Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. 2026/04/09 04:32:43 parsed 1 programs [ 95.349725][ T4583] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 97.168919][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.185407][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.194013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.213605][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.222370][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.230485][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.751933][ T4636] chnl_net:caif_netlink_parms(): no params data found [ 97.811120][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.818378][ T4636] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.826821][ T4636] device bridge_slave_0 entered promiscuous mode [ 97.835251][ T4636] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.843932][ T4636] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.852657][ T4636] device bridge_slave_1 entered promiscuous mode [ 97.881373][ T4636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.894388][ T4636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.925503][ T4636] team0: Port device team_slave_0 added [ 97.934607][ T4636] team0: Port device team_slave_1 added [ 97.958948][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.967422][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.995657][ T4636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.008232][ T4636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.015450][ T4636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.041667][ T4636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.088834][ T4636] device hsr_slave_0 entered promiscuous mode [ 98.095723][ T4636] device hsr_slave_1 entered promiscuous mode [ 98.731140][ T4636] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.743941][ T4636] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.754161][ T4636] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.768235][ T4636] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.830821][ T4636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.852658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.861743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.873010][ T4636] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.884951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.895299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.905662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.912783][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.958538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.966682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.975773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.987067][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.994332][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.005814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.014993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.025082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.039809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.050260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.092760][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.104676][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.117190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.127136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.140834][ T4636] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.153797][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.163981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.172985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.338295][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.347268][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.359931][ T4636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.406332][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.417568][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.436138][ T4636] device veth0_vlan entered promiscuous mode [ 99.444352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.453496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.464451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.472554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.506667][ T4636] device veth1_vlan entered promiscuous mode [ 