program:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080))
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
fchownat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) (fail_nth: 17)
[ 71.927875][ T4670] Bluetooth: hci0: command tx timeout
[ 72.022505][ T5324] FAULT_INJECTION: forcing a failure.
[ 72.022505][ T5324] name failslab, interval 1, probability 0, space 0, times 1
[ 72.027089][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller #0
[ 72.030270][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.034244][ T5324] Call Trace:
[ 72.035517][ T5324]
[ 72.036542][ T5324] dump_stack_lvl+0x241/0x360
[ 72.038316][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.040137][ T5324] ? __pfx__printk+0x10/0x10
[ 72.041582][ T5324] ? __kmalloc_cache_noprof+0x44/0x2c0
[ 72.043183][ T5324] ? __pfx___might_resched+0x10/0x10
[ 72.044892][ T5324] should_fail_ex+0x3b0/0x4e0
[ 72.046504][ T5324] should_failslab+0xac/0x100
[ 72.048054][ T5324] ? ovl_encode_real_fh+0xdf/0x410
[ 72.049812][ T5324] __kmalloc_cache_noprof+0x6c/0x2c0
[ 72.051610][ T5324] ? dput+0x37/0x2b0
[ 72.053280][ T5324] ovl_encode_real_fh+0xdf/0x410
[ 72.055114][ T5324] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 72.057148][ T5324] ? _raw_spin_unlock+0x28/0x50
[ 72.058916][ T5324] ovl_encode_fh+0x388/0xc20
[ 72.060591][ T5324] exportfs_encode_fh+0x1bd/0x3e0
[ 72.062458][ T5324] ovl_encode_real_fh+0x129/0x410
[ 72.064345][ T5324] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 72.066257][ T5324] ovl_lookup_index+0x71/0x6e0
[ 72.067944][ T5324] ? __kmalloc_noprof+0x21a/0x400
[ 72.069800][ T5324] ovl_lookup+0x1d6b/0x2a60
[ 72.071593][ T5324] ? __pfx_ovl_lookup+0x10/0x10
[ 72.073436][ T5324] ? d_alloc_parallel+0x14a8/0x1600
[ 72.075249][ T5324] ? d_alloc_parallel+0x311/0x1600
[ 72.077208][ T5324] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 72.079415][ T5324] ? __pfx_d_alloc_parallel+0x10/0x10
[ 72.081198][ T5324] ? __init_waitqueue_head+0xae/0x150
[ 72.083230][ T5324] __lookup_slow+0x28c/0x3f0
[ 72.084964][ T5324] ? __pfx___lookup_slow+0x10/0x10
[ 72.086858][ T5324] ? try_to_unlazy+0x35c/0x5b0
[ 72.088669][ T5324] lookup_slow+0x53/0x70
[ 72.090229][ T5324] walk_component+0x2e1/0x410
[ 72.092005][ T5324] path_lookupat+0x16f/0x450
[ 72.093779][ T5324] filename_lookup+0x256/0x610
[ 72.095616][ T5324] ? __pfx_filename_lookup+0x10/0x10
[ 72.097412][ T5324] ? strncpy_from_user+0x13a/0x260
[ 72.099261][ T5324] ? getname_flags+0x1e3/0x540
[ 72.100990][ T5324] user_path_at+0x3a/0x60
[ 72.102594][ T5324] do_fchownat+0xed/0x240
[ 72.104299][ T5324] ? __pfx_do_fchownat+0x10/0x10
[ 72.106140][ T5324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 72.108454][ T5324] ? do_syscall_64+0x100/0x230
[ 72.110241][ T5324] __x64_sys_fchownat+0xb5/0xd0
[ 72.111988][ T5324] do_syscall_64+0xf3/0x230
[ 72.113648][ T5324] ? clear_bhb_loop+0x35/0x90
[ 72.115257][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.117529][ T5324] RIP: 0033:0x7f9a9097e719
