Extracting prog: 2m34.949417168s
Minimizing prog: 33m12.089680458s
Simplifying prog options: 0s
Extracting C: 36.971815057s
Simplifying C: 3m9.926834496s


extracting reproducer from 67 programs
first checking the prog from the crash report
single: executing 1 programs separately with timeout 30s
testing program (duration=30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag-socket$nl_sock_diag-syz_socket_connect_nvme_tcp-syz_socket_connect_nvme_tcp-recvfrom$inet_nvme-recvfrom$inet_nvme
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_socket_connect_nvme_tcp() (async)
r7 = syz_socket_connect_nvme_tcp()
recvfrom$inet_nvme(r7, &(0x7f0000000600)=""/4096, 0x1000, 0x40000160, &(0x7f0000000300)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80) (async)
recvfrom$inet_nvme(r7, &(0x7f0000000600)=""/4096, 0x1000, 0x40000160, &(0x7f0000000300)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80)

program crashed: WARNING in incfs_realloc_mount_info
program crashed: WARNING in incfs_realloc_mount_info
single: successfully extracted reproducer
found reproducer with 40 syscalls
minimizing guilty program
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag-socket$nl_sock_diag-syz_socket_connect_nvme_tcp-syz_socket_connect_nvme_tcp-recvfrom$inet_nvme
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_socket_connect_nvme_tcp() (async)
r7 = syz_socket_connect_nvme_tcp()
recvfrom$inet_nvme(r7, &(0x7f0000000600)=""/4096, 0x1000, 0x40000160, &(0x7f0000000300)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x2}, 0x80) (async)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag-socket$nl_sock_diag-syz_socket_connect_nvme_tcp-syz_socket_connect_nvme_tcp
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_socket_connect_nvme_tcp() (async)
syz_socket_connect_nvme_tcp()

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag-socket$nl_sock_diag-syz_socket_connect_nvme_tcp
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_socket_connect_nvme_tcp() (async)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag-socket$nl_sock_diag
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$nl_sock_diag
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm-socket$nl_xfrm
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
socket$nl_xfrm(0x10, 0x3, 0x6)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm-sendmsg$nl_xfrm
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES8=r3, @ANYRESHEX=r0], 0x158}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs-socket$nl_xfrm
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])
socket$nl_xfrm(0x10, 0x3, 0x6)

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mkdirat
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mmap$xdp-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x12, r4, 0x80000000)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-socket$xdp-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-sendmsg$nl_xfrm-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-sendmsg$nl_xfrm-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-socket$nl_xfrm-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-socket$nl_xfrm-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-syz_init_net_socket$nfc_raw-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x500)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-socket$key-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
socket$key(0xf, 0x3, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-socket$key-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
socket$key(0xf, 0x3, 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-ioctl$BINDER_WRITE_READ-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4, 0x0, &(0x7f0000000180)=[@exit_looper], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mmap$binder-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-syz_clone-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mmap-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mmap-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000d, 0x50, r3, 0xd886a000) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-socket$packet-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-process_vm_readv-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
r2 = getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
process_vm_readv(r2, &(0x7f0000002e40), 0x100000000000030f, &(0x7f0000003380)=[{&(0x7f0000000400)=""/53, 0x27}], 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-madvise-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x16)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-timer_settime-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
getpgrp(0x0)
timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-getpgrp-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
getpgrp(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-ioctl$BINDER_WRITE_READ-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-ioctl$BINDER_WRITE_READ-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-ioctl$BINDER_SET_CONTEXT_MGR_EXT-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x3})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-openat$binderfs-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-keyctl$read-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
keyctl$read(0xb, r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-keyctl$invalidate-mkdirat-mount$incfs
detailed listing:
executing program 0:
r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): add_key$keyring-mkdirat-mount$incfs
detailed listing:
executing program 0:
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, 0x0)

program did not crash
testing program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB])

program did not crash
extracting C reproducer
testing compiled C program (duration=33.333757452s, {Threaded:true Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
simplifying C reproducer
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:true RepeatTimes:0 Procs:4 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:false Cgroups:false BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:true HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:true Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:true Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing compiled C program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
program crashed: WARNING in incfs_realloc_mount_info
testing program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
validation run: crashed=true
testing program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
validation run: crashed=true
testing program (duration=33.333757452s, {Threaded:false Repeat:false RepeatTimes:0 Procs:1 Slowdown:1 Sandbox: SandboxArg:0 Leak:false NetInjection:false NetDevices:false NetReset:false Cgroups:false BinfmtMisc:false CloseFDs:false KCSAN:false DevlinkPCI:false NicVF:false USB:false VhciInjection:false Wifi:false IEEE802154:false Sysctl:false Swap:false UseTmpDir:false HandleSegv:false Trace:false CallComments:true LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): mkdirat-mount$incfs
detailed listing:
executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x14000, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1829682432,\x00'])

