lru_init+0x1c6/0x550 [ 645.288800][T24688] ? prealloc_shrinker+0x1c0/0x210 [ 645.293895][T24688] alloc_super+0x640/0x750 [ 645.298287][T24688] sget+0x20e/0x4e0 [ 645.302069][T24688] ? free_anon_bdev+0x20/0x20 [ 645.306720][T24688] incfs_mount_fs+0xca/0x840 [ 645.311296][T24688] ? incfs_unlink+0x80/0x80 [ 645.315771][T24688] ? vfs_parse_fs_param+0x2cb/0x430 [ 645.320940][T24688] ? vfs_parse_fs_string+0x1e9/0x290 [ 645.326213][T24688] ? cap_capable+0x23f/0x280 [ 645.330776][T24688] legacy_get_tree+0xde/0x170 [ 645.335425][T24688] ? incfs_unlink+0x80/0x80 [ 645.339907][T24688] vfs_get_tree+0x83/0x260 [ 645.344297][T24688] do_mount+0x19d0/0x2670 [ 645.348611][T24688] ? copy_mount_string+0x30/0x30 [ 645.353523][T24688] ? _copy_from_user+0xa4/0xe0 [ 645.358284][T24688] ? copy_mount_options+0xc9/0x300 [ 645.363383][T24688] ? ksys_mount+0x8f/0xf0 [ 645.367688][T24688] ksys_mount+0xc2/0xf0 [ 645.371834][T24688] __x64_sys_mount+0xb1/0xc0 [ 645.376405][T24688] do_syscall_64+0xcb/0x1e0 [ 645.380882][T24688] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 645.386745][T24688] RIP: 0033:0x4665d9 [ 645.390822][T24688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.410495][T24688] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 645.418877][T24688] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 645.426829][T24688] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 645.434772][T24688] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 645.442734][T24688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 645.450716][T24688] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:48 executing program 2 (fault-call:1 fault-nth:13): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.472585][T24698] FAT-fs (loop1): Unrecognized mount option "./bus" or missing value [ 645.491106][T24702] incfs: ino conflict with backing FS 1 [ 645.500380][T24708] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:48 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:48 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x48000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x60020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.512581][T24709] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.525529][T24710] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.547547][T24714] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.589479][T24721] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.600848][T24698] FAT-fs (loop1): Unrecognized mount option "./bus" or missing value [ 645.604194][T24712] FAULT_INJECTION: forcing a failure. [ 645.604194][T24712] name failslab, interval 1, probability 0, space 0, times 0 [ 645.622736][T24723] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.627634][T24712] CPU: 0 PID: 24712 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 645.642592][T24720] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.644508][T24712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.644512][T24712] Call Trace: [ 645.644528][T24712] dump_stack+0x1d8/0x24e [ 645.644543][T24712] ? devkmsg_release+0x11c/0x11c [ 645.678425][T24712] ? ida_alloc_range+0xa3b/0xaa0 [ 645.683445][T24712] ? show_regs_print_info+0x12/0x12 [ 645.688614][T24712] ? delete_node+0x733/0x790 [ 645.693221][T24712] ? parse_options+0x1cb/0x850 [ 645.697958][T24712] should_fail+0x6f6/0x860 [ 645.702371][T24712] ? setup_fault_attr+0x3d0/0x3d0 [ 645.707387][T24712] ? incfs_mount_fs+0x840/0x840 [ 645.712227][T24712] ? _raw_spin_lock+0xa3/0x1b0 [ 645.716964][T24712] ? up_read+0x10/0x10 [ 645.721230][T24712] ? getname_kernel+0x55/0x2d0 [ 645.725966][T24712] should_failslab+0x5/0x20 [ 645.730443][T24712] kmem_cache_alloc+0x36/0x290 [ 645.735194][T24712] getname_kernel+0x55/0x2d0 [ 645.739755][T24712] kern_path+0x19/0x40 [ 645.743792][T24712] incfs_mount_fs+0x2b5/0x840 [ 645.748439][T24712] ? incfs_unlink+0x80/0x80 [ 645.752911][T24712] ? vfs_parse_fs_param+0x2cb/0x430 [ 645.758078][T24712] ? vfs_parse_fs_string+0x1e9/0x290 [ 645.763344][T24712] ? cap_capable+0x23f/0x280 [ 645.767906][T24712] legacy_get_tree+0xde/0x170 [ 645.772556][T24712] ? incfs_unlink+0x80/0x80 [ 645.777034][T24712] vfs_get_tree+0x83/0x260 [ 645.781427][T24712] do_mount+0x19d0/0x2670 [ 645.785731][T24712] ? copy_mount_string+0x30/0x30 [ 645.790643][T24712] ? _copy_from_user+0xa4/0xe0 [ 645.795376][T24712] ? copy_mount_options+0xc9/0x300 [ 645.800486][T24712] ? ksys_mount+0x8f/0xf0 [ 645.804784][T24712] ksys_mount+0xc2/0xf0 [ 645.808911][T24712] __x64_sys_mount+0xb1/0xc0 [ 645.813492][T24712] do_syscall_64+0xcb/0x1e0 [ 645.817975][T24712] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 645.823836][T24712] RIP: 0033:0x4665d9 [ 645.827700][T24712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 645.847274][T24712] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 645.855663][T24712] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 645.863605][T24712] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 645.871558][T24712] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 645.879514][T24712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 06:11:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x4) 06:11:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4000) 06:11:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xd00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 2 (fault-call:1 fault-nth:14): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 645.887456][T24712] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 645.897135][T24712] incfs: Error accessing: ./file0. [ 645.929705][T24729] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.941403][T24730] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 645.959812][T24728] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 645.974959][T24734] incfs: ino conflict with backing FS 1 06:11:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x68000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x73030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 645.998725][T24733] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8004) [ 646.046728][T24745] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.057518][T24738] FAULT_INJECTION: forcing a failure. [ 646.057518][T24738] name failslab, interval 1, probability 0, space 0, times 0 [ 646.061177][T24739] incfs: ino conflict with backing FS 1 [ 646.080150][T24748] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6c000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.082893][T24738] CPU: 1 PID: 24738 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 646.101925][T24738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.104263][T24747] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 646.111971][T24738] Call Trace: [ 646.111989][T24738] dump_stack+0x1d8/0x24e [ 646.111998][T24738] ? devkmsg_release+0x11c/0x11c [ 646.112006][T24738] ? show_regs_print_info+0x12/0x12 [ 646.112014][T24738] ? filename_lookup+0x4bb/0x6a0 [ 646.112025][T24738] should_fail+0x6f6/0x860 [ 646.112034][T24738] ? setup_fault_attr+0x3d0/0x3d0 [ 646.112045][T24738] ? incfs_alloc_mount_info+0x55/0x520 [ 646.112054][T24738] should_failslab+0x5/0x20 [ 646.112064][T24738] kmem_cache_alloc_trace+0x39/0x2b0 [ 646.112072][T24738] ? memcpy+0x38/0x50 [ 646.112081][T24738] incfs_alloc_mount_info+0x55/0x520 [ 646.112089][T24738] incfs_mount_fs+0x3ab/0x840 [ 646.112098][T24738] ? incfs_unlink+0x80/0x80 [ 646.112105][T24738] ? vfs_parse_fs_param+0x2cb/0x430 [ 646.112118][T24738] ? vfs_parse_fs_string+0x1e9/0x290 [ 646.199598][T24738] ? cap_capable+0x23f/0x280 [ 646.204165][T24738] legacy_get_tree+0xde/0x170 [ 646.208814][T24738] ? incfs_unlink+0x80/0x80 [ 646.213284][T24738] vfs_get_tree+0x83/0x260 [ 646.217756][T24738] do_mount+0x19d0/0x2670 [ 646.222074][T24738] ? copy_mount_string+0x30/0x30 [ 646.226983][T24738] ? _copy_from_user+0xa4/0xe0 [ 646.231714][T24738] ? copy_mount_options+0xc9/0x300 [ 646.236791][T24738] ? ksys_mount+0x8f/0xf0 [ 646.241090][T24738] ksys_mount+0xc2/0xf0 [ 646.245214][T24738] __x64_sys_mount+0xb1/0xc0 [ 646.249775][T24738] do_syscall_64+0xcb/0x1e0 [ 646.254247][T24738] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 646.260193][T24738] RIP: 0033:0x4665d9 [ 646.264059][T24738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.283720][T24738] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:11:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0xf) 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 2 (fault-call:1 fault-nth:15): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 646.292205][T24738] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 646.300318][T24738] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 646.308267][T24738] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.316213][T24738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.324778][T24738] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 646.335175][T24738] incfs: Error allocating mount info. -12 06:11:49 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x74000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.372281][T24756] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 646.384012][T24759] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.396946][T24758] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:49 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x7e000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.421045][T24763] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.445426][T24757] incfs: ino conflict with backing FS 1 [ 646.452707][T24761] incfs: ino conflict with backing FS 1 06:11:49 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x10) 06:11:49 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xf504) [ 646.478336][T24771] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.493721][T24770] FAULT_INJECTION: forcing a failure. [ 646.493721][T24770] name failslab, interval 1, probability 0, space 0, times 0 [ 646.498640][T24774] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 646.508641][T24770] CPU: 1 PID: 24770 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 646.527764][T24770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 646.537813][T24770] Call Trace: [ 646.541098][T24770] dump_stack+0x1d8/0x24e [ 646.546559][T24770] ? devkmsg_release+0x11c/0x11c [ 646.551493][T24770] ? show_regs_print_info+0x12/0x12 [ 646.556690][T24770] should_fail+0x6f6/0x860 [ 646.560834][T24776] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.561191][T24770] ? setup_fault_attr+0x3d0/0x3d0 [ 646.577900][T24770] ? kzalloc+0x1d/0x30 [ 646.581987][T24770] should_failslab+0x5/0x20 [ 646.586490][T24770] __kmalloc+0x5f/0x2f0 [ 646.590649][T24770] kzalloc+0x1d/0x30 [ 646.594552][T24770] incfs_realloc_mount_info+0x90/0x4a0 [ 646.600003][T24770] incfs_alloc_mount_info+0x45b/0x520 [ 646.605365][T24770] incfs_mount_fs+0x3ab/0x840 [ 646.610042][T24770] ? incfs_unlink+0x80/0x80 [ 646.614531][T24770] ? vfs_parse_fs_param+0x2cb/0x430 06:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x88000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1100000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.615329][T24779] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.619716][T24770] ? vfs_parse_fs_string+0x1e9/0x290 [ 646.619724][T24770] ? cap_capable+0x23f/0x280 [ 646.619737][T24770] legacy_get_tree+0xde/0x170 [ 646.645659][T24770] ? incfs_unlink+0x80/0x80 [ 646.650165][T24770] vfs_get_tree+0x83/0x260 [ 646.654572][T24770] do_mount+0x19d0/0x2670 [ 646.658160][T24783] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.658978][T24770] ? copy_mount_string+0x30/0x30 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1500000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.658994][T24770] ? _copy_from_user+0xa4/0xe0 [ 646.680036][T24770] ? copy_mount_options+0xc9/0x300 [ 646.685160][T24770] ? ksys_mount+0x8f/0xf0 [ 646.689481][T24770] ksys_mount+0xc2/0xf0 [ 646.693629][T24770] __x64_sys_mount+0xb1/0xc0 [ 646.698211][T24770] do_syscall_64+0xcb/0x1e0 [ 646.700570][T24782] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.702703][T24770] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 646.702710][T24770] RIP: 0033:0x4665d9 06:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.702722][T24770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 646.720467][T24785] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.723817][T24770] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 646.723825][T24770] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 646.723829][T24770] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:50 executing program 2 (fault-call:1 fault-nth:16): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7a000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x1f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.723834][T24770] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 646.723838][T24770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 646.723842][T24770] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 646.731587][T24770] incfs: Error allocating mount info. -12 [ 646.777217][T24789] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xa4030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8cffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 646.823721][T24792] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 646.836379][T24793] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.858727][T24798] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 646.976435][T24797] FAT-fs (loop1): Unrecognized mount option "./bus" or missing value [ 646.988770][T24804] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x13) [ 647.031439][T24797] FAT-fs (loop1): Unrecognized mount option "./bus" or missing value [ 647.130513][T24812] incfs: ino conflict with backing FS 1 [ 647.135143][T24810] FAULT_INJECTION: forcing a failure. [ 647.135143][T24810] name failslab, interval 1, probability 0, space 0, times 0 [ 647.154123][T24816] incfs: ino conflict with backing FS 1 [ 647.162123][T24810] CPU: 0 PID: 24810 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 647.172390][T24810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.182447][T24810] Call Trace: [ 647.185753][T24810] dump_stack+0x1d8/0x24e [ 647.190211][T24810] ? devkmsg_release+0x11c/0x11c [ 647.195207][T24810] ? __unwind_start+0x72f/0x8e0 [ 647.200050][T24810] ? show_regs_print_info+0x12/0x12 [ 647.205316][T24810] ? 