[ 72.119230][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.126057][ T5324] RSP: 002b:00007f9a9175c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 72.129260][ T5324] RAX: ffffffffffffffda RBX: 00007f9a90b35f80 RCX: 00007f9a9097e719
[ 72.132263][ T5324] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 72.135203][ T5324] RBP: 00007f9a9175c090 R08: 0000000000000000 R09: 0000000000000000
[ 72.138029][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 72.140983][ T5324] R13: 0000000000000000 R14: 00007f9a90b35f80 R15: 00007ffd0b79b4e8
[ 72.143928][ T5324]
[ 72.156975][ T5324] ------------[ cut here ]------------
[ 72.159134][ T5324] WARNING: CPU: 0 PID: 5324 at fs/overlayfs/copy_up.c:448 ovl_encode_real_fh+0x2e2/0x410
[ 72.162396][ T5324] Modules linked in:
[ 72.163578][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller #0
[ 72.166405][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.170482][ T5324] RIP: 0010:ovl_encode_real_fh+0x2e2/0x410
[ 72.172666][ T5324] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 ba 75 fe 90 0f 0b 90 eb 14 e8 da ba 75 fe 90 0f 0b 90 eb 09 e8 cf ba 75 fe 90 <0f> 0b 90 4c 89 ff e8 d3 66 d3 fe 49 c7 c7 fb ff ff ff eb 8b 89 d1
[ 72.180055][ T5324] RSP: 0018:ffffc9000d3ef580 EFLAGS: 00010293
[ 72.182223][ T5324] RAX: ffffffff831f1dc1 RBX: 1ffff92001a7deb8 RCX: ffff88801f012440
[ 72.185142][ T5324] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff
[ 72.188307][ T5324] RBP: ffffc9000d3ef630 R08: ffffffff831f1c5c R09: 1ffffffff203a065
[ 72.191376][ T5324] R10: dffffc0000000000 R11: fffffbfff203a066 R12: 00000000000000ff
[ 72.194373][ T5324] R13: 0000000000000080 R14: 1ffff92001a7deb4 R15: ffff88801bb57b00
[ 72.197447][ T5324] FS: 00007f9a9175c6c0(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000
[ 72.200684][ T5324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 72.203060][ T5324] CR2: 00007f9a90b0d538 CR3: 0000000043dce000 CR4: 0000000000352ef0
[ 72.206068][ T5324] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 72.209165][ T5324] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 72.211994][ T5324] Call Trace:
[ 72.213252][ T5324]
[ 72.214300][ T5324] ? __warn+0x168/0x4e0
[ 72.215995][ T5324] ? ovl_encode_real_fh+0x2e2/0x410
[ 72.218016][ T5324] ? report_bug+0x2b3/0x500
[ 72.219703][ T5324] ? ovl_encode_real_fh+0x2e2/0x410
[ 72.221600][ T5324] ? handle_bug+0x60/0x90
[ 72.223219][ T5324] ? exc_invalid_op+0x1a/0x50
[ 72.224876][ T5324] ? asm_exc_invalid_op+0x1a/0x20
[ 72.226744][ T5324] ? ovl_encode_real_fh+0x17c/0x410
[ 72.228692][ T5324] ? ovl_encode_real_fh+0x2e1/0x410
[ 72.230745][ T5324] ? ovl_encode_real_fh+0x2e2/0x410
[ 72.232703][ T5324] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 72.234761][ T5324] ovl_lookup_index+0x71/0x6e0
[ 72.236432][ T5324] ? __kmalloc_noprof+0x21a/0x400
[ 72.238587][ T5324] ovl_lookup+0x1d6b/0x2a60
[ 72.240223][ T5324] ? __pfx_ovl_lookup+0x10/0x10
[ 72.241950][ T5324] ? d_alloc_parallel+0x14a8/0x1600
