Extracting prog: 2m1.096349824s
Minimizing prog: 23m31.130222954s
Simplifying prog options: 0s
Extracting C: 1m16.798609558s
Simplifying C: 7m0.346456326s


extracting reproducer from 19 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program crashed: WARNING in ovl_copy_up_file
single: successfully extracted reproducer
found reproducer with 6 syscalls
minimizing guilty program
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$eJzsVb9OOkEQ/pZbDn6/wlgbEwuJQiEchxo7rQwP4ANI4ETi4R+ORCEUZ8V72PAaFr6DhcYGC2NigbXmzO7OnUuvBpL9kuWb+XZnZ3bDzR4HF0EGwOdkUMceJCws4IExcAArTGn7GcWvtuIi+S9ccYH0G+JH4qDXP6n5vtf5ReMvchhj/o2IzUQZs2TAUp/prNTzw8a3u3udwpvsZfeTQV0YhwCiKIqE1lCD6WvEzdxpa5a4HMxClKwRzU846wBK3fZ5Kej1N1rtWtNreqeuW9l2Nh1nyy0dtXzPUb9MS5FSlw/BBQCip/7T5tMAnqjB/lf0QSEybVwazTMVm5axttac86uYQkqLjZnhNslLvV3+OQ6whiyAy5Bpak7uwiGPVAWDRU6Za/WpXFk5Uayf+Y0hGFgcNgJP9iiPkU4cV3cqO2Fc9pA4R1wlHhGPieM3K36LuNzhmbx8CNi4qnW7nbKQlJVobqK5i6F+YSLruz19uOUMDAwMDAwMDAzmDF8BAAD//5ETX+k=")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$eJzsVb9OOkEQ/pZbDn6/wlgbEwuJQiEchxo7rQwP4ANI4ETi4R+ORCEUZ8V72PAaFr6DhcYGC2NigbXmzO7OnUuvBpL9kuWb+XZnZ3bDzR4HF0EGwOdkUMceJCws4IExcAArTGn7GcWvtuIi+S9ccYH0G+JH4qDXP6n5vtf5ReMvchhj/o2IzUQZs2TAUp/prNTzw8a3u3udwpvsZfeTQV0YhwCiKIqE1lCD6WvEzdxpa5a4HMxClKwRzU846wBK3fZ5Kej1N1rtWtNreqeuW9l2Nh1nyy0dtXzPUb9MS5FSlw/BBQCip/7T5tMAnqjB/lf0QSEybVwazTMVm5axttac86uYQkqLjZnhNslLvV3+OQ6whiyAy5Bpak7uwiGPVAWDRU6Za/WpXFk5Uayf+Y0hGFgcNgJP9iiPkU4cV3cqO2Fc9pA4R1wlHhGPieM3K36LuNzhmbx8CNi4qnW7nbKQlJVobqK5i6F+YSLruz19uOUMDAwMDAwMDAzmDF8BAAD//5ETX+k=")
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$eJzsVb9OOkEQ/pZbDn6/wlgbEwuJQiEchxo7rQwP4ANI4ETi4R+ORCEUZ8V72PAaFr6DhcYGC2NigbXmzO7OnUuvBpL9kuWb+XZnZ3bDzR4HF0EGwOdkUMceJCws4IExcAArTGn7GcWvtuIi+S9ccYH0G+JH4qDXP6n5vtf5ReMvchhj/o2IzUQZs2TAUp/prNTzw8a3u3udwpvsZfeTQV0YhwCiKIqE1lCD6WvEzdxpa5a4HMxClKwRzU846wBK3fZ5Kej1N1rtWtNreqeuW9l2Nh1nyy0dtXzPUb9MS5FSlw/BBQCip/7T5tMAnqjB/lf0QSEybVwazTMVm5axttac86uYQkqLjZnhNslLvV3+OQ6whiyAy5Bpak7uwiGPVAWDRU6Za/WpXFk5Uayf+Y0hGFgcNgJP9iiPkU4cV3cqO2Fc9pA4R1wlHhGPieM3K36LuNzhmbx8CNi4qnW7nbKQlJVobqK5i6F+YSLruz19uOUMDAwMDAwMDAzmDF8BAAD//5ETX+k=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program did not crash
testing program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$eJzsVb9OOkEQ/pZbDn6/wlgbEwuJQiEchxo7rQwP4ANI4ETi4R+ORCEUZ8V72PAaFr6DhcYGC2NigbXmzO7OnUuvBpL9kuWb+XZnZ3bDzR4HF0EGwOdkUMceJCws4IExcAArTGn7GcWvtuIi+S9ccYH0G+JH4qDXP6n5vtf5ReMvchhj/o2IzUQZs2TAUp/prNTzw8a3u3udwpvsZfeTQV0YhwCiKIqE1lCD6WvEzdxpa5a4HMxClKwRzU846wBK3fZ5Kej1N1rtWtNreqeuW9l2Nh1nyy0dtXzPUb9MS5FSlw/BBQCip/7T5tMAnqjB/lf0QSEybVwazTMVm5axttac86uYQkqLjZnhNslLvV3+OQ6whiyAy5Bpak7uwiGPVAWDRU6Za/WpXFk5Uayf+Y0hGFgcNgJP9iiPkU4cV3cqO2Fc9pA4R1wlHhGPieM3K36LuNzhmbx8CNi4qnW7nbKQlJVobqK5i6F+YSLruz19uOUMDAwMDAwMDAzmDF8BAAD//5ETX+k=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

program did not crash
extracting C reproducer
testing compiled C program (duration=42.990391659s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
simplifying C reproducer
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:true Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing compiled C program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
program crashed: WARNING in ovl_copy_up_file
