[ 76.399562][ T1326] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.201' (ED25519) to the list of known hosts. 2025/09/27 13:20:13 parsed 1 programs [ 85.514269][ T4713] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 86.668529][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.676645][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.692218][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.692571][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.701356][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.719319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.742778][ T4762] chnl_net:caif_netlink_parms(): no params data found [ 87.797766][ T4762] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.804932][ T4762] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.813930][ T4762] device bridge_slave_0 entered promiscuous mode [ 87.822916][ T4762] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.830334][ T4762] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.838739][ T4762] device bridge_slave_1 entered promiscuous mode [ 87.864129][ T4762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.875411][ T4762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.903620][ T4762] team0: Port device team_slave_0 added [ 87.911288][ T4762] team0: Port device team_slave_1 added [ 87.935213][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.942303][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.968517][ T4762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.981245][ T4762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.988552][ T4762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.015040][ T4762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.051894][ T4762] device hsr_slave_0 entered promiscuous mode [ 88.058690][ T4762] device hsr_slave_1 entered promiscuous mode [ 88.702793][ T4762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.713761][ T4762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.739678][ T4762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.749880][ T4762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.810834][ T4762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.827151][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.835292][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.848385][ T4762] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.858594][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.868656][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.877544][ T500] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.884612][ T500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.903096][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.912347][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.921523][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.931960][ T500] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.939069][ T500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.947890][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.956618][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.976943][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.987704][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.996269][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 89.007708][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.021445][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 89.034545][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 89.045090][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 89.055223][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 89.089859][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 89.100616][ T4762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.245808][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.254523][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.267440][ T4762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.309788][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.320816][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.342929][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.352078][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.386681][ T4762] device veth0_vlan entered promiscuous mode [ 89.399804][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.408159][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.450169][ T4762] device veth1_vlan entered promiscuous mode [ 89.472598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.483070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.491740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.503380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.515390][ T4762] device veth0_macvtap entered promiscuous mode [ 89.553493][ T4762] device veth1_macvtap entered promiscuous mode [ 89.572164][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.582420][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.591526][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.600889][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.609917][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.623053][ T4762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.633672][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.645066][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.656534][ T4762] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.668432][ T4762] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.678161][ T4762] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.687211][ T4762] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 2025/09/27 13:20:20 executed programs: 0 [ 90.681663][ T4898] chnl_net:caif_netlink_parms(): no params data found [ 90.798831][ T4898] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.816176][ T4898] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.824802][ T4898] device bridge_slave_0 entered promiscuous mode [ 90.842969][ T4898] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.852354][ T4898] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.861311][ T4898] device bridge_slave_1 entered promiscuous mode [ 90.918218][ T4898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.938558][ T4898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.983674][ T4898] team0: Port device team_slave_0 added [ 90.994353][ T4898] team0: Port device team_slave_1 added [ 91.019310][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.026289][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.064806][ T4898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.082498][ T4898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.091180][ T4898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.121496][ T4898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.193013][ T4898] device hsr_slave_0 entered promiscuous mode [ 91.217384][ T4898] device hsr_slave_1 entered promiscuous mode [ 91.224096][ T4898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.244058][ T4898] Cannot create hsr debugfs directory [ 91.419754][ T4898] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.487707][ T4425] Bluetooth: hci0: command 0x0409 tx timeout [ 94.066417][ T4898] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.221914][ T4898] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.303955][ T4898] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.373123][ T4898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.382140][ T4898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.391757][ T4898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.405600][ T4898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.457528][ T4898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.469501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 94.477601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.488135][ T4898] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.497681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 94.506331][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.515127][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.522233][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.540754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 94.548980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 94.557052][ T4800] Bluetooth: hci0: command 0x041b tx timeout [ 94.558484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.571882][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.578981][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.604980][ T4898] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.615935][ T4898] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.629128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 