0xffffffffa0130000 [ 647.209887][T24810] should_fail+0x6f6/0x860 [ 647.214290][T24810] ? setup_fault_attr+0x3d0/0x3d0 [ 647.219302][T24810] ? unwind_get_return_address+0x48/0x80 [ 647.224913][T24810] ? arch_stack_walk+0xf8/0x140 [ 647.229754][T24810] ? __d_alloc+0x2a/0x6a0 [ 647.234072][T24810] should_failslab+0x5/0x20 [ 647.238549][T24810] kmem_cache_alloc+0x36/0x290 [ 647.243302][T24810] __d_alloc+0x2a/0x6a0 [ 647.247434][T24810] ? stack_trace_snprint+0x150/0x150 [ 647.252699][T24810] d_alloc_parallel+0xf3/0x1350 [ 647.257524][T24810] ? avc_has_perm_noaudit+0x30c/0x400 [ 647.262893][T24810] ? avc_denied+0x1c0/0x1c0 [ 647.267367][T24810] ? ksys_mount+0xc2/0xf0 [ 647.271668][T24810] ? d_hash_and_lookup+0x1e0/0x1e0 [ 647.276756][T24810] ? __rcu_read_lock+0x50/0x50 [ 647.281521][T24810] ? selinux_inode_permission+0x445/0x690 [ 647.287217][T24810] __lookup_slow+0x14f/0x450 [ 647.291781][T24810] ? lookup_one_len+0x2c0/0x2c0 [ 647.296606][T24810] ? generic_permission+0x13a/0x490 [ 647.301797][T24810] lookup_one_len+0x17f/0x2c0 [ 647.306467][T24810] ? lookup_one_len_common+0x430/0x430 [ 647.311908][T24810] ? memcpy+0x38/0x50 [ 647.316132][T24810] incfs_lookup_dentry+0x5b/0xb0 [ 647.321067][T24810] open_or_create_special_dir+0x45/0x150 [ 647.326684][T24810] incfs_mount_fs+0x3e9/0x840 [ 647.331342][T24810] ? incfs_unlink+0x80/0x80 [ 647.335835][T24810] ? vfs_parse_fs_param+0x2cb/0x430 [ 647.341008][T24810] ? vfs_parse_fs_string+0x1e9/0x290 [ 647.346799][T24810] ? cap_capable+0x23f/0x280 [ 647.351373][T24810] legacy_get_tree+0xde/0x170 [ 647.356030][T24810] ? incfs_unlink+0x80/0x80 [ 647.360511][T24810] vfs_get_tree+0x83/0x260 [ 647.365017][T24810] do_mount+0x19d0/0x2670 [ 647.369336][T24810] ? copy_mount_string+0x30/0x30 [ 647.374275][T24810] ? _copy_from_user+0xa4/0xe0 [ 647.379050][T24810] ? copy_mount_options+0xc9/0x300 [ 647.384132][T24810] ? ksys_mount+0x8f/0xf0 [ 647.388442][T24810] ksys_mount+0xc2/0xf0 [ 647.392705][T24810] __x64_sys_mount+0xb1/0xc0 [ 647.397280][T24810] do_syscall_64+0xcb/0x1e0 [ 647.401852][T24810] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 647.407729][T24810] RIP: 0033:0x4665d9 [ 647.411603][T24810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 647.431570][T24810] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 647.439955][T24810] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 647.447916][T24810] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 647.455876][T24810] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 647.463820][T24810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 647.471777][T24810] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:50 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x80040) 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2700000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x98030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x300) 06:11:50 executing program 2 (fault-call:1 fault-nth:17): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) [ 647.481009][T24810] incfs_lookup_dentry err:-12 [ 647.492831][T24810] incfs: Can't find or create .index dir in ./file0 [ 647.503348][T24824] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.518771][T24827] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:50 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x2f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:50 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9e030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 647.533025][T24826] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 647.545079][T24829] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xffff8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 647.573469][T24834] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.595696][T24836] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.617321][T24838] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1000000) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 647.649514][T24832] incfs: ino conflict with backing FS 1 [ 647.668537][T24845] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 647.682213][T24850] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xb4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3a02000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 647.694997][T24848] incfs: ino conflict with backing FS 1 [ 647.709508][T24855] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.730309][T24847] FAULT_INJECTION: forcing a failure. [ 647.730309][T24847] name failslab, interval 1, probability 0, space 0, times 0 [ 647.743039][T24847] CPU: 0 PID: 24847 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 647.753263][T24847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 647.763315][T24847] Call Trace: [ 647.766643][T24847] dump_stack+0x1d8/0x24e [ 647.771142][T24847] ? devkmsg_release+0x11c/0x11c [ 647.776089][T24847] ? __find_get_block+0xc5d/0x10c0 [ 647.781218][T24847] ? show_regs_print_info+0x12/0x12 [ 647.786413][T24847] should_fail+0x6f6/0x860 [ 647.790825][T24847] ? setup_fault_attr+0x3d0/0x3d0 [ 647.795843][T24847] ? ebitmap_cmp+0x1b8/0x220 [ 647.798755][T24859] incfs: ino conflict with backing FS 1 [ 647.800639][T24847] ? mls_compute_context_len+0x7dd/0x810 [ 647.800646][T24847] ? context_struct_to_string+0x43b/0x8b0 [ 647.800655][T24847] should_failslab+0x5/0x20 [ 647.800662][T24847] __kmalloc+0x5f/0x2f0 [ 647.800676][T24847] context_struct_to_string+0x43b/0x8b0 [ 647.832613][T24847] ? security_bounded_transition+0x560/0x560 [ 647.838588][T24847] ? symhash+0xe0/0xe0 [ 647.840618][T24863] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.842644][T24847] ? hashtab_search+0x1bf/0x200 [ 647.842656][T24847] context_add_hash+0x13f/0x270 [ 647.842671][T24847] ? security_sid_to_context_inval+0x40/0x40 [ 647.869994][T24847] ? mls_context_isvalid+0x98/0x380 [ 647.875184][T24847] ? policydb_context_isvalid+0x1b6/0x400 [ 647.880979][T24847] security_compute_sid+0x1142/0x1d00 [ 647.886462][T24847] ? __rcu_read_lock+0x50/0x50 06:11:51 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0xf00) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 647.887617][T24867] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 647.891217][T24847] ? security_transition_sid+0x90/0x90 [ 647.891226][T24847] ? avc_denied+0x1c0/0x1c0 [ 647.891238][T24847] ? avc_has_perm_noaudit+0x400/0x400 [ 647.891243][T24847] ? avc_has_perm_noaudit+0x30c/0x400 [ 647.891252][T24847] security_transition_sid+0x78/0x90 [ 647.891262][T24847] may_create+0x62b/0x960 [ 647.891271][T24847] ? show_sid+0x250/0x250 [ 647.891284][T24847] ? selinux_inode_permission+0x445/0x690 [ 647.933617][T24869] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 647.936943][T24847] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 647.936957][T24847] ? from_kgid+0x206/0x350 [ 647.964181][T24847] ? make_kgid+0x390/0x390 [ 647.968594][T24847] ? generic_permission+0x13a/0x490 [ 647.973791][T24847] security_inode_mkdir+0x96/0x120 [ 647.978895][T24847] vfs_mkdir+0x34a/0x5f0 [ 647.983118][T24847] open_or_create_special_dir+0xba/0x150 [ 647.988732][T24847] incfs_mount_fs+0x3e9/0x840 [ 647.993409][T24847] ? incfs_unlink+0x80/0x80 [ 647.997908][T24847] ? vfs_parse_fs_param+0x2cb/0x430 [ 648.003111][T24847] ? vfs_parse_fs_string+0x1e9/0x290 [ 648.008368][T24847] ? cap_capable+0x23f/0x280 [ 648.012930][T24847] legacy_get_tree+0xde/0x170 [ 648.017604][T24847] ? incfs_unlink+0x80/0x80 [ 648.022093][T24847] vfs_get_tree+0x83/0x260 [ 648.026491][T24847] do_mount+0x19d0/0x2670 [ 648.030896][T24847] ? copy_mount_string+0x30/0x30 [ 648.035818][T24847] ? _copy_from_user+0xa4/0xe0 [ 648.040561][T24847] ? copy_mount_options+0xc9/0x300 [ 648.045644][T24847] ? ksys_mount+0x8f/0xf0 [ 648.049945][T24847] ksys_mount+0xc2/0xf0 [ 648.054100][T24847] __x64_sys_mount+0xb1/0xc0 [ 648.058676][T24847] do_syscall_64+0xcb/0x1e0 [ 648.063165][T24847] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.069043][T24847] RIP: 0033:0x4665d9 [ 648.072909][T24847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.092484][T24847] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:11:51 executing program 2 (fault-call:1 fault-nth:18): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:51 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x2000000) 06:11:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x3f00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd0010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 648.100881][T24847] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 648.108825][T24847] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 648.116897][T24847] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 648.124847][T24847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 648.132802][T24847] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 648.143336][T24847] incfs: Can't find or create .index dir in ./file0 [ 648.163487][T24872] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 648.174923][ T358] BUG: Dentry ffff8881dcacc880{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 648.180275][T24874] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 648.184622][ T358] ------------[ cut here ]------------ [ 648.198516][T24875] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:51 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd4020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 648.201032][ T358] WARNING: CPU: 1 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 648.201035][ T358] Modules linked in: [ 648.201046][ T358] CPU: 1 PID: 358 Comm: syz-executor.2 Not tainted 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 648.201050][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.201058][ T358] RIP: 0010:umount_check+0x179/0x1c0 06:11:51 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 648.201065][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 648.201070][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 648.201076][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 648.201080][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 648.201085][ T358] RBP: ffff8881e6240420 R08: ffffffff814e9057 R09: ffffed103ede5e08 [ 648.201089][ T358] R10: ffffed103ede5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 648.201093][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881dcacc880 [ 648.201099][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 648.201104][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.201109][ T358] CR2: 0000000000568000 CR3: 00000001a2495000 CR4: 00000000001406e0 [ 648.201117][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.201121][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.201123][ T358] Call Trace: [ 648.201133][ T358] d_walk+0x2d9/0x540 [ 648.201141][ T358] ? __d_free+0x20/0x20 [ 648.201154][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 648.239808][T24877] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 648.244844][ T358] generic_shutdown_super+0x63/0x2a0 [ 648.244854][ T358] kill_block_super+0x79/0xd0 [ 648.244862][ T358] deactivate_locked_super+0xaf/0x100 [ 648.244875][ T358] deactivate_super+0x1b3/0x270 [ 648.265623][T24879] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 648.269811][ T358] ? deactivate_locked_super+0x100/0x100 [ 648.269823][ T358] ? dput+0x4de/0x5d0 [ 648.292078][T24881] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 648.301137][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 648.301145][ T358] ? find_next_bit+0xc6/0x110 [ 648.301154][ T358] cleanup_mnt+0x432/0x4e0 [ 648.301163][ T358] task_work_run+0x186/0x1b0 [ 648.301178][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 648.462451][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 648.468311][ T358] RIP: 0033:0x467a37 [ 648.472174][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 648.491836][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 648.500252][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 648.508194][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 648.516134][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 648.524268][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 648.532226][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 648.540220][ T358] ---[ end trace e8426e860f050b38 ]--- [ 648.552983][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 648.658081][T24890] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 648.671671][T24892] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 648.717951][T24896] incfs: ino conflict with backing FS 1 [ 648.727405][T24898] FAULT_INJECTION: forcing a failure. [ 648.727405][T24898] name failslab, interval 1, probability 0, space 