testing program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program crashed: WARNING in ovl_copy_up_file
validation run: crashed=true
testing program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$eJzsVb9OOkEQ/pZbDn6/wlgbEwuJQiEchxo7rQwP4ANI4ETi4R+ORCEUZ8V72PAaFr6DhcYGC2NigbXmzO7OnUuvBpL9kuWb+XZnZ3bDzR4HF0EGwOdkUMceJCws4IExcAArTGn7GcWvtuIi+S9ccYH0G+JH4qDXP6n5vtf5ReMvchhj/o2IzUQZs2TAUp/prNTzw8a3u3udwpvsZfeTQV0YhwCiKIqE1lCD6WvEzdxpa5a4HMxClKwRzU846wBK3fZ5Kej1N1rtWtNreqeuW9l2Nh1nyy0dtXzPUb9MS5FSlw/BBQCip/7T5tMAnqjB/lf0QSEybVwazTMVm5axttac86uYQkqLjZnhNslLvV3+OQ6whiyAy5Bpak7uwiGPVAWDRU6Za/WpXFk5Uayf+Y0hGFgcNgJP9iiPkU4cV3cqO2Fc9pA4R1wlHhGPieM3K36LuNzhmbx8CNi4qnW7nbKQlJVobqK5i6F+YSLruz19uOUMDAwMDAwMDAzmDF8BAAD//5ETX+k=")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program crashed: WARNING in ovl_copy_up_file
validation run: crashed=true
testing program (duration=42.990391659s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_mount_image$squashfs-mkdirat-mkdirat-mount$overlay-chdir-openat
detailed listing:
executing program 0:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d04697c677c35700ad775f9ee1ae34b796b23373b3e00423b045d36ecccd4c1eaec2f355610ffff6fefb6c2c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b67"], 0x0, 0x188, &(0x7f0000000540)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)

program crashed: WARNING in ovl_copy_up_file
validation run: crashed=true
reproducing took 37m56.895798663s
repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 8
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6694 at fs/overlayfs/copy_up.c:276 ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
Modules linked in:
CPU: 1 UID: 0 PID: 6694 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
lr : ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
sp : ffff80009fc86ee0
x29: ffff80009fc86fc0 x28: dfff800000000000 x27: 0000000000000000
x26: ffff80009fc86f20 x25: ffff0000cd142000 x24: ffff0000edd1b318
x23: fc0000000000000a x22: ffff700013f90de4 x21: 0000000000000000
x20: ffff0000edd1b318 x19: ffff0000cb326000 x18: 00000000ffffffff
x17: ffff80009353a000 x16: ffff80008af86288 x15: 0000000000000002
x14: 1ffff00013f90de8 x13: 0000000000000000 x12: 0000000000000000
x11: ffff700013f90dea x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000ddebbd00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000000 x1 : fc0000000000000a x0 : 0000000000000000
Call trace:
 ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276 (P)
 ovl_copy_up_tmpfile fs/overlayfs/copy_up.c:885 [inline]
 ovl_do_copy_up fs/overlayfs/copy_up.c:999 [inline]
 ovl_copy_up_one fs/overlayfs/copy_up.c:1202 [inline]
 ovl_copy_up_flags+0x1104/0x28a0 fs/overlayfs/copy_up.c:1257
 ovl_maybe_copy_up+0x108/0x148 fs/overlayfs/copy_up.c:1287
 ovl_open+0x128/0x2b4 fs/overlayfs/file.c:211
 do_dentry_open+0x7a4/0x10bc fs/open.c:965
 vfs_open+0x44/0x2d4 fs/open.c:1095
 do_open fs/namei.c:3887 [inline]
 path_openat+0x2424/0x2c40 fs/namei.c:4046
 do_filp_open+0x18c/0x36c fs/namei.c:4073
 do_sys_openat2+0x11c/0x1b4 fs/open.c:1435
 do_sys_open fs/open.c:1450 [inline]
 __do_sys_openat fs/open.c:1466 [inline]
 __se_sys_openat fs/open.c:1461 [inline]
 __arm64_sys_openat+0x120/0x158 fs/open.c:1461
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 5184