99.529838][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.539904][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.550182][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.561612][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.572979][ T4636] device veth0_macvtap entered promiscuous mode [ 99.606344][ T4636] device veth1_macvtap entered promiscuous mode [ 99.626317][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.633771][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.644149][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.653329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.665210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.695544][ T4636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.707830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.717472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.729770][ T4636] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.739193][ T4636] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.748798][ T4636] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.758410][ T4636] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2026/04/09 04:32:51 executed programs: 0 [ 101.035324][ T4775] chnl_net:caif_netlink_parms(): no params data found [ 101.144390][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.151696][ T4775] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.160777][ T4775] device bridge_slave_0 entered promiscuous mode [ 101.169543][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.176811][ T4775] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.184768][ T4775] device bridge_slave_1 entered promiscuous mode [ 101.211292][ T4775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.222924][ T4775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.270028][ T4775] team0: Port device team_slave_0 added [ 101.288703][ T4775] team0: Port device team_slave_1 added [ 101.332023][ T4775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.346061][ T4775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.406497][ T4775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.429438][ T4775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.446085][ T4775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.496091][ T4775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.572019][ T4775] device hsr_slave_0 entered promiscuous mode [ 101.586901][ T4775] device hsr_slave_1 entered promiscuous mode [ 101.606237][ T4775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.613890][ T4775] Cannot create hsr debugfs directory [ 101.783090][ T4775] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.916509][ T4249] Bluetooth: hci0: command 0x0409 tx timeout [ 104.996424][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 105.021578][ T4775] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.101328][ T4775] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.173280][ T4775] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.236560][ T4775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.245263][ T4775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.254259][ T4775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.273238][ T4775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.324788][ T4775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.338231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.346675][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.356174][ T4775] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.365280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.374861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.383593][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.390804][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.399389][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.419691][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.428694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.437894][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.445137][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.453314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.471748][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.482281][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.492165][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.501145][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.519185][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.528555][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.542829][ T4775] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.553557][ T4775] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.567095][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.575771][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.584537][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.593474][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.603698][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.691323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.698837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.711055][ T4775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.726906][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.735656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.763366][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.771694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.780462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.788681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.799102][ T4775] device veth0_vlan entered promiscuous mode [ 105.817941][ T4775] device veth1_vlan entered promiscuous mode [ 105.834239][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.842952][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.851161][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.861296][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.872218][ T4775] device veth0_macvtap entered promiscuous mode [ 105.883873][ T4257] device hsr_slave_0 left promiscuous mode [ 105.890565][ T4257] device hsr_slave_1 left promiscuous mode [ 105.898051][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.905556][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.914322][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.923802][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.932000][ T4257] device bridge_slave_1 left promiscuous mode [ 105.938432][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.946643][ T4257] device bridge_slave_0 left promiscuous mode [ 105.952796][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.963893][ T4257] device veth1_macvtap left promiscuous mode [ 105.970096][ T4257] device veth0_macvtap left promiscuous mode [ 105.977348][ T4257] device veth1_vlan left promiscuous mode [ 105.983367][ T4257] device veth0_vlan left promiscuous mode [ 106.103803][ T4257] team0 (unregistering): Port device team_slave_1 removed [ 106.117371][ T4257] team0 (unregistering): Port device team_slave_0 removed [ 106.130904][ T4257] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.144345][ T4257] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.191276][ T4257] bond0 (unregistering): Released all slaves [ 106.231412][ T4775] device veth1_macvtap entered promiscuous mode [ 106.247544][ T4775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.254918][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 106.263391][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.271942][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.281647][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.292493][ T4775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.302370][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.310947][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.321402][ T4775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.330691][ T4775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.339988][ T4775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.349034][ T4775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.414107][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.424123][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.444223][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/04/09 04:32:57 executed programs: 2 [ 106.464746][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.473899][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.482269][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.535519][ T5029] FAULT_INJECTION: forcing a failure. [ 106.535519][ T5029] name failslab, interval 1, probability 0, space 0, times 1 [ 106.550547][ T5029] CPU: 1 PID: 5029 Comm: syz.0.15 Not tainted syzkaller #0 [ 106.558010][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.568236][ T5029] Call Trace: [ 106.571544][ T5029] [ 106.574551][ T5029] dump_stack_lvl+0x188/0x250 [ 106.579233][ T5029] ? show_regs_print_info+0x20/0x20 [ 106.584554][ T5029] ? load_image+0x400/0x400 [ 106.589067][ T5029] ? __might_sleep+0xf0/0xf0 [ 106.593750][ T5029] ? __lock_acquire+0x7d10/0x7d10 [ 106.598775][ T5029] should_fail+0x38c/0x4c0 [ 106.603291][ T5029] should_failslab+0x5/0x20 [ 106.608153][ T5029] slab_pre_alloc_hook+0x51/0xc0 [ 106.613426][ T5029] kmem_cache_alloc_trace+0x47/0x2a0 [ 106.618698][ T5029] ? ovl_encode_real_fh+0xd6/0x340 [ 106.623984][ T5029] ovl_encode_real_fh+0xd6/0x340 [ 106.628937][ T5029] ? ovl_set_attr+0x3c0/0x3c0 [ 106.633625][ T5029] ? ovl_lookup_layer+0x379/0x440 [ 106.638646][ T5029] ovl_lookup_index+0x64/0x680 [ 106.643516][ T5029] ovl_lookup+0x10dd/0x1700 [ 106.648036][ T5029] ? ovl_path_next+0x260/0x260 [ 106.652877][ T5029] ? __init_waitqueue_head+0xa5/0x150 [ 106.658245][ T5029] __lookup_slow+0x29d/0x410 [ 106.663003][ T5029] ? lookup_one_len+0x2d0/0x2d0 [ 106.667846][ T5029] ? down_read+0x1aa/0x2e0 [ 106.672277][ T5029] lookup_slow+0x53/0x70 [ 106.676618][ T5029] walk_component+0x319/0x460 [ 106.681396][ T5029] path_lookupat+0x169/0x440 [ 106.686093][ T5029] filename_lookup+0x214/0x540 [ 106.690972][ T5029] ? hashlen_string+0x110/0x110 [ 106.695843][ T5029] ? strncpy_from_user+0x1fb/0x360 [ 106.700948][ T5029] ? getname_flags+0x1fe/0x500 [ 106.705705][ T5029] user_path_at_empty+0x40/0x190 [ 106.710645][ T5029] path_setxattr+0xb3/0x290 [ 106.715135][ T5029] ? simple_xattr_list_add+0xf0/0xf0 [ 106.720410][ T5029] ? lock_chain_count+0x20/0x20 [ 106.725254][ T5029] ? vtime_user_exit+0x2c8/0x3e0 [ 106.730187][ T5029] __x64_sys_lsetxattr+0xb4/0xd0 [ 106.735147][ T5029] do_syscall_64+0x4c/0xa0 [ 106.739756][ T5029] ? clear_bhb_loop+0x30/0x80 [ 106.744609][ T5029] ? clear_bhb_loop+0x30/0x80 [ 106.749286][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.755352][ T5029] RIP: 0033:0x7f634290a999 [ 106.759784][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.779655][ T5029] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 106.788170][ T5029] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 106.796227][ T5029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 106.804214][ T5029] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.812458][ T5029] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 106.820669][ T5029] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 106.828649][ T5029] [ 106.865614][ T5031] FAULT_INJECTION: forcing a failure. [ 106.865614][ T5031] name failslab, interval 1, probability 0, space 0, times 0 [ 106.879952][ T5031] CPU: 0 PID: 5031 Comm: syz.0.16 Not tainted syzkaller #0 [ 106.887392][ T5031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.897656][ T5031] Call Trace: [ 106.900948][ T5031] [ 106.903974][ T5031] dump_stack_lvl+0x188/0x250 [ 106.908735][ T5031] ? show_regs_print_info+0x20/0x20 [ 106.913931][ T5031] ? load_image+0x400/0x400 [ 106.918425][ T5031] ? __lock_acquire+0x7d10/0x7d10 [ 106.923580][ T5031] ? memset+0x1e/0x40 [ 106.927558][ T5031] ? lockdep_init_map_type+0x98/0x900 [ 106.933111][ T5031] should_fail+0x38c/0x4c0 [ 106.937530][ T5031] should_failslab+0x5/0x20 [ 106.942030][ T5031] slab_pre_alloc_hook+0x51/0xc0 [ 106.946958][ T5031] ? security_inode_alloc+0x30/0x110 [ 106.952342][ T5031] kmem_cache_alloc+0x3d/0x290 [ 106.957183][ T5031] security_inode_alloc+0x30/0x110 [ 106.962293][ T5031] inode_init_always+0x8f4/0xcb0 [ 106.967237][ T5031] ? ovl_lookup_inode+0x130/0x130 [ 106.972494][ T5031] iget5_locked+0xc9/0x250 [ 106.976912][ T5031] ? ovl_get_trap_inode+0x190/0x190 [ 106.982109][ T5031] ovl_get_inode+0x4ed/0xbb0 [ 106.986793][ T5031] ovl_lookup+0x13e6/0x1700 [ 106.991441][ T5031] ? ovl_path_next+0x260/0x260 [ 106.996301][ T5031] ? __init_waitqueue_head+0xa5/0x150 [ 107.001670][ T5031] __lookup_slow+0x29d/0x410 [ 107.006253][ T5031] ? lookup_one_len+0x2d0/0x2d0 [ 107.011094][ T5031] ? ovl_permission+0xc2/0x1e0 [ 107.015863][ T5031] ? down_read+0x1aa/0x2e0 [ 107.020275][ T5031] lookup_one_unlocked+0x184/0x2a0 [ 107.025391][ T5031] ? lookup_one+0x2d0/0x2d0 [ 107.029915][ T5031] ovl_lookup_single+0x61/0x850 [ 107.034777][ T5031] ovl_lookup_layer+0x379/0x440 [ 107.039631][ T5031] ovl_lookup+0x6d0/0x1700 [ 107.044057][ T5031] ? ovl_path_next+0x260/0x260 [ 107.049106][ T5031] ? __init_waitqueue_head+0xa5/0x150 [ 107.054562][ T5031] __lookup_slow+0x29d/0x410 [ 107.059146][ T5031] ? lookup_one_len+0x2d0/0x2d0 [ 107.063995][ T5031] ? down_read+0x1aa/0x2e0 [ 107.068411][ T5031] lookup_slow+0x53/0x70 [ 107.072914][ T5031] walk_component+0x319/0x460 [ 107.077758][ T5031] path_lookupat+0x169/0x440 [ 107.082345][ T5031] filename_lookup+0x214/0x540 [ 107.087192][ T5031] ? hashlen_string+0x110/0x110 [ 107.092047][ T5031] ? strncpy_from_user+0x1fb/0x360 [ 107.097235][ T5031] ? getname_flags+0x1fe/0x500 [ 107.102073][ T5031] user_path_at_empty+0x40/0x190 [ 107.107001][ T5031] path_setxattr+0xb3/0x290 [ 107.111580][ T5031] ? simple_xattr_list_add+0xf0/0xf0 [ 107.116853][ T5031] ? lock_chain_count+0x20/0x20 [ 107.121708][ T5031] ? vtime_user_exit+0x2c8/0x3e0 [ 107.126733][ T5031] __x64_sys_lsetxattr+0xb4/0xd0 [ 107.131750][ T5031] do_syscall_64+0x4c/0xa0 [ 107.136154][ T5031] ? clear_bhb_loop+0x30/0x80 [ 107.140909][ T5031] ? clear_bhb_loop+0x30/0x80 [ 107.145684][ T5031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.151567][ T5031] RIP: 0033:0x7f634290a999 [ 107.155974][ T5031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.175574][ T5031] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 107.184073][ T5031] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 107.192210][ T5031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 107.200169][ T5031] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.208482][ T5031] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 107.216632][ T5031] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 107.225038][ T5031] [ 107.232630][ T4672] Bluetooth: hci0: command 0x040f tx timeout [ 107.234084][ T5031] overlayfs: failed to get inode (-12) [ 107.287793][ T5033] FAULT_INJECTION: forcing a failure. [ 107.287793][ T5033] name failslab, interval 1, probability 0, space 0, times 0 [ 107.301351][ T5033] CPU: 1 PID: 5033 Comm: syz.0.17 Not tainted syzkaller #0 [ 107.308568][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.318726][ T5033] Call Trace: [ 107.322114][ T5033] [ 107.325059][ T5033] dump_stack_lvl+0x188/0x250 [ 107.329841][ T5033] ? show_regs_print_info+0x20/0x20 [ 107.335142][ T5033] ? load_image+0x400/0x400 [ 107.339660][ T5033] ? __might_sleep+0xf0/0xf0 [ 107.344346][ T5033] ? __lock_acquire+0x7d10/0x7d10 [ 107.349383][ T5033] should_fail+0x38c/0x4c0 [ 107.353965][ T5033] should_failslab+0x5/0x20 [ 107.358473][ T5033] slab_pre_alloc_hook+0x51/0xc0 [ 107.363424][ T5033] kmem_cache_alloc_trace+0x47/0x2a0 [ 107.368724][ T5033] ? ovl_encode_real_fh+0xd6/0x340 [ 107.374031][ T5033] ovl_encode_real_fh+0xd6/0x340 [ 107.379013][ T5033] ? ovl_set_attr+0x3c0/0x3c0 [ 107.383899][ T5033] ? ovl_lookup_layer+0x379/0x440 [ 107.389234][ T5033] ovl_lookup_index+0x64/0x680 [ 107.394109][ T5033] ovl_lookup+0x10dd/0x1700 [ 107.398737][ T5033] ? ovl_path_next+0x260/0x260 [ 107.403639][ T5033] ? __init_waitqueue_head+0xa5/0x150 [ 107.409029][ T5033] __lookup_slow+0x29d/0x410 [ 107.413681][ T5033] ? lookup_one_len+0x2d0/0x2d0 [ 107.418666][ T5033] ? down_read+0x1aa/0x2e0 [ 107.423090][ T5033] lookup_slow+0x53/0x70 [ 107.427430][ T5033] walk_component+0x319/0x460 [ 107.432214][ T5033] path_lookupat+0x169/0x440 [ 107.436812][ T5033] filename_lookup+0x214/0x540 [ 107.441591][ T5033] ? hashlen_string+0x110/0x110 [ 107.447003][ T5033] ? strncpy_from_user+0x1fb/0x360 [ 107.452213][ T5033] ? getname_flags+0x1fe/0x500 [ 107.456987][ T5033] user_path_at_empty+0x40/0x190 [ 107.462020][ T5033] path_setxattr+0xb3/0x290 [ 107.466718][ T5033] ? simple_xattr_list_add+0xf0/0xf0 [ 107.472191][ T5033] ? lock_chain_count+0x20/0x20 [ 107.477149][ T5033] ? vtime_user_exit+0x2c8/0x3e0 [ 107.482183][ T5033] __x64_sys_lsetxattr+0xb4/0xd0 [ 107.487135][ T5033] do_syscall_64+0x4c/0xa0 [ 107.491649][ T5033] ? clear_bhb_loop+0x30/0x80 [ 107.496328][ T5033] ? clear_bhb_loop+0x30/0x80 [ 107.501269][ T5033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.507251][ T5033] RIP: 0033:0x7f634290a999 [ 107.511673][ T5033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.531385][ T5033] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 107.539899][ T5033] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 107.548017][ T5033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 107.556298][ T5033] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.564371][ T5033] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 107.572447][ T5033] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 