0, times 0 [ 648.751114][T24898] CPU: 1 PID: 24898 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 648.762860][T24898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 648.772975][T24898] Call Trace: [ 648.776242][T24898] dump_stack+0x1d8/0x24e [ 648.780665][T24898] ? devkmsg_release+0x11c/0x11c [ 648.785579][T24898] ? show_regs_print_info+0x12/0x12 [ 648.790750][T24898] ? check_preemption_disabled+0x9e/0x330 [ 648.796534][T24898] ? __rcu_read_lock+0x50/0x50 [ 648.801269][T24898] ? __unwind_start+0x72f/0x8e0 [ 648.806094][T24898] should_fail+0x6f6/0x860 [ 648.810484][T24898] ? setup_fault_attr+0x3d0/0x3d0 [ 648.815478][T24898] ? __rcu_read_lock+0x50/0x50 [ 648.820256][T24898] ? stack_trace_save+0x1f0/0x1f0 [ 648.825259][T24898] ? xas_load+0x493/0x4f0 [ 648.829561][T24898] ? mempool_alloc_slab+0x16/0x20 [ 648.834566][T24898] should_failslab+0x5/0x20 [ 648.839040][T24898] kmem_cache_alloc+0x36/0x290 [ 648.843773][T24898] ? find_get_entry+0x5be/0x650 [ 648.848594][T24898] ? mempool_free+0x380/0x380 [ 648.853239][T24898] mempool_alloc_slab+0x16/0x20 [ 648.858063][T24898] mempool_alloc+0x113/0x680 [ 648.862713][T24898] ? check_preemption_disabled+0x154/0x330 [ 648.868488][T24898] ? mempool_resize+0x900/0x900 [ 648.873309][T24898] bio_alloc_bioset+0x1db/0x640 [ 648.878131][T24898] ? write_boundary_block+0x150/0x150 [ 648.883487][T24898] ? bio_chain_endio+0x110/0x110 [ 648.888405][T24898] submit_bh_wbc+0x1ba/0x790 [ 648.892988][T24898] __bread_gfp+0x181/0x310 [ 648.897467][T24898] fat12_ent_bread+0x152/0x4f0 [ 648.902204][T24898] ? fat12_ent_blocknr+0xa8/0x1e0 [ 648.907219][T24898] ? fat12_ent_set_ptr+0x250/0x250 [ 648.912312][T24898] fat_alloc_clusters+0x755/0x14d0 [ 648.917398][T24898] ? fat_mirror_bhs+0x4d0/0x4d0 [ 648.922216][T24898] ? memset+0x1f/0x40 [ 648.926168][T24898] ? avc_has_perm_noaudit+0x30c/0x400 [ 648.931513][T24898] ? avc_denied+0x1c0/0x1c0 [ 648.935992][T24898] fat_alloc_new_dir+0x19e/0xd70 [ 648.940897][T24898] ? avc_has_perm+0x173/0x270 [ 648.945550][T24898] ? __fat_remove_entries+0x4f0/0x4f0 [ 648.950909][T24898] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 648.956620][T24898] ? iput+0x100/0x810 [ 648.960571][T24898] vfat_mkdir+0x176/0x420 [ 648.964881][T24898] ? vfat_unlink+0x3a0/0x3a0 [ 648.969446][T24898] ? generic_permission+0x13a/0x490 [ 648.974629][T24898] ? security_inode_mkdir+0xdd/0x120 [ 648.979886][T24898] vfs_mkdir+0x416/0x5f0 [ 648.984122][T24898] open_or_create_special_dir+0xba/0x150 [ 648.989724][T24898] incfs_mount_fs+0x3e9/0x840 [ 648.994371][T24898] ? incfs_unlink+0x80/0x80 [ 648.998842][T24898] ? vfs_parse_fs_param+0x2cb/0x430 [ 649.004023][T24898] ? vfs_parse_fs_string+0x1e9/0x290 [ 649.009289][T24898] ? cap_capable+0x23f/0x280 [ 649.013848][T24898] legacy_get_tree+0xde/0x170 [ 649.018580][T24898] ? incfs_unlink+0x80/0x80 [ 649.023059][T24898] vfs_get_tree+0x83/0x260 [ 649.027444][T24898] do_mount+0x19d0/0x2670 [ 649.031922][T24898] ? copy_mount_string+0x30/0x30 [ 649.036827][T24898] ? _copy_from_user+0xa4/0xe0 [ 649.041570][T24898] ? copy_mount_options+0xc9/0x300 [ 649.046682][T24898] ? ksys_mount+0x8f/0xf0 [ 649.050990][T24898] ksys_mount+0xc2/0xf0 [ 649.055219][T24898] __x64_sys_mount+0xb1/0xc0 [ 649.059782][T24898] do_syscall_64+0xcb/0x1e0 [ 649.064262][T24898] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.070122][T24898] RIP: 0033:0x4665d9 [ 649.074110][T24898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.093687][T24898] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 649.102116][T24898] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 649.110061][T24898] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x1300) 06:11:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:52 executing program 2 (fault-call:1 fault-nth:19): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xde020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4200000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x3000000) [ 649.118003][T24898] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.125946][T24898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.133896][T24898] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 649.147548][T24898] incfs: ino conflict with backing FS 1 06:11:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:52 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:52 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe3020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.169745][T24906] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.182004][T24910] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.197481][T24912] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.218787][T24916] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.243123][T24911] incfs: ino conflict with backing FS 1 [ 649.256753][T24915] incfs: ino conflict with backing FS 1 06:11:52 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x4000) 06:11:52 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x4000000) [ 649.265953][T24922] FAULT_INJECTION: forcing a failure. [ 649.265953][T24922] name failslab, interval 1, probability 0, space 0, times 0 [ 649.291008][T24928] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.302879][T24922] CPU: 0 PID: 24922 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 06:11:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.314500][T24922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.324651][T24922] Call Trace: [ 649.328026][T24922] dump_stack+0x1d8/0x24e [ 649.332350][T24922] ? devkmsg_release+0x11c/0x11c [ 649.337281][T24922] ? show_regs_print_info+0x12/0x12 [ 649.337640][T24927] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 649.342472][T24922] ? find_get_entry+0x5be/0x650 [ 649.342481][T24922] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.342491][T24922] should_fail+0x6f6/0x860 06:11:52 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.342499][T24922] ? setup_fault_attr+0x3d0/0x3d0 [ 649.342513][T24922] ? __rcu_read_lock+0x50/0x50 [ 649.377479][T24932] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.378595][T24922] ? vfat_add_entry+0x206/0x37b0 [ 649.378649][T24922] should_failslab+0x5/0x20 [ 649.397191][T24930] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.399531][T24922] kmem_cache_alloc_trace+0x39/0x2b0 [ 649.399545][T24922] ? debug_smp_processor_id+0x20/0x20 [ 649.421507][T24922] vfat_add_entry+0x206/0x37b0 [ 649.426266][T24922] ? __xa_set_mark+0x488/0x580 [ 649.427079][T24934] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.431027][T24922] ? percpu_counter_add_batch+0x14d/0x170 [ 649.431037][T24922] ? vfat_rename+0xff0/0xff0 [ 649.431052][T24922] ? __brelse+0x54/0x90 [ 649.457007][T24922] ? fat_zeroed_cluster+0x7bb/0x820 [ 649.462293][T24922] ? mark_buffer_dirty_inode+0x22b/0x300 [ 649.468107][T24922] ? fat_alloc_new_dir+0x857/0xd70 [ 649.473190][T24922] ? __fat_remove_entries+0x4f0/0x4f0 [ 649.478542][T24922] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 649.484436][T24922] ? generic_update_time+0x3a/0x210 [ 649.489719][T24922] vfat_mkdir+0x1a8/0x420 [ 649.494021][T24922] ? vfat_unlink+0x3a0/0x3a0 [ 649.498593][T24922] ? generic_permission+0x13a/0x490 [ 649.503766][T24922] ? security_inode_mkdir+0xdd/0x120 [ 649.509022][T24922] vfs_mkdir+0x416/0x5f0 [ 649.513293][T24922] open_or_create_special_dir+0xba/0x150 [ 649.518987][T24922] incfs_mount_fs+0x3e9/0x840 [ 649.523723][T24922] ? incfs_unlink+0x80/0x80 [ 649.528198][T24922] ? vfs_parse_fs_param+0x2cb/0x430 [ 649.533365][T24922] ? vfs_parse_fs_string+0x1e9/0x290 [ 649.538629][T24922] ? cap_capable+0x23f/0x280 [ 649.543191][T24922] legacy_get_tree+0xde/0x170 [ 649.547840][T24922] ? incfs_unlink+0x80/0x80 [ 649.552313][T24922] vfs_get_tree+0x83/0x260 [ 649.556722][T24922] do_mount+0x19d0/0x2670 [ 649.561033][T24922] ? copy_mount_string+0x30/0x30 [ 649.565943][T24922] ? _copy_from_user+0xa4/0xe0 [ 649.570679][T24922] ? copy_mount_options+0xc9/0x300 [ 649.575776][T24922] ? ksys_mount+0x8f/0xf0 [ 649.580091][T24922] ksys_mount+0xc2/0xf0 [ 649.584233][T24922] __x64_sys_mount+0xb1/0xc0 [ 649.588803][T24922] do_syscall_64+0xcb/0x1e0 [ 649.593296][T24922] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.599248][T24922] RIP: 0033:0x4665d9 [ 649.603119][T24922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.623130][T24922] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 649.631512][T24922] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 649.639463][T24922] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 649.647405][T24922] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 649.655358][T24922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 649.663300][T24922] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 06:11:53 executing program 2 (fault-call:1 fault-nth:20): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:53 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x4c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:53 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe5020000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.673239][T24922] incfs: Can't find or create .index dir in ./file0 [ 649.686683][ T358] BUG: Dentry ffff8881dcb39550{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 649.694646][T24936] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.696463][ T358] ------------[ cut here ]------------ [ 649.713221][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 649.721618][ T358] Modules linked in: [ 649.725520][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 649.736724][T24940] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.736953][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 649.756222][T24941] incfs: ino conflict with backing FS 1 [ 649.758351][ T358] RIP: 0010:umount_check+0x179/0x1c0 06:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.758364][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 649.788858][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 649.794918][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 649.799681][T24945] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.802874][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 06:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:53 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 649.802879][ T358] RBP: ffff88819f92b420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 649.802883][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 649.802888][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881dcb39550 [ 649.802894][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 649.802904][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.838036][T24948] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.838125][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 649.867225][T24951] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.872970][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 649.872976][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 649.872979][ T358] Call Trace: [ 649.872995][ T358] d_walk+0x2d9/0x540 [ 649.873008][ T358] ? __d_free+0x20/0x20 [ 649.881663][T24952] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 649.892306][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 649.892316][ T358] generic_shutdown_super+0x63/0x2a0 [ 649.892325][ T358] kill_block_super+0x79/0xd0 [ 649.892332][ T358] deactivate_locked_super+0xaf/0x100 [ 649.892338][ T358] deactivate_super+0x1b3/0x270 [ 649.892351][ T358] ? deactivate_locked_super+0x100/0x100 [ 649.962116][ T358] ? dput+0x4de/0x5d0 [ 649.966068][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 649.971585][ T358] ? find_next_bit+0xc6/0x110 [ 649.976232][ T358] cleanup_mnt+0x432/0x4e0 [ 649.980631][ T358] task_work_run+0x186/0x1b0 [ 649.985209][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 649.990723][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 649.996585][ T358] RIP: 0033:0x467a37 [ 650.000457][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 650.020239][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.028624][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 650.036574][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 650.044602][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 650.052550][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 650.060524][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 650.068761][ T358] ---[ end trace e8426e860f050b39 ]--- [ 650.075589][ T358] BUG: Dentry ffff8881dcb39550{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 650.085425][ T358] ------------[ cut here ]------------ [ 650.090884][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 650.099192][ T358] Modules linked in: [ 650.103058][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 650.114564][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.124764][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 650.130127][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 650.150202][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 650.156238][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 650.164179][ T358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 650.172117][ T358] RBP: ffff88819f92b420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 650.180143][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 650.188193][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881dcb39550 [ 650.196238][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 650.205218][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.211775][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 