94.638129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 94.648275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 94.659202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 94.668753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 94.677431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 94.685741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.694292][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.703212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.711670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.721227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 94.729184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.812944][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.820463][ T500] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.832897][ T4898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.844336][ T4407] device hsr_slave_0 left promiscuous mode [ 94.851020][ T4407] device hsr_slave_1 left promiscuous mode [ 94.858096][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.865492][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.874883][ T4407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.882546][ T4407] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.890541][ T4407] device bridge_slave_1 left promiscuous mode [ 94.896723][ T4407] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.905109][ T4407] device bridge_slave_0 left promiscuous mode [ 94.911910][ T4407] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.922422][ T4407] device veth1_macvtap left promiscuous mode [ 94.928933][ T4407] device veth0_macvtap left promiscuous mode [ 94.934968][ T4407] device veth1_vlan left promiscuous mode [ 94.940815][ T4407] device veth0_vlan left promiscuous mode [ 95.059069][ T4407] team0 (unregistering): Port device team_slave_1 removed [ 95.072119][ T4407] team0 (unregistering): Port device team_slave_0 removed [ 95.084531][ T4407] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.096758][ T4407] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.143931][ T4407] bond0 (unregistering): Released all slaves [ 95.190095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.198936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.214521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.223850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.232499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.240708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.253845][ T4898] device veth0_vlan entered promiscuous mode [ 95.265026][ T4898] device veth1_vlan entered promiscuous mode [ 95.290056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.298463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.306461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.315592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.325968][ T4898] device veth0_macvtap entered promiscuous mode [ 95.336977][ T4898] device veth1_macvtap entered promiscuous mode [ 95.359573][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.368215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.376373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.384673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.393433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.405856][ T4898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.424582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 95.434549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 95.445589][ T4898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.454917][ T4898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463959][ T4898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.473222][ T4898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.521687][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.542224][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/27 13:20:26 executed programs: 2 [ 95.567735][ T1273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 95.578864][ T1273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.587710][ T1273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.600874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 95.685325][ T5166] FAULT_INJECTION: forcing a failure. [ 95.685325][ T5166] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.700584][ T5166] CPU: 0 PID: 5166 Comm: syz.0.15 Not tainted syzkaller #0 [ 95.707898][ T5166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 95.717966][ T5166] Call Trace: [ 95.721256][ T5166] [ 95.724189][ T5166] dump_stack_lvl+0x168/0x230 [ 95.728882][ T5166] ? show_regs_print_info+0x20/0x20 [ 95.734075][ T5166] ? load_image+0x3b0/0x3b0 [ 95.738580][ T5166] ? __lock_acquire+0x7c60/0x7c60 [ 95.743603][ T5166] should_fail+0x38c/0x4c0 [ 95.748109][ T5166] prepare_alloc_pages+0x1e4/0x5f0 [ 95.753228][ T5166] __alloc_pages+0x10e/0x470 [ 95.757937][ T5166] ? unwind_get_return_address+0x49/0x80 [ 95.763583][ T5166] ? zone_statistics+0x170/0x170 [ 95.768618][ T5166] ? alloc_pages+0x438/0x550 [ 95.773296][ T5166] ? kfree+0x91/0x2a0 [ 95.777271][ T5166] stack_depot_save+0x342/0x440 [ 95.782123][ T5166] ? kfree+0xef/0x2a0 [ 95.786097][ T5166] kasan_set_track+0x62/0x70 [ 95.790679][ T5166] ? kasan_set_track+0x4b/0x70 [ 95.795434][ T5166] ? kasan_set_free_info+0x1f/0x40 [ 95.800536][ T5166] ? ____kasan_slab_free+0xd5/0x110 [ 95.805730][ T5166] ? slab_free_freelist_hook+0xea/0x170 [ 95.811361][ T5166] ? kfree+0xef/0x2a0 [ 95.815338][ T5166] ? ovl_lookup_index+0x308/0x680 [ 95.820370][ T5166] ? ovl_lookup+0x10d1/0x16c0 [ 95.825046][ T5166] ? __lookup_slow+0x27d/0x3d0 [ 95.829815][ T5166] ? lookup_one_unlocked+0x17a/0x290 [ 95.835092][ T5166] ? ovl_lookup_single+0x61/0x850 [ 95.840195][ T5166] ? ovl_lookup_layer+0x379/0x440 [ 95.845340][ T5166] ? ovl_lookup+0x6af/0x16c0 [ 95.849932][ T5166] ? __lookup_slow+0x27d/0x3d0 [ 95.854685][ T5166] ? lookup_slow+0x53/0x70 [ 95.859091][ T5166] ? walk_component+0x319/0x460 [ 95.863939][ T5166] ? path_lookupat+0x169/0x440 [ 95.868697][ T5166] ? filename_lookup+0x1e2/0x4f0 [ 95.873624][ T5166] ? user_path_at_empty+0x40/0x190 [ 95.878727][ T5166] ? path_setxattr+0xae/0x280 [ 95.883398][ T5166] ? __x64_sys_lsetxattr+0xb4/0xd0 [ 95.888517][ T5166] ? do_syscall_64+0x4c/0xa0 [ 95.893101][ T5166] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 95.899199][ T5166] kasan_set_free_info+0x1f/0x40 [ 95.904136][ T5166] ____kasan_slab_free+0xd5/0x110 [ 95.909158][ T5166] slab_free_freelist_hook+0xea/0x170 [ 95.914530][ T5166] ? ovl_lookup_index+0x308/0x680 [ 95.919552][ T5166] kfree+0xef/0x2a0 [ 95.923366][ T5166] ovl_lookup_index+0x308/0x680 [ 95.928219][ T5166] ovl_lookup+0x10d1/0x16c0 [ 95.932745][ T5166] ? ovl_path_next+0x260/0x260 [ 95.937512][ T5166] ? __init_waitqueue_head+0xa5/0x150 [ 95.942884][ T5166] __lookup_slow+0x27d/0x3d0 [ 95.947571][ T5166] ? lookup_one_len+0x2c0/0x2c0 [ 95.952428][ T5166] ? ovl_permission+0xc2/0x1e0 [ 95.957196][ T5166] ? down_read+0x1aa/0x2e0 [ 95.961621][ T5166] lookup_one_unlocked+0x17a/0x290 [ 95.966736][ T5166] ? lookup_one+0x2c0/0x2c0 [ 95.971240][ T5166] ovl_lookup_single+0x61/0x850 [ 95.976087][ T5166] ovl_lookup_layer+0x379/0x440 [ 95.980989][ T5166] ovl_lookup+0x6af/0x16c0 [ 95.985427][ T5166] ? ovl_path_next+0x260/0x260 [ 95.990197][ T5166] ? __init_waitqueue_head+0xa5/0x150 [ 95.995570][ T5166] __lookup_slow+0x27d/0x3d0 [ 96.000341][ T5166] ? lookup_one_len+0x2c0/0x2c0 [ 96.005198][ T5166] ? down_read+0x1aa/0x2e0 [ 96.009627][ T5166] lookup_slow+0x53/0x70 [ 96.013874][ T5166] walk_component+0x319/0x460 [ 96.018552][ T5166] path_lookupat+0x169/0x440 [ 96.023145][ T5166] filename_lookup+0x1e2/0x4f0 [ 96.027908][ T5166] ? hashlen_string+0x110/0x110 [ 96.032769][ T5166] ? strncpy_from_user+0x1fb/0x360 [ 96.037881][ T5166] ? getname_flags+0x1fe/0x500 [ 96.042650][ T5166] user_path_at_empty+0x40/0x190 [ 96.047583][ T5166] path_setxattr+0xae/0x280 [ 96.052083][ T5166] ? simple_xattr_list_add+0xf0/0xf0 [ 96.057360][ T5166] ? lock_chain_count+0x20/0x20 [ 96.062212][ T5166] ? vtime_user_exit+0x2dc/0x400 [ 96.067157][ T5166] __x64_sys_lsetxattr+0xb4/0xd0 [ 96.072183][ T5166] do_syscall_64+0x4c/0xa0 [ 96.076591][ T5166] ? clear_bhb_loop+0x30/0x80 [ 96.081262][ T5166] ? clear_bhb_loop+0x30/0x80 [ 96.085943][ T5166] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.091844][ T5166] RIP: 0033:0x7f2a9ce6d849 [ 96.096264][ T5166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.115870][ T5166] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 96.124326][ T5166] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 96.132401][ T5166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 96.140373][ T5166] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.148341][ T5166] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 96.156308][ T5166] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 96.164295][ T5166] [ 96.234992][ T5168] FAULT_INJECTION: forcing a failure. [ 96.234992][ T5168] name failslab, interval 1, probability 0, space 0, times 1 [ 96.250668][ T5168] CPU: 1 PID: 5168 Comm: syz.0.16 Not tainted syzkaller #0 [ 96.257957][ T5168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.268016][ T5168] Call Trace: [ 96.271310][ T5168] [ 96.274239][ T5168] dump_stack_lvl+0x168/0x230 [ 96.278933][ T5168] ? show_regs_print_info+0x20/0x20 [ 96.284136][ T5168] ? load_image+0x3b0/0x3b0 [ 96.288643][ T5168] ? __might_sleep+0xf0/0xf0 [ 96.293256][ T5168] ? __lock_acquire+0x7c60/0x7c60 [ 96.298377][ T5168] should_fail+0x38c/0x4c0 [ 96.302799][ T5168] should_failslab+0x5/0x20 [ 96.307295][ T5168] slab_pre_alloc_hook+0x51/0xc0 [ 96.312229][ T5168] kmem_cache_alloc_trace+0x47/0x2a0 [ 96.317521][ T5168] ? ovl_encode_real_fh+0xd0/0x330 [ 96.322640][ T5168] ovl_encode_real_fh+0xd0/0x330 [ 96.327584][ T5168] ? ovl_set_attr+0x310/0x310 [ 96.332275][ T5168] ? ovl_lookup_layer+0x379/0x440 [ 96.337315][ T5168] ovl_lookup_index+0x64/0x680 [ 96.342127][ T5168] ovl_lookup+0x10d1/0x16c0 [ 96.346659][ T5168] ? ovl_path_next+0x260/0x260 [ 96.351432][ T5168] ? __init_waitqueue_head+0xa5/0x150 [ 96.356807][ T5168] __lookup_slow+0x27d/0x3d0 [ 96.361412][ T5168] ? lookup_one_len+0x2c0/0x2c0 [ 96.366359][ T5168] ? down_read+0x1aa/0x2e0 [ 96.370792][ T5168] lookup_slow+0x53/0x70 [ 96.375033][ T5168] walk_component+0x319/0x460 [ 96.379706][ T5168] path_lookupat+0x169/0x440 [ 96.384300][ T5168] filename_lookup+0x1e2/0x4f0 [ 96.389065][ T5168] ? hashlen_string+0x110/0x110 [ 96.394083][ T5168] ? strncpy_from_user+0x1fb/0x360 [ 96.399213][ T5168] ? getname_flags+0x1fe/0x500 [ 96.404062][ T5168] user_path_at_empty+0x40/0x190 [ 96.409030][ T5168] path_setxattr+0xae/0x280 [ 96.413719][ T5168] ? simple_xattr_list_add+0xf0/0xf0 [ 96.419097][ T5168] ? lock_chain_count+0x20/0x20 [ 96.424032][ T5168] ? vtime_user_exit+0x2dc/0x400 [ 96.428977][ T5168] __x64_sys_lsetxattr+0xb4/0xd0 [ 96.433920][ T5168] do_syscall_64+0x4c/0xa0 [ 96.438328][ T5168] ? clear_bhb_loop+0x30/0x80 [ 96.443170][ T5168] ? clear_bhb_loop+0x30/0x80 [ 96.447831][ T5168] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.453719][ T5168] RIP: 0033:0x7f2a9ce6d849 [ 96.458121][ T5168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.477716][ T5168] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 96.486557][ T5168] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 96.494513][ T5168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 96.502481][ T5168] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.510442][ T5168] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 96.518411][ T5168] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 96.526390][ T5168] [ 96.578085][ T5170] FAULT_INJECTION: forcing a failure. [ 96.578085][ T5170] name failslab, interval 1, probability 0, space 0, times 0 [ 96.594245][ T5170] CPU: 1 PID: 5170 Comm: syz.0.17 Not tainted syzkaller #0 [ 96.601573][ T5170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.611635][ T5170] Call Trace: [ 96.614918][ T5170] [ 96.617839][ T5170] dump_stack_lvl+0x168/0x230 [ 96.622509][ T5170] ? show_regs_print_info+0x20/0x20 [ 96.627701][ T5170] ? load_image+0x3b0/0x3b0 [ 96.632186][ T5170] ? __might_sleep+0xf0/0xf0 [ 96.636756][ T5170] ? __lock_acquire+0x7c60/0x7c60 [ 96.641797][ T5170] should_fail+0x38c/0x4c0 [ 96.646504][ T5170] should_failslab+0x5/0x20 [ 96.651054][ T5170] slab_pre_alloc_hook+0x51/0xc0 [ 96.655979][ T5170] kmem_cache_alloc_trace+0x47/0x2a0 [ 96.661237][ T5170] ? ovl_encode_real_fh+0xd0/0x330 [ 96.666335][ T5170] ovl_encode_real_fh+0xd0/0x330 [ 96.671267][ T5170] ? ovl_set_attr+0x310/0x310 [ 96.675936][ T5170] ? ovl_lookup_layer+0x379/0x440 [ 96.680958][ T5170] ovl_lookup_index+0x64/0x680 [ 96.685889][ T5170] ovl_lookup+0x10d1/0x16c0 [ 96.690493][ T5170] ? ovl_path_next+0x260/0x260 [ 96.695247][ T5170] ? __init_waitqueue_head+0xa5/0x150 [ 96.700724][ T5170] __lookup_slow+0x27d/0x3d0 [ 96.705340][ T5170] ? lookup_one_len+0x2c0/0x2c0 [ 96.710173][ T5170] ? down_read+0x1aa/0x2e0 [ 96.714658][ T5170] lookup_slow+0x53/0x70 [ 96.718942][ T5170] walk_component+0x319/0x460 [ 96.723692][ T5170] path_lookupat+0x169/0x440 [ 96.728283][ T5170] filename_lookup+0x1e2/0x4f0 [ 96.733046][ T5170] ? hashlen_string+0x110/0x110 [ 96.738063][ T5170] ? strncpy_from_user+0x1fb/0x360 [ 96.743160][ T5170] ? getname_flags+0x1fe/0x500 [ 96.747912][ T5170] user_path_at_empty+0x40/0x190 [ 96.752851][ T5170] path_setxattr+0xae/0x280 [ 96.757342][ T5170] ? simple_xattr_list_add+0xf0/0xf0 [ 96.762607][ T5170] ? lock_chain_count+0x20/0x20 [ 96.767450][ T5170] ? vtime_user_exit+0x2dc/0x400 [ 96.772388][ T5170] __x64_sys_lsetxattr+0xb4/0xd0 [ 96.777317][ T5170] do_syscall_64+0x4c/0xa0 [ 96.781727][ T5170] ? clear_bhb_loop+0x30/0x80 [ 96.786385][ T5170] ? clear_bhb_loop+0x30/0x80 [ 96.791064][ T5170] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 96.796941][ T5170] RIP: 0033:0x7f2a9ce6d849 [ 96.801361][ T5170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.821300][ T5170] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 96.829699][ T5170] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 96.837668][ T5170] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 96.845719][ T5170] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 96.853677][ T5170] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 96.861648][ T5170] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 96.869612][ T5170] [ 96.874043][ T4800] Bluetooth: hci0: command 0x040f tx timeout [ 96.925163][ T5172] FAULT_INJECTION: forcing a failure. [ 96.925163][ T5172] name failslab, interval 1, probability 0, space 0, times 0 [ 96.943661][ T5172] CPU: 0 PID: 5172 Comm: syz.0.18 Not tainted syzkaller #0 [ 96.950975][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.961122][ T5172] Call Trace: [ 96.964406][ T5172] [ 96.967337][ T5172] dump_stack_lvl+0x168/0x230 [ 96.972023][ T5172] ? show_regs_print_info+0x20/0x20 [ 96.977220][ T5172] ? load_image+0x3b0/0x3b0 [ 96.981893][ T5172] ? __might_sleep+0xf0/0xf0 [ 96.986475][ T5172] ? __lock_acquire+0x7c60/0x7c60 [ 96.991499][ T5172] should_fail+0x38c/0x4c0 [ 96.995917][ T5172] should_failslab+0x5/0x20 [ 97.000427][ T5172] slab_pre_alloc_hook+0x51/0xc0 [ 97.005383][ T5172] kmem_cache_alloc_trace+0x47/0x2a0 [ 97.010670][ T5172] ? ovl_encode_real_fh+0xd0/0x330 [ 97.015789][ T5172] ovl_encode_real_fh+0xd0/0x330 [ 97.020724][ T5172] ? __lock_acquire+0x7c60/0x7c60 [ 97.025733][ T5172] ? ovl_set_attr+0x310/0x310 [ 97.030399][ T5172] ovl_encode_fh+0x6f2/0x940 [ 97.035105][ T5172] ? ovl_do_rename+0x180/0x180 [ 97.039860][ T5172] exportfs_encode_fh+0x169/0x480 [ 97.045112][ T5172] ovl_encode_real_fh+0xfc/0x330 [ 97.050049][ T5172] ? ovl_set_attr+0x310/0x310 [ 97.054776][ T5172] ? ovl_lookup_layer+0x379/0x440 [ 97.059801][ T5172] ovl_lookup_index+0x64/0x680 [ 97.064726][ T5172] ovl_lookup+0x10d1/0x16c0 [ 97.069257][ T5172] ? ovl_path_next+0x260/0x260 [ 97.074107][ T5172] ? __init_waitqueue_head+0xa5/0x150 [ 97.079473][ T5172] __lookup_slow+0x27d/0x3d0 [ 97.084077][ T5172] ? lookup_one_len+0x2c0/0x2c0 [ 97.088932][ T5172] ? down_read+0x1aa/0x2e0 [ 97.093336][ T5172] lookup_slow+0x53/0x70 [ 97.097704][ T5172] walk_component+0x319/0x460 [ 97.102384][ T5172] path_lookupat+0x169/0x440 [ 97.107086][ T5172] filename_lookup+0x1e2/0x4f0 [ 97.111958][ T5172] ? hashlen_string+0x110/0x110 [ 97.116827][ T5172] ? strncpy_from_user+0x1fb/0x360 [ 97.121972][ T5172] ? getname_flags+0x1fe/0x500 [ 97.126764][ T5172] user_path_at_empty+0x40/0x190 [ 97.131798][ T5172] path_setxattr+0xae/0x280 [ 97.136400][ T5172] ? simple_xattr_list_add+0xf0/0xf0 [ 97.141676][ T5172] ? lock_chain_count+0x20/0x20 [ 97.146532][ T5172] ? vtime_user_exit+0x2dc/0x400 [ 97.151478][ T5172] __x64_sys_lsetxattr+0xb4/0xd0 [ 97.156426][ T5172] do_syscall_64+0x4c/0xa0 [ 97.160841][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.165603][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.170281][ T5172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.176172][ T5172] RIP: 0033:0x7f2a9ce6d849 [ 97.180573][ T5172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.200246][ T5172] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 97.208647][ T5172] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 97.216604][ T5172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 97.224818][ T5172] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.232826][ T5172] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 