107.580631][ T5033] [ 107.631067][ T5035] FAULT_INJECTION: forcing a failure. [ 107.631067][ T5035] name failslab, interval 1, probability 0, space 0, times 0 [ 107.647305][ T5035] CPU: 0 PID: 5035 Comm: syz.0.18 Not tainted syzkaller #0 [ 107.654718][ T5035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.665047][ T5035] Call Trace: [ 107.668350][ T5035] [ 107.671283][ T5035] dump_stack_lvl+0x188/0x250 [ 107.676055][ T5035] ? show_regs_print_info+0x20/0x20 [ 107.681257][ T5035] ? load_image+0x400/0x400 [ 107.685855][ T5035] ? __might_sleep+0xf0/0xf0 [ 107.690560][ T5035] ? __lock_acquire+0x7d10/0x7d10 [ 107.695785][ T5035] should_fail+0x38c/0x4c0 [ 107.700527][ T5035] should_failslab+0x5/0x20 [ 107.705129][ T5035] slab_pre_alloc_hook+0x51/0xc0 [ 107.710079][ T5035] kmem_cache_alloc_trace+0x47/0x2a0 [ 107.715374][ T5035] ? ovl_encode_real_fh+0xd6/0x340 [ 107.720586][ T5035] ovl_encode_real_fh+0xd6/0x340 [ 107.725530][ T5035] ? ovl_set_attr+0x3c0/0x3c0 [ 107.730211][ T5035] ? ovl_lookup_layer+0x379/0x440 [ 107.735237][ T5035] ovl_lookup_index+0x64/0x680 [ 107.740001][ T5035] ovl_lookup+0x10dd/0x1700 [ 107.744526][ T5035] ? ovl_path_next+0x260/0x260 [ 107.749312][ T5035] ? __init_waitqueue_head+0xa5/0x150 [ 107.754708][ T5035] __lookup_slow+0x29d/0x410 [ 107.759318][ T5035] ? lookup_one_len+0x2d0/0x2d0 [ 107.764190][ T5035] ? down_read+0x1aa/0x2e0 [ 107.768611][ T5035] lookup_slow+0x53/0x70 [ 107.772868][ T5035] walk_component+0x319/0x460 [ 107.777732][ T5035] path_lookupat+0x169/0x440 [ 107.782441][ T5035] filename_lookup+0x214/0x540 [ 107.787216][ T5035] ? hashlen_string+0x110/0x110 [ 107.792207][ T5035] ? strncpy_from_user+0x1fb/0x360 [ 107.797420][ T5035] ? getname_flags+0x1fe/0x500 [ 107.802186][ T5035] user_path_at_empty+0x40/0x190 [ 107.807138][ T5035] path_setxattr+0xb3/0x290 [ 107.811668][ T5035] ? simple_xattr_list_add+0xf0/0xf0 [ 107.816973][ T5035] ? lock_chain_count+0x20/0x20 [ 107.821824][ T5035] ? vtime_user_exit+0x2c8/0x3e0 [ 107.826765][ T5035] __x64_sys_lsetxattr+0xb4/0xd0 [ 107.831714][ T5035] do_syscall_64+0x4c/0xa0 [ 107.836127][ T5035] ? clear_bhb_loop+0x30/0x80 [ 107.841091][ T5035] ? clear_bhb_loop+0x30/0x80 [ 107.845782][ T5035] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.851679][ T5035] RIP: 0033:0x7f634290a999 [ 107.856105][ T5035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.875981][ T5035] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 107.884600][ T5035] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 107.892932][ T5035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 107.900994][ T5035] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.908989][ T5035] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 107.916971][ T5035] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 107.925156][ T5035] [ 107.972370][ T5037] FAULT_INJECTION: forcing a failure. [ 107.972370][ T5037] name failslab, interval 1, probability 0, space 0, times 0 [ 107.985516][ T5037] CPU: 1 PID: 5037 Comm: syz.0.19 Not tainted syzkaller #0 [ 107.992825][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.003077][ T5037] Call Trace: [ 108.006366][ T5037] [ 108.009385][ T5037] dump_stack_lvl+0x188/0x250 [ 108.014086][ T5037] ? show_regs_print_info+0x20/0x20 [ 108.019405][ T5037] ? load_image+0x400/0x400 [ 108.024020][ T5037] ? __might_sleep+0xf0/0xf0 [ 108.028625][ T5037] ? __lock_acquire+0x7d10/0x7d10 [ 108.033785][ T5037] should_fail+0x38c/0x4c0 [ 108.038600][ T5037] should_failslab+0x5/0x20 [ 108.043110][ T5037] slab_pre_alloc_hook+0x51/0xc0 [ 108.048350][ T5037] kmem_cache_alloc_trace+0x47/0x2a0 [ 108.053735][ T5037] ? ovl_encode_real_fh+0xd6/0x340 [ 108.059224][ T5037] ovl_encode_real_fh+0xd6/0x340 [ 108.064166][ T5037] ? __lock_acquire+0x7d10/0x7d10 [ 108.069208][ T5037] ? ovl_set_attr+0x3c0/0x3c0 [ 108.073918][ T5037] ovl_encode_fh+0x6f2/0x940 [ 108.078709][ T5037] ? ovl_do_rename+0x1c0/0x1c0 [ 108.083671][ T5037] exportfs_encode_fh+0x169/0x480 [ 108.088728][ T5037] ovl_encode_real_fh+0x102/0x340 [ 108.093771][ T5037] ? ovl_set_attr+0x3c0/0x3c0 [ 108.098769][ T5037] ? ovl_lookup_layer+0x379/0x440 [ 108.103886][ T5037] ovl_lookup_index+0x64/0x680 [ 108.108655][ T5037] ovl_lookup+0x10dd/0x1700 [ 108.113462][ T5037] ? ovl_path_next+0x260/0x260 [ 108.118252][ T5037] ? __init_waitqueue_head+0xa5/0x150 [ 108.123661][ T5037] __lookup_slow+0x29d/0x410 [ 