650.219804][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.227848][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.235798][ T358] Call Trace: [ 650.239074][ T358] d_walk+0x2d9/0x540 [ 650.243155][ T358] ? __d_free+0x20/0x20 [ 650.247284][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 650.252758][ T358] generic_shutdown_super+0x63/0x2a0 [ 650.258015][ T358] kill_block_super+0x79/0xd0 [ 650.262665][ T358] deactivate_locked_super+0xaf/0x100 [ 650.268015][ T358] deactivate_super+0x1b3/0x270 [ 650.272835][ T358] ? deactivate_locked_super+0x100/0x100 [ 650.278483][ T358] ? dput+0x4de/0x5d0 [ 650.282433][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 650.288118][ T358] ? find_next_bit+0xc6/0x110 [ 650.292772][ T358] cleanup_mnt+0x432/0x4e0 [ 650.297168][ T358] task_work_run+0x186/0x1b0 [ 650.301838][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 650.307351][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 650.313321][ T358] RIP: 0033:0x467a37 [ 650.317286][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 650.336860][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 650.345238][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 650.353275][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 650.361239][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 650.369209][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 650.377482][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 650.385439][ T358] ---[ end trace e8426e860f050b3a ]--- [ 650.392924][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 650.411199][T24954] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 650.483670][T24962] FAULT_INJECTION: forcing a failure. [ 650.483670][T24962] name failslab, interval 1, probability 0, space 0, times 0 [ 650.497340][T24962] CPU: 1 PID: 24962 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 650.508968][T24962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.512085][T24959] incfs: ino conflict with backing FS 1 [ 650.519019][T24962] Call Trace: [ 650.528188][T24962] dump_stack+0x1d8/0x24e [ 650.532619][T24962] ? devkmsg_release+0x11c/0x11c [ 650.537653][T24962] ? show_regs_print_info+0x12/0x12 [ 650.542936][T24962] should_fail+0x6f6/0x860 [ 650.547351][T24962] ? setup_fault_attr+0x3d0/0x3d0 [ 650.552757][T24962] ? vfat_add_entry+0x35e/0x37b0 [ 650.557694][T24962] should_failslab+0x5/0x20 [ 650.562268][T24962] kmem_cache_alloc+0x36/0x290 [ 650.568918][T24962] vfat_add_entry+0x35e/0x37b0 [ 650.574003][T24962] ? __xa_set_mark+0x488/0x580 [ 650.578745][T24962] ? percpu_counter_add_batch+0x14d/0x170 [ 650.584435][T24962] ? vfat_rename+0xff0/0xff0 [ 650.588995][T24962] ? __brelse+0x54/0x90 [ 650.593139][T24962] ? fat_zeroed_cluster+0x7bb/0x820 [ 650.598304][T24962] ? mark_buffer_dirty_inode+0x22b/0x300 [ 650.603917][T24962] ? fat_alloc_new_dir+0x857/0xd70 [ 650.608998][T24962] ? __fat_remove_entries+0x4f0/0x4f0 [ 650.614341][T24962] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 650.620030][T24962] ? iput+0x100/0x810 [ 650.624026][T24962] vfat_mkdir+0x1a8/0x420 [ 650.628448][T24962] ? vfat_unlink+0x3a0/0x3a0 [ 650.633107][T24962] ? generic_permission+0x13a/0x490 [ 650.638364][T24962] ? security_inode_mkdir+0xdd/0x120 [ 650.643704][T24962] vfs_mkdir+0x416/0x5f0 [ 650.648028][T24962] open_or_create_special_dir+0xba/0x150 [ 650.653640][T24962] incfs_mount_fs+0x3e9/0x840 [ 650.658285][T24962] ? incfs_unlink+0x80/0x80 [ 650.662865][T24962] ? vfs_parse_fs_param+0x2cb/0x430 [ 650.668030][T24962] ? vfs_parse_fs_string+0x1e9/0x290 [ 650.673288][T24962] ? cap_capable+0x23f/0x280 [ 650.677904][T24962] legacy_get_tree+0xde/0x170 [ 650.682562][T24962] ? incfs_unlink+0x80/0x80 [ 650.687291][T24962] vfs_get_tree+0x83/0x260 [ 650.691677][T24962] do_mount+0x19d0/0x2670 [ 650.695987][T24962] ? copy_mount_string+0x30/0x30 [ 650.700912][T24962] ? _copy_from_user+0xa4/0xe0 [ 650.705644][T24962] ? copy_mount_options+0xc9/0x300 [ 650.710808][T24962] ? ksys_mount+0x8f/0xf0 [ 650.715103][T24962] ksys_mount+0xc2/0xf0 [ 650.719226][T24962] __x64_sys_mount+0xb1/0xc0 [ 650.723785][T24962] do_syscall_64+0xcb/0x1e0 [ 650.728260][T24962] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 650.734134][T24962] RIP: 0033:0x4665d9 [ 650.738004][T24962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 650.757861][T24962] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 650.766327][T24962] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 650.774281][T24962] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x80040) 06:11:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6002000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x5000000) [ 650.782329][T24962] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 650.790268][T24962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 650.798305][T24962] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 650.814883][T24962] incfs: Can't find or create .index dir in ./file0 [ 650.822555][T24970] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:54 executing program 2 (fault-call:1 fault-nth:21): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xe83a1b00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 650.835380][T24971] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 650.846946][ T358] BUG: Dentry ffff888193980220{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 650.856742][ T358] ------------[ cut here ]------------ [ 650.862203][ T358] WARNING: CPU: 1 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 650.870557][ T358] Modules linked in: [ 650.870927][T24976] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 650.874445][ T358] CPU: 1 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 650.874449][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 650.874469][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 650.899201][T24974] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6800000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf4010000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 650.907290][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 650.907295][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 650.907301][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 650.907306][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 650.907310][ T358] RBP: ffff8881e23fe420 R08: ffffffff814e9057 R09: ffffed103ede5e08 [ 650.907314][ T358] R10: ffffed103ede5e08 R11: 0000000000000000 R12: dffffc0000000000 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x15}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 650.907318][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888193980220 [ 650.907330][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 650.916471][T24978] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 650.923595][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.923601][ T358] CR2: 00007ffe4675aa28 CR3: 00000001a2495000 CR4: 00000000001406e0 [ 650.923608][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 650.923611][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 650.923614][ T358] Call Trace: [ 650.923631][ T358] d_walk+0x2d9/0x540 [ 650.923644][ T358] ? __d_free+0x20/0x20 [ 650.972779][T24981] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 650.973564][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 650.973579][ T358] generic_shutdown_super+0x63/0x2a0 [ 650.997761][T24983] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 650.998543][ T358] kill_block_super+0x79/0xd0 [ 650.998557][ T358] deactivate_locked_super+0xaf/0x100 [ 651.095650][ T358] deactivate_super+0x1b3/0x270 [ 651.100476][ T358] ? deactivate_locked_super+0x100/0x100 [ 651.106079][ T358] ? dput+0x4de/0x5d0 [ 651.110032][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 651.115549][ T358] ? find_next_bit+0xc6/0x110 [ 651.120198][ T358] cleanup_mnt+0x432/0x4e0 [ 651.124587][ T358] task_work_run+0x186/0x1b0 [ 651.129214][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 651.134734][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 651.140598][ T358] RIP: 0033:0x467a37 [ 651.144463][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 651.164124][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 651.172666][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 651.180610][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 651.188555][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 651.196504][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 651.204488][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 651.212443][ T358] ---[ end trace e8426e860f050b3b ]--- [ 651.218613][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 651.236863][T24990] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 651.249402][T24991] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 651.265429][T24972] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 651.334634][T24996] incfs: ino conflict with backing FS 1 [ 651.348542][T24995] FAULT_INJECTION: forcing a failure. [ 651.348542][T24995] name failslab, interval 1, probability 0, space 0, times 0 [ 651.361737][T24995] CPU: 0 PID: 24995 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 651.368911][T24972] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value 06:11:54 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x1000000) 06:11:54 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:54 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf6ffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 651.373348][T24995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.373351][T24995] Call Trace: [ 651.373367][T24995] dump_stack+0x1d8/0x24e [ 651.373378][T24995] ? devkmsg_release+0x11c/0x11c [ 651.373387][T24995] ? show_regs_print_info+0x12/0x12 [ 651.373415][T24995] should_fail+0x6f6/0x860 [ 651.373445][T24995] ? setup_fault_attr+0x3d0/0x3d0 [ 651.408058][T25003] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 651.409506][T24995] ? vfat_add_entry+0x35e/0x37b0 [ 651.409520][T24995] should_failslab+0x5/0x20 [ 651.431353][T25005] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 651.435436][T24995] kmem_cache_alloc+0x36/0x290 [ 651.435451][T24995] vfat_add_entry+0x35e/0x37b0 [ 651.460414][T24995] ? __xa_set_mark+0x488/0x580 [ 651.465150][T24995] ? percpu_counter_add_batch+0x14d/0x170 [ 651.470882][T24995] ? vfat_rename+0xff0/0xff0 [ 651.475835][T24995] ? __brelse+0x54/0x90 [ 651.480007][T24995] ? fat_zeroed_cluster+0x7bb/0x820 [ 651.485178][T24995] ? mark_buffer_dirty_inode+0x22b/0x300 [ 651.490779][T24995] ? fat_alloc_new_dir+0x857/0xd70 [ 651.496051][T24995] ? __fat_remove_entries+0x4f0/0x4f0 [ 651.501393][T24995] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 651.507081][T24995] ? iput+0x100/0x810 [ 651.511033][T24995] vfat_mkdir+0x1a8/0x420 [ 651.515331][T24995] ? vfat_unlink+0x3a0/0x3a0 [ 651.519892][T24995] ? generic_permission+0x13a/0x490 [ 651.525058][T24995] ? security_inode_mkdir+0xdd/0x120 [ 651.530583][T24995] vfs_mkdir+0x416/0x5f0 [ 651.534828][T24995] open_or_create_special_dir+0xba/0x150 [ 651.540433][T24995] incfs_mount_fs+0x3e9/0x840 [ 651.546041][T24995] ? incfs_unlink+0x80/0x80 [ 651.550519][T24995] ? vfs_parse_fs_param+0x2cb/0x430 [ 651.555783][T24995] ? vfs_parse_fs_string+0x1e9/0x290 [ 651.561146][T24995] ? cap_capable+0x23f/0x280 [ 651.565708][T24995] legacy_get_tree+0xde/0x170 [ 651.570475][T24995] ? incfs_unlink+0x80/0x80 [ 651.574966][T24995] vfs_get_tree+0x83/0x260 [ 651.579359][T24995] do_mount+0x19d0/0x2670 [ 651.583658][T24995] ? copy_mount_string+0x30/0x30 [ 651.588587][T24995] ? _copy_from_user+0xa4/0xe0 [ 651.593334][T24995] ? copy_mount_options+0xc9/0x300 [ 651.598434][T24995] ? ksys_mount+0x8f/0xf0 [ 651.602733][T24995] ksys_mount+0xc2/0xf0 [ 651.606860][T24995] __x64_sys_mount+0xb1/0xc0 [ 651.611512][T24995] do_syscall_64+0xcb/0x1e0 [ 651.615988][T24995] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 651.621849][T24995] RIP: 0033:0x4665d9 [ 651.625736][T24995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 651.645324][T24995] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 651.653720][T24995] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 651.661762][T24995] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 651.669708][T24995] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 651.678172][T24995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 651.686121][T24995] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 651.698399][T24995] incfs: Can't find or create .index dir in ./file0 [ 651.711164][ T358] BUG: Dentry ffff8881e5c76660{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 651.720865][ T358] ------------[ cut here ]------------ [ 651.726319][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 651.734641][ T358] Modules linked in: [ 651.738516][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 651.749930][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 651.760050][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 651.765305][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 651.784891][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 651.791021][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 651.799054][ T358] RDX: 0000000000000000 RSI: 0000000080000002 RDI: 0000000000000000 [ 651.807001][ T358] RBP: ffff8881dd6de420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 651.814950][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 651.822914][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e5c76660 [ 651.830860][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 651.839773][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 651.846335][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 651.854291][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 651.862237][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 651.870179][ T358] Call Trace: [ 651.873447][ T358] d_walk+0x2d9/0x540 [ 651.877408][ T358] ? __d_free+0x20/0x20 [ 651.881532][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 651.886958][ T358] generic_shutdown_super+0x63/0x2a0 [ 651.892222][ T358] kill_block_super+0x79/0xd0 [ 651.896869][ T358] deactivate_locked_super+0xaf/0x100 [ 651.902209][ T358] deactivate_super+0x1b3/0x270 [ 651.907121][ T358] ? deactivate_locked_super+0x100/0x100 [ 651.912719][ T358] ? dput+0x4de/0x5d0 [ 651.916671][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 651.922185][ T358] ? find_next_bit+0xc6/0x110 [ 651.926863][ T358] cleanup_mnt+0x432/0x4e0 [ 651.931260][ T358] task_work_run+0x186/0x1b0 [ 651.935820][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 651.941344][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 651.947204][ T358] RIP: 0033:0x467a37 [ 651.951073][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 651.970819][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 651.979197][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 651.987138][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 651.995079][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 652.003047][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 652.010992][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 652.018938][ T358] ---[ end trace e8426e860f050b3c ]--- [ 652.039800][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... 