hardirqs last  enabled at (5183): [<ffff800080c72918>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234
hardirqs last disabled at (5184): [<ffff80008b01a1ac>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (3772): [<ffff800080201608>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (3770): [<ffff8000802015d4>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---

final repro crashed as (corrupted=false):
loop0: detected capacity change from 0 to 8
------------[ cut here ]------------
WARNING: CPU: 1 PID: 6694 at fs/overlayfs/copy_up.c:276 ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
Modules linked in:
CPU: 1 UID: 0 PID: 6694 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT 
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--)
pc : ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
lr : ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276
sp : ffff80009fc86ee0
x29: ffff80009fc86fc0 x28: dfff800000000000 x27: 0000000000000000
x26: ffff80009fc86f20 x25: ffff0000cd142000 x24: ffff0000edd1b318
x23: fc0000000000000a x22: ffff700013f90de4 x21: 0000000000000000
x20: ffff0000edd1b318 x19: ffff0000cb326000 x18: 00000000ffffffff
x17: ffff80009353a000 x16: ffff80008af86288 x15: 0000000000000002
x14: 1ffff00013f90de8 x13: 0000000000000000 x12: 0000000000000000
x11: ffff700013f90dea x10: 0000000000ff0100 x9 : 0000000000000000
x8 : ffff0000ddebbd00 x7 : 0000000000000000 x6 : 0000000000000000
x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010
x2 : 0000000000000000 x1 : fc0000000000000a x0 : 0000000000000000
Call trace:
 ovl_copy_up_file+0x538/0x57c fs/overlayfs/copy_up.c:276 (P)
 ovl_copy_up_tmpfile fs/overlayfs/copy_up.c:885 [inline]
 ovl_do_copy_up fs/overlayfs/copy_up.c:999 [inline]
 ovl_copy_up_one fs/overlayfs/copy_up.c:1202 [inline]
 ovl_copy_up_flags+0x1104/0x28a0 fs/overlayfs/copy_up.c:1257
 ovl_maybe_copy_up+0x108/0x148 fs/overlayfs/copy_up.c:1287
 ovl_open+0x128/0x2b4 fs/overlayfs/file.c:211
 do_dentry_open+0x7a4/0x10bc fs/open.c:965
 vfs_open+0x44/0x2d4 fs/open.c:1095
 do_open fs/namei.c:3887 [inline]
 path_openat+0x2424/0x2c40 fs/namei.c:4046
 do_filp_open+0x18c/0x36c fs/namei.c:4073
 do_sys_openat2+0x11c/0x1b4 fs/open.c:1435
 do_sys_open fs/open.c:1450 [inline]
 __do_sys_openat fs/open.c:1466 [inline]
 __se_sys_openat fs/open.c:1461 [inline]
 __arm64_sys_openat+0x120/0x158 fs/open.c:1461
 __invoke_syscall arch/arm64/kernel/syscall.c:35 [inline]
 invoke_syscall+0x98/0x254 arch/arm64/kernel/syscall.c:49
 el0_svc_common+0x130/0x23c arch/arm64/kernel/syscall.c:132
 do_el0_svc+0x48/0x58 arch/arm64/kernel/syscall.c:151
 el0_svc+0x5c/0x254 arch/arm64/kernel/entry-common.c:744
 el0t_64_sync_handler+0x84/0x12c arch/arm64/kernel/entry-common.c:763
 el0t_64_sync+0x198/0x19c arch/arm64/kernel/entry.S:596
irq event stamp: 5184
hardirqs last  enabled at (5183): [<ffff800080c72918>] kasan_quarantine_put+0x1a0/0x1c8 mm/kasan/quarantine.c:234
hardirqs last disabled at (5184): [<ffff80008b01a1ac>] el1_brk64+0x20/0x54 arch/arm64/kernel/entry-common.c:434
softirqs last  enabled at (3772): [<ffff800080201608>] local_bh_enable+0x10/0x34 include/linux/bottom_half.h:32
softirqs last disabled at (3770): [<ffff8000802015d4>] local_bh_disable+0x10/0x34 include/linux/bottom_half.h:19
---[ end trace 0000000000000000 ]---