108.128371][ T5037] ? lookup_one_len+0x2d0/0x2d0 [ 108.133260][ T5037] ? down_read+0x1aa/0x2e0 [ 108.137725][ T5037] lookup_slow+0x53/0x70 [ 108.142244][ T5037] walk_component+0x319/0x460 [ 108.147108][ T5037] path_lookupat+0x169/0x440 [ 108.151803][ T5037] filename_lookup+0x214/0x540 [ 108.156566][ T5037] ? hashlen_string+0x110/0x110 [ 108.161607][ T5037] ? strncpy_from_user+0x1fb/0x360 [ 108.166716][ T5037] ? getname_flags+0x1fe/0x500 [ 108.171559][ T5037] user_path_at_empty+0x40/0x190 [ 108.176669][ T5037] path_setxattr+0xb3/0x290 [ 108.181249][ T5037] ? simple_xattr_list_add+0xf0/0xf0 [ 108.186632][ T5037] ? lock_chain_count+0x20/0x20 [ 108.191580][ T5037] ? vtime_user_exit+0x2c8/0x3e0 [ 108.196525][ T5037] __x64_sys_lsetxattr+0xb4/0xd0 [ 108.201451][ T5037] do_syscall_64+0x4c/0xa0 [ 108.205945][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.210697][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.215538][ T5037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.221531][ T5037] RIP: 0033:0x7f634290a999 [ 108.226024][ T5037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.245792][ T5037] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 108.254196][ T5037] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 108.262157][ T5037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 108.270240][ T5037] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.278665][ T5037] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 108.286817][ T5037] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 108.294926][ T5037] [ 108.303147][ T5037] ------------[ cut here ]------------ [ 108.311349][ T5037] WARNING: CPU: 1 PID: 5037 at fs/overlayfs/copy_up.c:371 ovl_encode_real_fh+0x291/0x340 [ 108.322816][ T5037] Modules linked in: [ 108.327011][ T5037] CPU: 1 PID: 5037 Comm: syz.0.19 Not tainted syzkaller #0 [ 108.334361][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.346386][ T5037] RIP: 0010:ovl_encode_real_fh+0x291/0x340 [ 108.352308][ T5037] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f1 64 b5 fe 0f 0b eb 10 e8 e8 64 b5 fe 0f 0b eb 07 e8 df 64 b5 fe <0f> 0b 48 89 df e8 75 da f9 fe 48 c7 c3 fb ff ff ff eb 9d e8 77 ac [ 108.373398][ T5037] RSP: 0018:ffffc9000132f6e0 EFLAGS: 00010293 [ 108.379858][ T5037] RAX: ffffffff82c3bc31 RBX: ffff888022743b00 RCX: ffff888029568000 [ 108.388572][ T5037] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 108.397556][ T5037] RBP: ffffc9000132f790 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 108.405766][ T5037] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: 00000000000000ff [ 108.413976][ T5037] R13: 0000000000000080 R14: dffffc0000000000 R15: 1ffff92000265ee0 [ 108.422160][ T5037] FS: 00007f6341b7e6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 108.431485][ T5037] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.438405][ T5037] CR2: 00007f6342957a40 CR3: 000000005adb3000 CR4: 00000000003506e0 [ 108.446829][ T5037] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.454895][ T5037] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.463872][ T5037] Call Trace: [ 108.467478][ T5037] [ 108.470577][ T5037] ? ovl_set_attr+0x3c0/0x3c0 [ 108.475380][ T5037] ? ovl_lookup_layer+0x379/0x440 [ 108.481079][ T5037] ovl_lookup_index+0x64/0x680 [ 108.486247][ T5037] ovl_lookup+0x10dd/0x1700 [ 108.490897][ T5037] ? ovl_path_next+0x260/0x260 [ 108.495849][ T5037] ? __init_waitqueue_head+0xa5/0x150 [ 108.501874][ T5037] __lookup_slow+0x29d/0x410 [ 108.506752][ T5037] ? lookup_one_len+0x2d0/0x2d0 [ 108.511689][ T5037] ? down_read+0x1aa/0x2e0 [ 108.516613][ T5037] lookup_slow+0x53/0x70 [ 108.520939][ T5037] walk_component+0x319/0x460 [ 108.525683][ T5037] path_lookupat+0x169/0x440 [ 108.530868][ T5037] filename_lookup+0x214/0x540 [ 108.535764][ T5037] ? hashlen_string+0x110/0x110 [ 108.540731][ T5037] ? strncpy_from_user+0x1fb/0x360 [ 108.545877][ T5037] ? getname_flags+0x1fe/0x500 [ 108.550792][ T5037] user_path_at_empty+0x40/0x190 [ 108.555738][ T5037] path_setxattr+0xb3/0x290 [ 108.560450][ T5037] ? simple_xattr_list_add+0xf0/0xf0 [ 108.565941][ T5037] ? lock_chain_count+0x20/0x20 [ 108.570927][ T5037] ? vtime_user_exit+0x2c8/0x3e0 [ 108.575891][ T5037] __x64_sys_lsetxattr+0xb4/0xd0 [ 108.581004][ T5037] do_syscall_64+0x4c/0xa0 [ 108.585453][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.590422][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.595253][ T5037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.601481][ T5037] RIP: 0033:0x7f634290a999 [ 108.605951][ T5037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.626409][ T5037] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 108.634889][ T5037] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 108.643092][ T5037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 108.651111][ T5037] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.659113][ T5037] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 108.667456][ T5037] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 108.675733][ T5037] [ 108.678812][ T5037] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.686304][ T5037] CPU: 1 PID: 5037 Comm: syz.0.19 Not tainted syzkaller #0 [ 108.693507][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 108.703641][ T5037] Call Trace: [ 108.706911][ T5037] [ 108.709842][ T5037] dump_stack_lvl+0x188/0x250 [ 108.714515][ T5037] ? show_regs_print_info+0x20/0x20 [ 108.719722][ T5037] ? load_image+0x400/0x400 [ 108.724230][ T5037] panic+0x2e5/0x810 [ 108.728162][ T5037] ? bpf_jit_dump+0xd0/0xd0 [ 108.732784][ T5037] ? ovl_encode_real_fh+0x291/0x340 [ 108.738008][ T5037] __warn+0x248/0x2b0 [ 108.742010][ T5037] ? ovl_encode_real_fh+0x291/0x340 [ 108.747206][ T5037] report_bug+0x1b7/0x2e0 [ 108.751548][ T5037] handle_bug+0x3a/0x70 [ 108.755702][ T5037] exc_invalid_op+0x16/0x40 [ 108.760196][ T5037] asm_exc_invalid_op+0x16/0x20 [ 108.765126][ T5037] RIP: 0010:ovl_encode_real_fh+0x291/0x340 [ 108.770921][ T5037] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 f1 64 b5 fe 0f 0b eb 10 e8 e8 64 b5 fe 0f 0b eb 07 e8 df 64 b5 fe <0f> 0b 48 89 df e8 75 da f9 fe 48 c7 c3 fb ff ff ff eb 9d e8 77 ac [ 108.791054][ T5037] RSP: 0018:ffffc9000132f6e0 EFLAGS: 00010293 [ 108.797118][ T5037] RAX: ffffffff82c3bc31 RBX: ffff888022743b00 RCX: ffff888029568000 [ 108.805443][ T5037] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 108.813405][ T5037] RBP: ffffc9000132f790 R08: ffffffff8d89e36f R09: 1ffffffff1b13c6d [ 108.821368][ T5037] R10: dffffc0000000000 R11: fffffbfff1b13c6e R12: 00000000000000ff [ 108.829351][ T5037] R13: 0000000000000080 R14: dffffc0000000000 R15: 1ffff92000265ee0 [ 108.837326][ T5037] ? ovl_encode_real_fh+0x291/0x340 [ 108.842528][ T5037] ? ovl_set_attr+0x3c0/0x3c0 [ 108.847204][ T5037] ? ovl_lookup_layer+0x379/0x440 [ 108.852322][ T5037] ovl_lookup_index+0x64/0x680 [ 108.857166][ T5037] ovl_lookup+0x10dd/0x1700 [ 108.861750][ T5037] ? ovl_path_next+0x260/0x260 [ 108.866603][ T5037] ? __init_waitqueue_head+0xa5/0x150 [ 108.872451][ T5037] __lookup_slow+0x29d/0x410 [ 108.877064][ T5037] ? lookup_one_len+0x2d0/0x2d0 [ 108.881908][ T5037] ? down_read+0x1aa/0x2e0 [ 108.886517][ T5037] lookup_slow+0x53/0x70 [ 108.890765][ T5037] walk_component+0x319/0x460 [ 108.895648][ T5037] path_lookupat+0x169/0x440 [ 108.900281][ T5037] filename_lookup+0x214/0x540 [ 108.905158][ T5037] ? hashlen_string+0x110/0x110 [ 108.910180][ T5037] ? strncpy_from_user+0x1fb/0x360 [ 108.915282][ T5037] ? getname_flags+0x1fe/0x500 [ 108.920143][ T5037] user_path_at_empty+0x40/0x190 [ 108.925184][ T5037] path_setxattr+0xb3/0x290 [ 108.929705][ T5037] ? simple_xattr_list_add+0xf0/0xf0 [ 108.935111][ T5037] ? lock_chain_count+0x20/0x20 [ 108.940177][ T5037] ? vtime_user_exit+0x2c8/0x3e0 [ 108.945111][ T5037] __x64_sys_lsetxattr+0xb4/0xd0 [ 108.950127][ T5037] do_syscall_64+0x4c/0xa0 [ 108.954534][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.959202][ T5037] ? clear_bhb_loop+0x30/0x80 [ 108.964048][ T5037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.970189][ T5037] RIP: 0033:0x7f634290a999 [ 108.974677][ T5037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.994587][ T5037] RSP: 002b:00007f6341b7e058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 109.003098][ T5037] RAX: ffffffffffffffda RBX: 00007f6342ad5fa0 RCX: 00007f634290a999 [ 109.011591][ T5037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 109.019706][ T5037] RBP: 00007f6341b7e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.028067][ T5037] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 109.036496][ T5037] R13: 0000000000000000 R14: 00007f6342ad5fa0 R15: 00007ffed24ef538 [ 109.044653][ T5037] [ 109.048204][ T5037] Kernel Offset: disabled [ 109.052635][ T5037] Rebooting in 86400 seconds..