06:11:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x6000000) 06:11:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x6c00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xf8030000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 2 (fault-call:1 fault-nth:22): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfc000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.119083][T25010] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.130852][T25011] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 652.142430][T25012] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7400000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x48}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.173697][T25014] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.195474][T25019] incfs: ino conflict with backing FS 1 [ 652.203082][T25020] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 652.227667][T25025] incfs: ino conflict with backing FS 1 [ 652.235637][T25026] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.247703][T25023] FAULT_INJECTION: forcing a failure. [ 652.247703][T25023] name failslab, interval 1, probability 0, space 0, times 0 [ 652.261769][T25030] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.275699][T25023] CPU: 0 PID: 25023 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 652.287322][T25023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.297537][T25023] Call Trace: [ 652.300925][T25023] dump_stack+0x1d8/0x24e [ 652.305243][T25023] ? devkmsg_release+0x11c/0x11c [ 652.310458][T25023] ? show_regs_print_info+0x12/0x12 [ 652.315817][T25023] should_fail+0x6f6/0x860 [ 652.320211][T25023] ? setup_fault_attr+0x3d0/0x3d0 [ 652.325216][T25023] ? make_kgid+0x24f/0x390 [ 652.329602][T25023] ? security_inode_alloc+0x32/0x1d0 [ 652.335830][T25023] should_failslab+0x5/0x20 [ 652.340400][T25023] kmem_cache_alloc+0x36/0x290 [ 652.345161][T25023] security_inode_alloc+0x32/0x1d0 [ 652.350243][T25023] inode_init_always+0x387/0x810 [ 652.355373][T25023] ? fat_get_block_bmap+0x470/0x470 [ 652.360612][T25023] new_inode_pseudo+0x90/0x220 [ 652.365356][T25023] new_inode+0x25/0x1d0 [ 652.369514][T25023] ? inode_init_owner+0x159/0x340 [ 652.374682][T25023] fat_build_inode+0x1e8/0x3e0 [ 652.379415][T25023] vfat_mkdir+0x2a3/0x420 [ 652.383754][T25023] ? vfat_unlink+0x3a0/0x3a0 [ 652.388402][T25023] ? generic_permission+0x13a/0x490 [ 652.393572][T25023] ? security_inode_mkdir+0xdd/0x120 [ 652.398827][T25023] vfs_mkdir+0x416/0x5f0 [ 652.403056][T25023] open_or_create_special_dir+0xba/0x150 [ 652.408653][T25023] incfs_mount_fs+0x3e9/0x840 [ 652.413324][T25023] ? incfs_unlink+0x80/0x80 [ 652.417921][T25023] ? vfs_parse_fs_param+0x2cb/0x430 [ 652.423114][T25023] ? vfs_parse_fs_string+0x1e9/0x290 [ 652.428439][T25023] ? cap_capable+0x23f/0x280 [ 652.433118][T25023] legacy_get_tree+0xde/0x170 [ 652.437941][T25023] ? incfs_unlink+0x80/0x80 [ 652.442422][T25023] vfs_get_tree+0x83/0x260 [ 652.446806][T25023] do_mount+0x19d0/0x2670 [ 652.451106][T25023] ? copy_mount_string+0x30/0x30 [ 652.456017][T25023] ? _copy_from_user+0xa4/0xe0 [ 652.460752][T25023] ? copy_mount_options+0xc9/0x300 [ 652.465837][T25023] ? ksys_mount+0x8f/0xf0 [ 652.470132][T25023] ksys_mount+0xc2/0xf0 [ 652.474301][T25023] __x64_sys_mount+0xb1/0xc0 [ 652.478865][T25023] do_syscall_64+0xcb/0x1e0 [ 652.483339][T25023] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.489269][T25023] RIP: 0033:0x4665d9 [ 652.493131][T25023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 652.512709][T25023] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 652.521095][T25023] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 06:11:55 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x2000000) 06:11:55 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xff070000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:55 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x7000000) 06:11:55 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x7a00000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.529032][T25023] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 652.536988][T25023] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 652.544927][T25023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 652.552872][T25023] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 652.567306][T25023] incfs: Can't find or create .index dir in ./file0 06:11:56 executing program 2 (fault-call:1 fault-nth:23): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8003000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.578037][T25034] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.597085][T25037] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 652.608747][ T358] BUG: Dentry ffff8881999d8bb0{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 652.618463][ T358] ------------[ cut here ]------------ [ 652.618683][T25038] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.624005][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 652.624007][ T358] Modules linked in: [ 652.624019][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 652.624023][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.624032][ T358] RIP: 0010:umount_check+0x179/0x1c0 06:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x6c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x74}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.624045][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 652.662190][T25043] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.669019][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 652.669028][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 652.669032][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 06:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 652.669036][ T358] RBP: ffff8881a27f6420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 652.669040][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 652.669050][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881999d8bb0 [ 652.691692][T25045] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.694252][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 652.694257][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.694262][ T358] CR2: 0000000001f95b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 652.694274][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 652.722935][T25047] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.727672][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 652.727676][ T358] Call Trace: [ 652.727696][ T358] d_walk+0x2d9/0x540 [ 652.727709][ T358] ? __d_free+0x20/0x20 [ 652.751800][T25049] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 652.762936][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 652.762946][ T358] generic_shutdown_super+0x63/0x2a0 [ 652.762954][ T358] kill_block_super+0x79/0xd0 [ 652.762962][ T358] deactivate_locked_super+0xaf/0x100 [ 652.762969][ T358] deactivate_super+0x1b3/0x270 [ 652.762983][ T358] ? deactivate_locked_super+0x100/0x100 [ 652.868462][ T358] ? dput+0x4de/0x5d0 [ 652.872418][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 652.877936][ T358] ? find_next_bit+0xc6/0x110 [ 652.882586][ T358] cleanup_mnt+0x432/0x4e0 [ 652.886976][ T358] task_work_run+0x186/0x1b0 [ 652.891538][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 652.897060][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 652.902924][ T358] RIP: 0033:0x467a37 [ 652.906788][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 652.926380][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 652.934759][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 652.942703][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 652.950646][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 652.958586][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 652.966546][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 652.974511][ T358] ---[ end trace e8426e860f050b3d ]--- [ 652.981419][ T358] BUG: Dentry ffff8881999d8bb0{i=0,n=.index} still in use (1) [unmount of vfat loop2] [ 652.991124][ T358] ------------[ cut here ]------------ [ 652.996580][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 653.004883][ T358] Modules linked in: [ 653.008771][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 653.020190][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.030225][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 653.035505][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 653.055077][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 653.061127][ T358] RAX: 0000000000000054 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 653.069072][ T358] RDX: 0000000000000000 RSI: 0000000080000003 RDI: 0000000000000000 [ 653.077014][ T358] RBP: ffff8881a27f6420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 653.084957][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 653.092898][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881999d8bb0 [ 653.100943][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 653.109840][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.116401][ T358] CR2: 0000000001f95b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 653.124347][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 653.132291][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 653.140241][ T358] Call Trace: [ 653.143528][ T358] d_walk+0x2d9/0x540 [ 653.147491][ T358] ? __d_free+0x20/0x20 [ 653.151627][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 653.157061][ T358] generic_shutdown_super+0x63/0x2a0 [ 653.162348][ T358] kill_block_super+0x79/0xd0 [ 653.167003][ T358] deactivate_locked_super+0xaf/0x100 [ 653.172375][ T358] deactivate_super+0x1b3/0x270 [ 653.177199][ T358] ? deactivate_locked_super+0x100/0x100 [ 653.182798][ T358] ? dput+0x4de/0x5d0 [ 653.186759][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 653.192271][ T358] ? find_next_bit+0xc6/0x110 [ 653.196934][ T358] cleanup_mnt+0x432/0x4e0 [ 653.201458][ T358] task_work_run+0x186/0x1b0 [ 653.206018][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 653.211542][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.217404][ T358] RIP: 0033:0x467a37 [ 653.221279][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.240956][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 653.249529][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 653.257471][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 653.265410][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 653.273350][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 653.281293][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 653.289241][ T358] ---[ end trace e8426e860f050b3e ]--- [ 653.296985][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 653.307183][T25041] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 653.315271][T25056] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 653.329900][T25057] incfs: ino conflict with backing FS 1 [ 653.339656][T25059] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:56 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x3000000) 06:11:56 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x7e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:56 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff8c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 653.427439][T25041] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 653.451098][T25068] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 653.462905][T25069] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x8000000) 06:11:56 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8a01000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 653.535407][T25063] FAULT_INJECTION: forcing a failure. [ 