[ 72.243924][ T5324] ? d_alloc_parallel+0x311/0x1600
[ 72.245935][ T5324] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 72.248507][ T5324] ? __pfx_d_alloc_parallel+0x10/0x10
[ 72.250526][ T5324] ? __init_waitqueue_head+0xae/0x150
[ 72.252492][ T5324] __lookup_slow+0x28c/0x3f0
[ 72.254222][ T5324] ? __pfx___lookup_slow+0x10/0x10
[ 72.256001][ T5324] ? try_to_unlazy+0x35c/0x5b0
[ 72.258014][ T5324] lookup_slow+0x53/0x70
[ 72.259551][ T5324] walk_component+0x2e1/0x410
[ 72.261251][ T5324] path_lookupat+0x16f/0x450
[ 72.262992][ T5324] filename_lookup+0x256/0x610
[ 72.264820][ T5324] ? __pfx_filename_lookup+0x10/0x10
[ 72.266717][ T5324] ? strncpy_from_user+0x13a/0x260
[ 72.268753][ T5324] ? getname_flags+0x1e3/0x540
[ 72.270493][ T5324] user_path_at+0x3a/0x60
[ 72.272139][ T5324] do_fchownat+0xed/0x240
[ 72.273772][ T5324] ? __pfx_do_fchownat+0x10/0x10
[ 72.275587][ T5324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 72.277984][ T5324] ? do_syscall_64+0x100/0x230
[ 72.279740][ T5324] __x64_sys_fchownat+0xb5/0xd0
[ 72.281573][ T5324] do_syscall_64+0xf3/0x230
[ 72.283289][ T5324] ? clear_bhb_loop+0x35/0x90
[ 72.285046][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.287147][ T5324] RIP: 0033:0x7f9a9097e719
[ 72.288921][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.296128][ T5324] RSP: 002b:00007f9a9175c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 72.299562][ T5324] RAX: ffffffffffffffda RBX: 00007f9a90b35f80 RCX: 00007f9a9097e719
[ 72.302576][ T5324] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 72.305585][ T5324] RBP: 00007f9a9175c090 R08: 0000000000000000 R09: 0000000000000000
[ 72.308521][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 72.311519][ T5324] R13: 0000000000000000 R14: 00007f9a90b35f80 R15: 00007ffd0b79b4e8
[ 72.314529][ T5324]
[ 72.315740][ T5324] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 72.318451][ T5324] CPU: 0 UID: 0 PID: 5324 Comm: syz.0.0 Not tainted 6.12.0-rc5-syzkaller #0
[ 72.321615][ T5324] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 72.325744][ T5324] Call Trace:
[ 72.326950][ T5324]
[ 72.328015][ T5324] dump_stack_lvl+0x241/0x360
[ 72.329630][ T5324] ? __pfx_dump_stack_lvl+0x10/0x10
[ 72.331377][ T5324] ? __pfx__printk+0x10/0x10
[ 72.332986][ T5324] ? vscnprintf+0x5d/0x90
[ 72.334563][ T5324] panic+0x349/0x880
[ 72.335866][ T5324] ? __warn+0x177/0x4e0
[ 72.337254][ T5324] ? __pfx_panic+0x10/0x10
[ 72.338846][ T5324] __warn+0x34b/0x4e0
[ 72.340173][ T5324] ? ovl_encode_real_fh+0x2e2/0x410
[ 72.342005][ T5324] report_bug+0x2b3/0x500
[ 72.343407][ T5324] ? ovl_encode_real_fh+0x2e2/0x410
[ 72.345505][ T5324] handle_bug+0x60/0x90
[ 72.347245][ T5324] exc_invalid_op+0x1a/0x50
[ 72.348983][ T5324] asm_exc_invalid_op+0x1a/0x20
[ 72.350647][ T5324] RIP: 0010:ovl_encode_real_fh+0x2e2/0x410
[ 72.352809][ T5324] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc e8 e5 ba 75 fe 90 0f 0b 90 eb 14 e8 da ba 75 fe 90 0f 0b 90 eb 09 e8 cf ba 75 fe 90 <0f> 0b 90 4c 89 ff e8 d3 66 d3 fe 49 c7 c7 fb ff ff ff eb 8b 89 d1