program crashed: WARNING in incfs_realloc_mount_info
validation run: crashed=true
reproducing took 41m46.698762809s
repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 383 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 mm/page_alloc.c:5228
Modules linked in:
CPU: 1 UID: 0 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0 67868b434517ba700884c753facc80d4f03a3ea5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 mm/page_alloc.c:5228
Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1e ee 05 00 0f 85 be 00 00 00 c6 05 d5 1e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
RSP: 0018:ffffc90000e2f880 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000e2f938
RBP: ffffc90000e2f9a8 R08: ffffc90000e2f937 R09: 0000000000000000
R10: ffffc90000e2f920 R11: fffff520001c5f27 R12: ffffc90000e2f8c0
R13: dffffc0000000000 R14: 1ffff920001c5f14 R15: 0000000000000000
FS:  000055555a320500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 00000001155ca000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ___kmalloc_large_node+0x81/0x220 mm/slub.c:-1
 __kmalloc_large_node_noprof+0x1e/0xe0 mm/slub.c:4334
 __do_kmalloc_node mm/slub.c:4350 [inline]
 __kmalloc_noprof+0x26d/0x450 mm/slub.c:4374
 kmalloc_noprof include/linux/slab.h:885 [inline]
 kzalloc_noprof include/linux/slab.h:1017 [inline]
 incfs_realloc_mount_info+0xa7/0x4d0 fs/incfs/data_mgmt.c:113
 incfs_alloc_mount_info+0x479/0x600 fs/incfs/data_mgmt.c:84
 incfs_mount_fs+0x3ca/0x960 fs/incfs/vfs.c:1854
 legacy_get_tree+0x103/0x1b0 fs/fs_context.c:662
 vfs_get_tree+0xa1/0x290 fs/super.c:1817
 do_new_mount+0x251/0xb40 fs/namespace.c:3537
 path_mount+0x688/0x1050 fs/namespace.c:3864
 do_mount fs/namespace.c:3877 [inline]
 __do_sys_mount fs/namespace.c:4087 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4064
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4064
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f81da78eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc5fcea2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f81da9e5fa0 RCX: 00007f81da78eec9
RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
RBP: 00007f81da811f91 R08: 0000200000000280 R09: 0000000000000000
R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f81da9e5fa0 R14: 00007f81da9e5fa0 R15: 0000000000000005
 </TASK>
---[ end trace 0000000000000000 ]---
incfs: Error allocating mount info. -12
incfs: mount failed -12

final repro crashed as (corrupted=false):
------------[ cut here ]------------
WARNING: CPU: 1 PID: 383 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0 mm/page_alloc.c:5228
Modules linked in:
CPU: 1 UID: 0 PID: 383 Comm: syz.2.17 Not tainted syzkaller #0 67868b434517ba700884c753facc80d4f03a3ea5
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0 mm/page_alloc.c:5228
Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d e2 1e ee 05 00 0f 85 be 00 00 00 c6 05 d5 1e ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
RSP: 0018:ffffc90000e2f880 EFLAGS: 00010246
RAX: 0000000000000000 RBX: 000000000000001f RCX: 0000000000000000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90000e2f938
RBP: ffffc90000e2f9a8 R08: ffffc90000e2f937 R09: 0000000000000000
R10: ffffc90000e2f920 R11: fffff520001c5f27 R12: ffffc90000e2f8c0
R13: dffffc0000000000 R14: 1ffff920001c5f14 R15: 0000000000000000
FS:  000055555a320500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000200000001000 CR3: 00000001155ca000 CR4: 00000000003526b0
Call Trace:
 <TASK>
 ___kmalloc_large_node+0x81/0x220 mm/slub.c:-1
 __kmalloc_large_node_noprof+0x1e/0xe0 mm/slub.c:4334
 __do_kmalloc_node mm/slub.c:4350 [inline]
 __kmalloc_noprof+0x26d/0x450 mm/slub.c:4374
 kmalloc_noprof include/linux/slab.h:885 [inline]
 kzalloc_noprof include/linux/slab.h:1017 [inline]
 incfs_realloc_mount_info+0xa7/0x4d0 fs/incfs/data_mgmt.c:113
 incfs_alloc_mount_info+0x479/0x600 fs/incfs/data_mgmt.c:84
 incfs_mount_fs+0x3ca/0x960 fs/incfs/vfs.c:1854
 legacy_get_tree+0x103/0x1b0 fs/fs_context.c:662
 vfs_get_tree+0xa1/0x290 fs/super.c:1817
 do_new_mount+0x251/0xb40 fs/namespace.c:3537
 path_mount+0x688/0x1050 fs/namespace.c:3864
 do_mount fs/namespace.c:3877 [inline]
 __do_sys_mount fs/namespace.c:4087 [inline]
 __se_sys_mount+0x2bd/0x480 fs/namespace.c:4064
 __x64_sys_mount+0xc3/0xf0 fs/namespace.c:4064
 x64_sys_call+0x2021/0x2ee0 arch/x86/include/generated/asm/syscalls_64.h:166
 do_syscall_x64 arch/x86/entry/common.c:52 [inline]
 do_syscall_64+0x58/0xf0 arch/x86/entry/common.c:83
 entry_SYSCALL_64_after_hwframe+0x76/0x7e
RIP: 0033:0x7f81da78eec9
Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
RSP: 002b:00007ffc5fcea2e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
RAX: ffffffffffffffda RBX: 00007f81da9e5fa0 RCX: 00007f81da78eec9
RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
RBP: 00007f81da811f91 R08: 0000200000000280 R09: 0000000000000000
R10: 0000000000014000 R11: 0000000000000246 R12: 0000000000000000
R13: 00007f81da9e5fa0 R14: 00007f81da9e5fa0 R15: 0000000000000005
 </TASK>
---[ end trace 0000000000000000 ]---
incfs: Error allocating mount info. -12
incfs: mount failed -12