653.535407][T25063] name failslab, interval 1, probability 0, space 0, times 0 [ 653.549691][T25063] CPU: 1 PID: 25063 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 653.551509][T25076] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 653.561320][T25063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.561324][T25063] Call Trace: [ 653.561344][T25063] dump_stack+0x1d8/0x24e [ 653.561354][T25063] ? devkmsg_release+0x11c/0x11c [ 653.561363][T25063] ? show_regs_print_info+0x12/0x12 [ 653.561379][T25063] ? vfat_mkdir+0x2a3/0x420 [ 653.604925][T25063] should_fail+0x6f6/0x860 [ 653.609317][T25063] ? setup_fault_attr+0x3d0/0x3d0 [ 653.614314][T25063] ? __d_alloc+0x2a/0x6a0 [ 653.618622][T25063] should_failslab+0x5/0x20 [ 653.623100][T25063] kmem_cache_alloc+0x36/0x290 [ 653.627836][T25063] __d_alloc+0x2a/0x6a0 [ 653.631964][T25063] ? _raw_spin_lock+0xa3/0x1b0 [ 653.636707][T25063] d_alloc_parallel+0xf3/0x1350 [ 653.641549][T25063] ? avc_has_perm_noaudit+0x30c/0x400 [ 653.646979][T25063] ? avc_denied+0x1c0/0x1c0 [ 653.651453][T25063] ? d_hash_and_lookup+0x1e0/0x1e0 [ 653.656533][T25063] ? _raw_spin_lock+0xa3/0x1b0 [ 653.661266][T25063] ? __rcu_read_lock+0x50/0x50 [ 653.666000][T25063] ? selinux_inode_permission+0x445/0x690 [ 653.671703][T25063] __lookup_slow+0x14f/0x450 [ 653.676270][T25063] ? lookup_one_len+0x2c0/0x2c0 [ 653.681097][T25063] lookup_one_len+0x17f/0x2c0 [ 653.685774][T25063] ? lookup_one_len_common+0x430/0x430 [ 653.691234][T25063] ? up_read+0x10/0x10 [ 653.695277][T25063] ? vfs_mkdir+0x4e2/0x5f0 [ 653.699668][T25063] incfs_lookup_dentry+0x5b/0xb0 [ 653.704577][T25063] open_or_create_special_dir+0x45/0x150 [ 653.710182][T25063] incfs_mount_fs+0x457/0x840 [ 653.714833][T25063] ? incfs_unlink+0x80/0x80 [ 653.719308][T25063] ? vfs_parse_fs_param+0x2cb/0x430 [ 653.724478][T25063] ? vfs_parse_fs_string+0x1e9/0x290 [ 653.729731][T25063] ? cap_capable+0x23f/0x280 [ 653.734751][T25063] legacy_get_tree+0xde/0x170 [ 653.739400][T25063] ? incfs_unlink+0x80/0x80 [ 653.743874][T25063] vfs_get_tree+0x83/0x260 [ 653.748350][T25063] do_mount+0x19d0/0x2670 [ 653.752651][T25063] ? copy_mount_string+0x30/0x30 [ 653.757562][T25063] ? _copy_from_user+0xa4/0xe0 [ 653.762321][T25063] ? copy_mount_options+0xc9/0x300 [ 653.767400][T25063] ? ksys_mount+0x8f/0xf0 [ 653.771715][T25063] ksys_mount+0xc2/0xf0 [ 653.775930][T25063] __x64_sys_mount+0xb1/0xc0 [ 653.780500][T25063] do_syscall_64+0xcb/0x1e0 [ 653.784973][T25063] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 653.790837][T25063] RIP: 0033:0x4665d9 [ 653.794703][T25063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 653.814284][T25063] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 653.822670][T25063] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 653.830615][T25063] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 653.838560][T25063] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 653.846610][T25063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 653.854561][T25063] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 653.871951][T25063] incfs_lookup_dentry err:-12 [ 653.876684][T25063] incfs: Can't find or create .incomplete dir in ./file0 06:11:57 executing program 2 (fault-call:1 fault-nth:24): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x88}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x8cffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x9000000) 06:11:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xa403000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 653.893917][T25080] incfs: ino conflict with backing FS 1 [ 653.910977][T25084] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 653.923381][T25085] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 653.935418][T25086] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:57 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x4000000) 06:11:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.010262][T25092] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.012507][T25096] incfs: ino conflict with backing FS 1 [ 654.031319][T25088] FAULT_INJECTION: forcing a failure. [ 654.031319][T25088] name failslab, interval 1, probability 0, space 0, times 0 [ 654.043944][T25088] CPU: 1 PID: 25088 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 654.052353][T25101] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.055553][T25088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.055557][T25088] Call Trace: [ 654.055573][T25088] dump_stack+0x1d8/0x24e [ 654.055589][T25088] ? devkmsg_release+0x11c/0x11c [ 654.089433][T25088] ? show_regs_print_info+0x12/0x12 [ 654.094607][T25088] ? __kasan_slab_free+0x20c/0x240 [ 654.099701][T25088] ? slab_free_freelist_hook+0x7b/0x150 [ 654.105222][T25088] ? kmem_cache_free+0xb8/0x5f0 [ 654.110133][T25088] ? fat_search_long+0x1053/0x1390 [ 654.115224][T25088] ? vfat_lookup+0x1a5/0x530 [ 654.119796][T25088] should_fail+0x6f6/0x860 [ 654.124194][T25088] ? setup_fault_attr+0x3d0/0x3d0 [ 654.129192][T25088] ? ebitmap_cmp+0x1b8/0x220 [ 654.133755][T25088] ? mls_compute_context_len+0x7dd/0x810 [ 654.139375][T25088] ? context_struct_to_string+0x43b/0x8b0 [ 654.145433][T25088] should_failslab+0x5/0x20 [ 654.149924][T25088] __kmalloc+0x5f/0x2f0 [ 654.154081][T25088] context_struct_to_string+0x43b/0x8b0 [ 654.159872][T25088] ? security_bounded_transition+0x560/0x560 [ 654.165948][T25088] ? symhash+0xe0/0xe0 [ 654.170106][T25088] ? hashtab_search+0x1bf/0x200 [ 654.174938][T25088] context_add_hash+0x13f/0x270 [ 654.179782][T25088] ? security_sid_to_context_inval+0x40/0x40 [ 654.185766][T25088] ? mls_context_isvalid+0x98/0x380 [ 654.191040][T25088] ? policydb_context_isvalid+0x1b6/0x400 [ 654.196752][T25088] security_compute_sid+0x1142/0x1d00 [ 654.202120][T25088] ? __rcu_read_lock+0x50/0x50 [ 654.206870][T25088] ? security_transition_sid+0x90/0x90 [ 654.212394][T25088] ? avc_denied+0x1c0/0x1c0 [ 654.216887][T25088] ? avc_has_perm_noaudit+0x400/0x400 [ 654.222237][T25088] ? avc_has_perm_noaudit+0x30c/0x400 [ 654.227590][T25088] security_transition_sid+0x78/0x90 [ 654.232849][T25088] may_create+0x62b/0x960 [ 654.237182][T25088] ? show_sid+0x250/0x250 [ 654.241494][T25088] ? selinux_inode_permission+0x445/0x690 [ 654.247314][T25088] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 654.253107][T25088] ? from_kgid+0x206/0x350 [ 654.257621][T25088] ? make_kgid+0x390/0x390 [ 654.262023][T25088] ? generic_permission+0x13a/0x490 [ 654.267220][T25088] security_inode_mkdir+0x96/0x120 [ 654.272377][T25088] vfs_mkdir+0x34a/0x5f0 [ 654.276606][T25088] open_or_create_special_dir+0xba/0x150 [ 654.282314][T25088] incfs_mount_fs+0x457/0x840 [ 654.286977][T25088] ? incfs_unlink+0x80/0x80 [ 654.291488][T25088] ? vfs_parse_fs_param+0x2cb/0x430 [ 654.296723][T25088] ? vfs_parse_fs_string+0x1e9/0x290 [ 654.302132][T25088] ? cap_capable+0x23f/0x280 [ 654.306813][T25088] legacy_get_tree+0xde/0x170 [ 654.311478][T25088] ? incfs_unlink+0x80/0x80 [ 654.316101][T25088] vfs_get_tree+0x83/0x260 [ 654.320508][T25088] do_mount+0x19d0/0x2670 [ 654.324849][T25088] ? copy_mount_string+0x30/0x30 [ 654.329780][T25088] ? _copy_from_user+0xa4/0xe0 [ 654.334532][T25088] ? copy_mount_options+0xc9/0x300 [ 654.339711][T25088] ? ksys_mount+0x8f/0xf0 [ 654.344038][T25088] ksys_mount+0xc2/0xf0 [ 654.348310][T25088] __x64_sys_mount+0xb1/0xc0 [ 654.352884][T25088] do_syscall_64+0xcb/0x1e0 [ 654.357368][T25088] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.363331][T25088] RIP: 0033:0x4665d9 [ 654.367205][T25088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 654.386958][T25088] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 654.395349][T25088] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 654.403293][T25088] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 06:11:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xb401000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xa000000) 06:11:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xc401000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.411242][T25088] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 654.419204][T25088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 654.427243][T25088] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 654.445240][T25095] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 06:11:57 executing program 2 (fault-call:1 fault-nth:25): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.448507][T25088] incfs: Can't find or create .incomplete dir in ./file0 [ 654.464022][T25102] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.478130][ T358] BUG: Dentry ffff8881e5fe4dd0{i=0,n=.incomplete} still in use (1) [unmount of vfat loop2] [ 654.484089][T25104] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.488403][ T358] ------------[ cut here ]------------ [ 654.505216][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 654.513514][ T358] Modules linked in: [ 654.517401][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 654.528828][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.532565][T25107] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 654.538967][ T358] RIP: 0010:umount_check+0x179/0x1c0 06:11:57 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xda03000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:57 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x1b4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x260}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.538975][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 654.538985][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 654.569920][T25110] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.575290][ T358] RAX: 0000000000000059 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 654.575294][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 06:11:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x2e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 654.575299][ T358] RBP: ffff8881a27ce420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 654.575303][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 654.575314][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e5fe4dd0 [ 654.597727][T25112] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.600828][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 654.600833][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.600838][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 654.600845][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 654.600848][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 654.600857][ T358] Call Trace: [ 654.625282][T25114] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 654.632981][ T358] d_walk+0x2d9/0x540 [ 654.632990][ T358] ? __d_free+0x20/0x20 [ 654.632998][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 654.633007][ T358] generic_shutdown_super+0x63/0x2a0 [ 654.633021][ T358] kill_block_super+0x79/0xd0 [ 654.722568][ T358] deactivate_locked_super+0xaf/0x100 [ 654.727918][ T358] deactivate_super+0x1b3/0x270 [ 654.732751][ T358] ? deactivate_locked_super+0x100/0x100 [ 654.738361][ T358] ? dput+0x4de/0x5d0 [ 654.742483][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 654.748097][ T358] ? find_next_bit+0xc6/0x110 [ 654.752777][ T358] cleanup_mnt+0x432/0x4e0 [ 654.757178][ T358] task_work_run+0x186/0x1b0 [ 654.761752][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 654.767288][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 654.773249][ T358] RIP: 0033:0x467a37 [ 654.777134][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 654.797476][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 654.806040][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 654.814163][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 654.822113][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 654.830061][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 654.838013][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 654.845998][ T358] ---[ end trace e8426e860f050b3f ]--- [ 654.852130][ T358] BUG: Dentry ffff8881e5fe4dd0{i=0,n=.incomplete} still in use (1) [unmount of vfat loop2] [ 654.862340][ T358] ------------[ cut here ]------------ [ 654.867794][ T358] WARNING: CPU: 0 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 654.876085][ T358] Modules linked in: [ 654.879961][ T358] CPU: 0 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 654.891468][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.901506][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 654.906781][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 654.926356][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 654.932391][ T358] RAX: 0000000000000059 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 654.940336][ T358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 654.948281][ T358] RBP: ffff8881a27ce420 R08: ffffffff814e9057 R09: ffffed103edc5e08 [ 654.956227][ T358] R10: ffffed103edc5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 654.964189][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff8881e5fe4dd0 [ 654.972371][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 654.981274][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.987876][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406f0 [ 654.995828][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 655.003775][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 655.011808][ T358] Call Trace: [ 655.015094][ T358] d_walk+0x2d9/0x540 [ 655.019048][ T358] ? __d_free+0x20/0x20 [ 