[ 72.360132][ T5324] RSP: 0018:ffffc9000d3ef580 EFLAGS: 00010293
[ 72.362518][ T5324] RAX: ffffffff831f1dc1 RBX: 1ffff92001a7deb8 RCX: ffff88801f012440
[ 72.365131][ T5324] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff
[ 72.367863][ T5324] RBP: ffffc9000d3ef630 R08: ffffffff831f1c5c R09: 1ffffffff203a065
[ 72.370647][ T5324] R10: dffffc0000000000 R11: fffffbfff203a066 R12: 00000000000000ff
[ 72.373617][ T5324] R13: 0000000000000080 R14: 1ffff92001a7deb4 R15: ffff88801bb57b00
[ 72.376609][ T5324] ? ovl_encode_real_fh+0x17c/0x410
[ 72.378574][ T5324] ? ovl_encode_real_fh+0x2e1/0x410
[ 72.380465][ T5324] ? __pfx_ovl_encode_real_fh+0x10/0x10
[ 72.382519][ T5324] ovl_lookup_index+0x71/0x6e0
[ 72.384270][ T5324] ? __kmalloc_noprof+0x21a/0x400
[ 72.386011][ T5324] ovl_lookup+0x1d6b/0x2a60
[ 72.387620][ T5324] ? __pfx_ovl_lookup+0x10/0x10
[ 72.389351][ T5324] ? d_alloc_parallel+0x14a8/0x1600
[ 72.391065][ T5324] ? d_alloc_parallel+0x311/0x1600
[ 72.392835][ T5324] ? __pfx_lockdep_init_map_type+0x10/0x10
[ 72.394853][ T5324] ? __pfx_d_alloc_parallel+0x10/0x10
[ 72.396685][ T5324] ? __init_waitqueue_head+0xae/0x150
[ 72.398587][ T5324] __lookup_slow+0x28c/0x3f0
[ 72.400288][ T5324] ? __pfx___lookup_slow+0x10/0x10
[ 72.402212][ T5324] ? try_to_unlazy+0x35c/0x5b0
[ 72.404006][ T5324] lookup_slow+0x53/0x70
[ 72.405554][ T5324] walk_component+0x2e1/0x410
[ 72.407277][ T5324] path_lookupat+0x16f/0x450
[ 72.408913][ T5324] filename_lookup+0x256/0x610
[ 72.410734][ T5324] ? __pfx_filename_lookup+0x10/0x10
[ 72.412552][ T5324] ? strncpy_from_user+0x13a/0x260
[ 72.414405][ T5324] ? getname_flags+0x1e3/0x540
[ 72.416148][ T5324] user_path_at+0x3a/0x60
[ 72.417714][ T5324] do_fchownat+0xed/0x240
[ 72.419325][ T5324] ? __pfx_do_fchownat+0x10/0x10
[ 72.421125][ T5324] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 72.423421][ T5324] ? do_syscall_64+0x100/0x230
[ 72.425108][ T5324] __x64_sys_fchownat+0xb5/0xd0
[ 72.426900][ T5324] do_syscall_64+0xf3/0x230
[ 72.428536][ T5324] ? clear_bhb_loop+0x35/0x90
[ 72.430210][ T5324] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 72.432442][ T5324] RIP: 0033:0x7f9a9097e719
[ 72.434049][ T5324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 72.440974][ T5324] RSP: 002b:00007f9a9175c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104
[ 72.443912][ T5324] RAX: ffffffffffffffda RBX: 00007f9a90b35f80 RCX: 00007f9a9097e719
[ 72.446886][ T5324] RDX: 0000000000000000 RSI: 0000000020000440 RDI: ffffffffffffff9c
[ 72.449827][ T5324] RBP: 00007f9a9175c090 R08: 0000000000000000 R09: 0000000000000000
[ 72.452737][ T5324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 72.455607][ T5324] R13: 0000000000000000 R14: 00007f9a90b35f80 R15: 00007ffd0b79b4e8
[ 72.458496][ T5324]
[ 72.459927][ T5324] Kernel Offset: disabled
[ 72.461648][ T5324] Rebooting in 86400 seconds..