655.023198][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 655.028652][ T358] generic_shutdown_super+0x63/0x2a0 [ 655.034031][ T358] kill_block_super+0x79/0xd0 [ 655.038776][ T358] deactivate_locked_super+0xaf/0x100 [ 655.044126][ T358] deactivate_super+0x1b3/0x270 [ 655.048952][ T358] ? deactivate_locked_super+0x100/0x100 [ 655.054558][ T358] ? dput+0x4de/0x5d0 [ 655.058518][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 655.064059][ T358] ? find_next_bit+0xc6/0x110 [ 655.068969][ T358] cleanup_mnt+0x432/0x4e0 [ 655.073377][ T358] task_work_run+0x186/0x1b0 [ 655.077942][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 655.083480][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 655.089345][ T358] RIP: 0033:0x467a37 [ 655.093212][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.112803][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 655.121184][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 655.129216][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 655.137184][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 655.145146][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 655.153089][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 655.161040][ T358] ---[ end trace e8426e860f050b40 ]--- [ 655.178825][T25118] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.190470][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 655.194716][T25121] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 655.202138][T25108] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 655.289187][T25122] incfs: ino conflict with backing FS 1 06:11:58 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0xf000000) 06:11:58 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:58 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xe502000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.354212][T25125] FAULT_INJECTION: forcing a failure. [ 655.354212][T25125] name failslab, interval 1, probability 0, space 0, times 0 [ 655.359182][T25108] FAT-fs (loop3): Unrecognized mount option "./bus" or missing value [ 655.380559][T25125] CPU: 1 PID: 25125 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 655.383976][T25132] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.392190][T25125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.392194][T25125] Call Trace: [ 655.392212][T25125] dump_stack+0x1d8/0x24e [ 655.392223][T25125] ? devkmsg_release+0x11c/0x11c [ 655.392232][T25125] ? show_regs_print_info+0x12/0x12 [ 655.392239][T25125] ? arch_stack_walk+0xf8/0x140 [ 655.392254][T25125] ? _raw_spin_lock+0xa3/0x1b0 [ 655.413696][T25131] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.414085][T25125] should_fail+0x6f6/0x860 [ 655.457269][T25125] ? setup_fault_attr+0x3d0/0x3d0 [ 655.462270][T25125] ? fat_get_entry+0x955/0xa80 [ 655.467011][T25125] ? fat_parse_long+0x8d/0x9c0 [ 655.471798][T25125] should_failslab+0x5/0x20 [ 655.476286][T25125] kmem_cache_alloc+0x36/0x290 [ 655.481104][T25125] fat_parse_long+0x8d/0x9c0 [ 655.485672][T25125] fat_search_long+0x3a6/0x1390 [ 655.490510][T25125] ? asan.module_dtor+0x20/0x20 [ 655.495357][T25125] ? _raw_spin_lock+0xa3/0x1b0 [ 655.500114][T25125] ? __rcu_read_lock+0x50/0x50 [ 655.504974][T25125] ? mutex_lock+0x60/0x110 [ 655.509393][T25125] ? mutex_trylock+0xb0/0xb0 [ 655.513988][T25125] vfat_lookup+0x1a5/0x530 [ 655.518467][T25125] ? avc_denied+0x1c0/0x1c0 [ 655.522946][T25125] ? setup+0xf0/0xf0 [ 655.526917][T25125] ? _raw_spin_lock+0xa3/0x1b0 [ 655.531662][T25125] ? __rcu_read_lock+0x50/0x50 [ 655.536507][T25125] ? selinux_inode_permission+0x445/0x690 [ 655.542496][T25125] __lookup_slow+0x2f8/0x450 [ 655.547157][T25125] ? lookup_one_len+0x2c0/0x2c0 [ 655.552071][T25125] ? generic_permission+0x13a/0x490 [ 655.557252][T25125] lookup_one_len+0x17f/0x2c0 [ 655.562175][T25125] ? lookup_one_len_common+0x430/0x430 [ 655.567869][T25125] ? up_read+0x10/0x10 [ 655.572008][T25125] ? vfs_mkdir+0x4e2/0x5f0 [ 655.576406][T25125] incfs_lookup_dentry+0x5b/0xb0 [ 655.581320][T25125] open_or_create_special_dir+0x45/0x150 [ 655.587235][T25125] incfs_mount_fs+0x457/0x840 [ 655.594652][T25125] ? incfs_unlink+0x80/0x80 [ 655.599135][T25125] ? vfs_parse_fs_param+0x2cb/0x430 [ 655.604502][T25125] ? vfs_parse_fs_string+0x1e9/0x290 [ 655.609814][T25125] ? cap_capable+0x23f/0x280 [ 655.614384][T25125] legacy_get_tree+0xde/0x170 [ 655.619171][T25125] ? incfs_unlink+0x80/0x80 [ 655.623924][T25125] vfs_get_tree+0x83/0x260 [ 655.628393][T25125] do_mount+0x19d0/0x2670 [ 655.632834][T25125] ? copy_mount_string+0x30/0x30 [ 655.637775][T25125] ? _copy_from_user+0xa4/0xe0 [ 655.642517][T25125] ? copy_mount_options+0xc9/0x300 [ 655.647602][T25125] ? ksys_mount+0x8f/0xf0 [ 655.651905][T25125] ksys_mount+0xc2/0xf0 [ 655.656238][T25125] __x64_sys_mount+0xb1/0xc0 [ 655.661105][T25125] do_syscall_64+0xcb/0x1e0 [ 655.665593][T25125] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 655.671615][T25125] RIP: 0033:0x4665d9 [ 655.675488][T25125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 655.695096][T25125] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:11:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xb000000) 06:11:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 2 (fault-call:1 fault-nth:26): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf303000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x30e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.703492][T25125] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 655.711455][T25125] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 655.719401][T25125] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 655.727435][T25125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 655.735382][T25125] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 655.743736][T25125] incfs_lookup_dentry err:-12 [ 655.748539][T25125] incfs: Can't find or create .incomplete dir in ./file0 06:11:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x550000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x373}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf6ffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.788370][T25140] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 655.800079][T25142] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.815993][T25141] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.837064][T25146] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.861851][T25149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.882065][T25136] incfs: ino conflict with backing FS 1 06:11:59 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x10000000) [ 655.893748][T25149] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 655.912317][T25144] incfs: ino conflict with backing FS 1 [ 655.925529][T25155] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:59 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xc000000) 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x3f8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xf803000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.951534][T25156] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 655.978319][T25164] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 655.999160][T25168] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.018991][T25172] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.044817][T25157] FAULT_INJECTION: forcing a failure. [ 656.044817][T25157] name failslab, interval 1, probability 0, space 0, times 0 [ 656.057922][T25157] CPU: 1 PID: 25157 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 656.069716][T25157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.079855][T25157] Call Trace: [ 656.083174][T25157] dump_stack+0x1d8/0x24e [ 656.087489][T25157] ? devkmsg_release+0x11c/0x11c [ 656.092406][T25157] ? show_regs_print_info+0x12/0x12 [ 656.097693][T25157] ? __kasan_slab_free+0x20c/0x240 [ 656.102869][T25157] ? slab_free_freelist_hook+0x7b/0x150 [ 656.108498][T25157] ? kmem_cache_free+0xb8/0x5f0 [ 656.113448][T25157] ? fat_search_long+0x1053/0x1390 [ 656.118539][T25157] ? vfat_lookup+0x1a5/0x530 [ 656.123192][T25157] should_fail+0x6f6/0x860 [ 656.127586][T25157] ? setup_fault_attr+0x3d0/0x3d0 [ 656.132586][T25157] ? ebitmap_cmp+0x1b8/0x220 [ 656.137154][T25157] ? mls_compute_context_len+0x7dd/0x810 [ 656.142763][T25157] ? context_struct_to_string+0x43b/0x8b0 [ 656.148456][T25157] should_failslab+0x5/0x20 [ 656.152946][T25157] __kmalloc+0x5f/0x2f0 [ 656.157078][T25157] context_struct_to_string+0x43b/0x8b0 [ 656.162603][T25157] ? security_bounded_transition+0x560/0x560 [ 656.168641][T25157] ? symhash+0xe0/0xe0 [ 656.172779][T25157] ? hashtab_search+0x1bf/0x200 [ 656.177605][T25157] context_add_hash+0x13f/0x270 [ 656.182436][T25157] ? security_sid_to_context_inval+0x40/0x40 [ 656.188482][T25157] ? mls_context_isvalid+0x98/0x380 [ 656.193655][T25157] ? policydb_context_isvalid+0x1b6/0x400 [ 656.199349][T25157] security_compute_sid+0x1142/0x1d00 [ 656.204714][T25157] ? __rcu_read_lock+0x50/0x50 [ 656.209456][T25157] ? security_transition_sid+0x90/0x90 [ 656.214926][T25157] ? avc_denied+0x1c0/0x1c0 [ 656.219409][T25157] ? avc_has_perm_noaudit+0x400/0x400 [ 656.224755][T25157] ? avc_has_perm_noaudit+0x30c/0x400 [ 656.230099][T25157] security_transition_sid+0x78/0x90 [ 656.235362][T25157] may_create+0x62b/0x960 [ 656.239667][T25157] ? show_sid+0x250/0x250 [ 656.244057][T25157] ? selinux_inode_permission+0x445/0x690 [ 656.249750][T25157] ? selinux_inode_follow_link+0x3c0/0x3c0 [ 656.255555][T25157] ? from_kgid+0x206/0x350 [ 656.259944][T25157] ? make_kgid+0x390/0x390 [ 656.264334][T25157] ? generic_permission+0x13a/0x490 [ 656.269518][T25157] security_inode_mkdir+0x96/0x120 [ 656.274613][T25157] vfs_mkdir+0x34a/0x5f0 [ 656.278853][T25157] open_or_create_special_dir+0xba/0x150 [ 656.284561][T25157] incfs_mount_fs+0x457/0x840 [ 656.289232][T25157] ? incfs_unlink+0x80/0x80 [ 656.293727][T25157] ? vfs_parse_fs_param+0x2cb/0x430 [ 656.298907][T25157] ? vfs_parse_fs_string+0x1e9/0x290 [ 656.304169][T25157] ? cap_capable+0x23f/0x280 [ 656.308735][T25157] legacy_get_tree+0xde/0x170 [ 656.313386][T25157] ? incfs_unlink+0x80/0x80 [ 656.317878][T25157] vfs_get_tree+0x83/0x260 [ 656.322288][T25157] do_mount+0x19d0/0x2670 [ 656.326594][T25157] ? copy_mount_string+0x30/0x30 [ 656.331509][T25157] ? _copy_from_user+0xa4/0xe0 [ 656.336257][T25157] ? copy_mount_options+0xc9/0x300 [ 656.341342][T25157] ? ksys_mount+0x8f/0xf0 [ 656.345647][T25157] ksys_mount+0xc2/0xf0 [ 656.349792][T25157] __x64_sys_mount+0xb1/0xc0 [ 656.354360][T25157] do_syscall_64+0xcb/0x1e0 [ 656.358854][T25157] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 656.364740][T25157] RIP: 0033:0x4665d9 [ 656.368620][T25157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.388474][T25157] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:11:59 executing program 2 (fault-call:1 fault-nth:27): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:11:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x570000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffff7f00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:11:59 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x600}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.396866][T25157] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 656.404859][T25157] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 656.412818][T25157] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 656.420802][T25157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 656.428845][T25157] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 656.437677][T25157] incfs: Can't find or create .incomplete dir in ./file0 [ 656.440205][T25170] incfs: ino conflict with backing FS 1 [ 656.472784][ T358] BUG: Dentry ffff888199969bb0{i=0,n=.incomplete} still in use (1) [unmount of vfat loop2] [ 656.483233][ T358] ------------[ cut here ]------------ [ 656.488792][ T358] WARNING: CPU: 1 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 656.497620][ T358] Modules linked in: [ 656.501516][ T358] CPU: 1 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 656.513173][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 06:11:59 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff222d8c000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.523318][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 656.524189][T25183] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 656.528687][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 656.528692][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 06:12:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffffff00000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.528699][ T358] RAX: 0000000000000059 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 656.528709][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 656.572266][T25186] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.573805][ T358] RBP: ffff8881e712e420 R08: ffffffff814e9057 R09: ffffed103ede5e08 [ 656.573810][ T358] R10: ffffed103ede5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 656.573822][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888199969bb0 06:12:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff222d8d000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.585218][T25187] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 656.593175][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 656.593181][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.593185][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406e0 [ 656.593192][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 656.593196][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 656.593199][ T358] Call Trace: [ 656.593215][ T358] d_walk+0x2d9/0x540 [ 656.593229][ T358] ? __d_free+0x20/0x20 [ 656.653563][T25192] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.660124][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 656.660134][ T358] generic_shutdown_super+0x63/0x2a0 [ 656.660148][ T358] kill_block_super+0x79/0xd0 [ 656.677809][T25193] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 656.679802][ T358] deactivate_locked_super+0xaf/0x100 06:12:00 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x13000000) 06:12:00 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xd000000) 06:12:00 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:00 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff222dad000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:00 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 656.679810][ T358] deactivate_super+0x1b3/0x270 [ 656.679818][ T358] ? deactivate_locked_super+0x100/0x100 [ 656.679825][ T358] ? dput+0x4de/0x5d0 [ 656.679838][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 656.739217][T25196] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.743307][ T358] ? find_next_bit+0xc6/0x110 [ 656.743317][ T358] cleanup_mnt+0x432/0x4e0 [ 656.743327][ T358] task_work_run+0x186/0x1b0 [ 656.743341][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 656.774290][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 656.780264][ T358] RIP: 0033:0x467a37 [ 656.780442][T25200] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.784147][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 656.784152][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 656.784160][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 656.784171][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 656.796247][T25201] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 656.815304][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 656.815308][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 656.815312][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 656.815322][ T358] ---[ end trace e8426e860f050b41 ]--- [ 656.819520][ T358] BUG: Dentry ffff888199969bb0{i=0,n=.incomplete} still in use (1) [unmount of vfat loop2] [ 656.891177][ T358] ------------[ cut here ]------------ [ 656.896642][ T358] WARNING: CPU: 1 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 656.904935][ T358] Modules linked in: [ 656.908808][ T358] CPU: 1 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 656.920225][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.930282][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 656.935556][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff [ 656.955219][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 656.961356][ T358] RAX: 0000000000000059 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 656.969301][ T358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 656.977270][ T358] RBP: ffff8881e712e420 R08: ffffffff814e9057 R09: ffffed103ede5e08 [ 656.985214][ T358] R10: ffffed103ede5e08 R11: 0000000000000000 R12: dffffc0000000000 [ 656.993246][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff888199969bb0 [ 657.001191][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 657.010091][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.016648][ T358] CR2: 0000000000568000 CR3: 00000001a2495000 CR4: 00000000001406e0 [ 657.024679][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.032623][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.040654][ T358] Call Trace: [ 657.043922][ T358] d_walk+0x2d9/0x540 [ 657.047893][ T358] ? __d_free+0x20/0x20 [ 657.052041][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 657.057559][ T358] generic_shutdown_super+0x63/0x2a0 [ 657.062814][ T358] kill_block_super+0x79/0xd0 [ 657.067463][ T358] deactivate_locked_super+0xaf/0x100 [ 657.072805][ T358] deactivate_super+0x1b3/0x270 [ 657.077627][ T358] ? deactivate_locked_super+0x100/0x100 [ 657.083254][ T358] ? dput+0x4de/0x5d0 [ 657.087212][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 657.092757][ T358] ? find_next_bit+0xc6/0x110 [ 657.097412][ T358] cleanup_mnt+0x432/0x4e0 [ 657.101842][ T358] task_work_run+0x186/0x1b0 [ 657.106440][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 657.111958][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 657.117843][ T358] RIP: 0033:0x467a37 [ 657.121712][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.141290][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 657.149683][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 657.157627][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 657.165589][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 657.173534][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 657.181651][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 657.189599][ T358] ---[ end trace e8426e860f050b42 ]--- [ 657.195789][T25202] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 657.214134][ T358] VFS: Busy inodes after unmount of loop2. Self-destruct in 5 seconds. Have a nice day... [ 657.425147][T25208] incfs: ino conflict with backing FS 1 [ 657.432630][T25211] incfs: ino conflict with backing FS 1 [ 657.444305][T25214] FAULT_INJECTION: forcing a failure. [ 657.444305][T25214] name failslab, interval 1, probability 0, space 0, times 0 [ 657.457503][T25214] CPU: 1 PID: 25214 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 [ 657.469213][T25214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.479347][T25214] Call Trace: [ 657.482631][T25214] dump_stack+0x1d8/0x24e [ 657.487043][T25214] ? devkmsg_release+0x11c/0x11c [ 657.491966][T25214] ? show_regs_print_info+0x12/0x12 [ 657.497141][T25214] should_fail+0x6f6/0x860 [ 657.501689][T25214] ? setup_fault_attr+0x3d0/0x3d0 [ 657.506696][T25214] ? vfat_add_entry+0x35e/0x37b0 [ 657.511620][T25214] should_failslab+0x5/0x20 [ 657.516149][T25214] kmem_cache_alloc+0x36/0x290 [ 657.520914][T25214] vfat_add_entry+0x35e/0x37b0 [ 657.525656][T25214] ? __find_get_block+0xed7/0x10c0 [ 657.530847][T25214] ? time64_to_tm+0x643/0x770 [ 657.535508][T25214] ? vfat_rename+0xff0/0xff0 [ 657.540351][T25214] ? __brelse+0x54/0x90 [ 657.544499][T25214] ? fat_zeroed_cluster+0x7bb/0x820 [ 657.549772][T25214] ? mark_buffer_dirty_inode+0x22b/0x300 [ 657.555825][T25214] ? fat_alloc_new_dir+0x857/0xd70 [ 657.565604][T25214] ? __fat_remove_entries+0x4f0/0x4f0 [ 657.571043][T25214] ? ktime_get_coarse_real_ts64+0xcf/0xe0 [ 657.576851][T25214] ? iput+0x100/0x810 [ 657.580902][T25214] vfat_mkdir+0x1a8/0x420 [ 657.585304][T25214] ? vfat_unlink+0x3a0/0x3a0 [ 657.589943][T25214] ? generic_permission+0x13a/0x490 [ 657.595120][T25214] ? security_inode_mkdir+0xdd/0x120 [ 657.600380][T25214] vfs_mkdir+0x416/0x5f0 [ 657.604602][T25214] open_or_create_special_dir+0xba/0x150 [ 657.610209][T25214] incfs_mount_fs+0x457/0x840 [ 657.614873][T25214] ? incfs_unlink+0x80/0x80 [ 657.619426][T25214] ? vfs_parse_fs_param+0x2cb/0x430 [ 657.624610][T25214] ? vfs_parse_fs_string+0x1e9/0x290 [ 657.629878][T25214] ? cap_capable+0x23f/0x280 [ 657.634588][T25214] legacy_get_tree+0xde/0x170 [ 657.639244][T25214] ? incfs_unlink+0x80/0x80 [ 657.643726][T25214] vfs_get_tree+0x83/0x260 [ 657.648125][T25214] do_mount+0x19d0/0x2670 [ 657.652432][T25214] ? copy_mount_string+0x30/0x30 [ 657.657362][T25214] ? _copy_from_user+0xa4/0xe0 [ 657.662103][T25214] ? copy_mount_options+0xc9/0x300 [ 657.667381][T25214] ? ksys_mount+0x8f/0xf0 [ 657.671689][T25214] ksys_mount+0xc2/0xf0 [ 657.675823][T25214] __x64_sys_mount+0xb1/0xc0 [ 657.680402][T25214] do_syscall_64+0xcb/0x1e0 [ 657.684880][T25214] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 657.690750][T25214] RIP: 0033:0x4665d9 [ 657.694672][T25214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 657.714375][T25214] RSP: 002b:00007ff222dac188 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 06:12:01 executing program 2 (fault-call:1 fault-nth:28): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) 06:12:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff222fad000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:01 executing program 1: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./bus\x00', 0x0, 0x0, 0x0, 0x40000000) 06:12:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb3c906d6b66732e66617400020101000240008000f801", 0x17}, {0x0, 0x0, 0x1000}], 0x0, &(0x7f0000000180)=ANY=[]) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xe000000) [ 657.722759][T25214] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004665d9 [ 657.730886][T25214] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000020000080 [ 657.738835][T25214] RBP: 00007ff222dac1d0 R08: 0000000000000000 R09: 0000000000000000 [ 657.746779][T25214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 657.754776][T25214] R13: 00007ffe6da31d5f R14: 00007ff222dac300 R15: 0000000000022000 [ 657.764141][T25214] incfs: Can't find or create .incomplete dir in ./file0 06:12:01 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7ff2231ad000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 657.779779][ T358] BUG: Dentry ffff88819388c220{i=0,n=.incomplete} still in use (1) [unmount of vfat loop2] [ 657.789974][ T358] ------------[ cut here ]------------ [ 657.791132][T25221] ref_ctr_offset mismatch. inode: 0x361d offset: 0x0 ref_ctr_offset(old): 0x6 ref_ctr_offset(new): 0x4 [ 657.795429][ T358] WARNING: CPU: 1 PID: 358 at fs/dcache.c:1597 umount_check+0x179/0x1c0 [ 657.795431][ T358] Modules linked in: [ 657.818871][ T358] CPU: 1 PID: 358 Comm: syz-executor.2 Tainted: G W 5.4.125-syzkaller-00234-g47fe7966921f #0 06:12:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 657.819462][T25222] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.830340][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 657.830355][ T358] RIP: 0010:umount_check+0x179/0x1c0 [ 657.830363][ T358] Code: ff 4c 8b 0b 48 81 c5 20 04 00 00 48 c7 c7 20 06 e9 84 4c 89 fe 4c 89 f2 4c 89 f9 45 89 e8 31 c0 55 e8 57 a6 af ff 48 83 c4 08 <0f> 0b e9 fd fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c d4 fe ff 06:12:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xb00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:01 executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 657.830374][ T358] RSP: 0018:ffff8881a24d7c58 EFLAGS: 00010282 [ 657.862904][T25225] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.876693][ T358] RAX: 0000000000000059 RBX: ffffffff85fc5c00 RCX: 5f58976289bc0800 [ 657.876697][ T358] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 657.876702][ T358] RBP: ffff8881a1bd0420 R08: ffffffff814e9057 R09: ffffed103ede5e08 [ 657.876705][ T358] R10: ffffed103ede5e08 R11: 0000000000000000 R12: dffffc0000000000 06:12:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xc00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 06:12:01 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1100}, 0x0, 0x0, 0x0, 0x0, 0xd00}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 657.876709][ T358] R13: 0000000000000001 R14: 0000000000000000 R15: ffff88819388c220 [ 657.876715][ T358] FS: 00000000028e9400(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 657.876726][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.897217][T25224] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.902264][ T358] CR2: 00000000028f2b38 CR3: 00000001a2495000 CR4: 00000000001406e0 [ 657.902271][ T358] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 657.902275][ T358] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 657.902278][ T358] Call Trace: [ 657.902292][ T358] d_walk+0x2d9/0x540 [ 657.902307][ T358] ? __d_free+0x20/0x20 [ 657.923876][T25227] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.926221][ T358] shrink_dcache_for_umount+0x8a/0x1a0 [ 657.926236][ T358] generic_shutdown_super+0x63/0x2a0 [ 657.949803][T25229] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.961037][ T358] kill_block_super+0x79/0xd0 [ 657.961046][ T358] deactivate_locked_super+0xaf/0x100 [ 657.961053][ T358] deactivate_super+0x1b3/0x270 [ 657.961066][ T358] ? deactivate_locked_super+0x100/0x100 [ 657.985691][T25231] ref_ctr_offset mismatch. inode: 0x361d offset: 0x1100 ref_ctr_offset(old): 0x10 ref_ctr_offset(new): 0x4 [ 657.988235][ T358] ? dput+0x4de/0x5d0 [ 657.988249][ T358] ? _raw_spin_lock_irqsave+0x210/0x210 [ 658.071430][ T358] ? find_next_bit+0xc6/0x110 [ 658.076085][ T358] cleanup_mnt+0x432/0x4e0 [ 658.080560][ T358] task_work_run+0x186/0x1b0 [ 658.085149][ T358] prepare_exit_to_usermode+0x2b0/0x310 [ 658.090698][ T358] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 658.096565][ T358] RIP: 0033:0x467a37 [ 658.100442][ T358] Code: ff d0 48 89 c7 b8 3c 00 00 00 0f 05 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 0f 1f 44 00 00 b8 a6 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 658.120023][ T358] RSP: 002b:00007ffe6da30ea8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 658.128405][ T358] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000467a37 [ 658.136353][ T358] RDX: 00007ffe6da30f7c RSI: 0000000000000002 RDI: 00007ffe6da30f70 [ 658.144303][ T358] RBP: 00007ffe6da30f70 R08: 00000000ffffffff R09: 00007ffe6da30d40 [ 658.152425][ T358] R10: 00000000028eabd3 R11: 0000000000000246 R12: 00000000004bee70 [ 658.160371][ T358] R13: 00007ffe6da32040 R14: 00000000028eab00 R15: 00007ffe6da32080 [ 658.168409][ T358] ---[ end trace e8426e860f050b43 ]---