97.240877][ T5172] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 97.248902][ T5172] [ 97.266361][ T5172] ------------[ cut here ]------------ [ 97.272224][ T5172] WARNING: CPU: 0 PID: 5172 at fs/overlayfs/copy_up.c:371 ovl_encode_real_fh+0x285/0x330 [ 97.282688][ T5172] Modules linked in: [ 97.286591][ T5172] CPU: 0 PID: 5172 Comm: syz.0.18 Not tainted syzkaller #0 [ 97.294561][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.304753][ T5172] RIP: 0010:ovl_encode_real_fh+0x285/0x330 [ 97.310971][ T5172] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fd 1d b9 fe 0f 0b eb 10 e8 f4 1d b9 fe 0f 0b eb 07 e8 eb 1d b9 fe <0f> 0b 48 89 df e8 31 f0 fc fe 48 c7 c3 fb ff ff ff eb a3 e8 03 41 [ 97.330672][ T5172] RSP: 0018:ffffc90002f8f6c0 EFLAGS: 00010293 [ 97.336977][ T5172] RAX: ffffffff82bead35 RBX: ffff888074883900 RCX: ffff8880197b8000 [ 97.344973][ T5172] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 97.353053][ T5172] RBP: ffffc90002f8f770 R08: dffffc0000000000 R09: fffffbfff1ad323e [ 97.361210][ T5172] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: 00000000000000ff [ 97.369291][ T5172] R13: 0000000000000080 R14: 1ffff920005f1edc R15: dffffc0000000000 [ 97.377431][ T5172] FS: 00007f2a9c0eb6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 97.386601][ T5172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 97.393314][ T5172] CR2: 00007f2a9ce509a0 CR3: 000000005c8fe000 CR4: 00000000003506f0 [ 97.401586][ T5172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 97.409643][ T5172] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 97.418497][ T5172] Call Trace: [ 97.421800][ T5172] [ 97.424738][ T5172] ? ovl_set_attr+0x310/0x310 [ 97.429883][ T5172] ? ovl_lookup_layer+0x379/0x440 [ 97.435032][ T5172] ovl_lookup_index+0x64/0x680 [ 97.440863][ T5172] ovl_lookup+0x10d1/0x16c0 [ 97.445497][ T5172] ? ovl_path_next+0x260/0x260 [ 97.450786][ T5172] ? __init_waitqueue_head+0xa5/0x150 [ 97.456438][ T5172] __lookup_slow+0x27d/0x3d0 [ 97.462422][ T5172] ? lookup_one_len+0x2c0/0x2c0 [ 97.467631][ T5172] ? down_read+0x1aa/0x2e0 [ 97.472246][ T5172] lookup_slow+0x53/0x70 [ 97.476666][ T5172] walk_component+0x319/0x460 [ 97.482871][ T5172] path_lookupat+0x169/0x440 [ 97.487937][ T5172] filename_lookup+0x1e2/0x4f0 [ 97.492791][ T5172] ? hashlen_string+0x110/0x110 [ 97.499011][ T5172] ? strncpy_from_user+0x1fb/0x360 [ 97.504220][ T5172] ? getname_flags+0x1fe/0x500 [ 97.509295][ T5172] user_path_at_empty+0x40/0x190 [ 97.514829][ T5172] path_setxattr+0xae/0x280 [ 97.521106][ T5172] ? simple_xattr_list_add+0xf0/0xf0 [ 97.526480][ T5172] ? lock_chain_count+0x20/0x20 [ 97.531822][ T5172] ? vtime_user_exit+0x2dc/0x400 [ 97.531869][ T5172] __x64_sys_lsetxattr+0xb4/0xd0 [ 97.542416][ T5172] do_syscall_64+0x4c/0xa0 [ 97.547276][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.551983][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.556708][ T5172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.562792][ T5172] RIP: 0033:0x7f2a9ce6d849 [ 97.567588][ T5172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.587350][ T5172] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 97.595806][ T5172] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 97.603817][ T5172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 97.611910][ T5172] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.620256][ T5172] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 97.628476][ T5172] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 97.636456][ T5172] [ 97.639524][ T5172] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 97.646802][ T5172] CPU: 0 PID: 5172 Comm: syz.0.18 Not tainted syzkaller #0 [ 97.654170][ T5172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 97.664207][ T5172] Call Trace: [ 97.667474][ T5172] [ 97.670389][ T5172] dump_stack_lvl+0x168/0x230 [ 97.675069][ T5172] ? show_regs_print_info+0x20/0x20 [ 97.680367][ T5172] ? load_image+0x3b0/0x3b0 [ 97.684857][ T5172] panic+0x2c9/0x7f0 [ 97.688748][ T5172] ? bpf_jit_dump+0xd0/0xd0 [ 97.693268][ T5172] ? ovl_encode_real_fh+0x285/0x330 [ 97.698450][ T5172] __warn+0x248/0x2b0 [ 97.702442][ T5172] ? ovl_encode_real_fh+0x285/0x330 [ 97.707644][ T5172] report_bug+0x1b7/0x2e0 [ 97.711967][ T5172] handle_bug+0x3a/0x70 [ 97.716195][ T5172] exc_invalid_op+0x16/0x40 [ 97.720679][ T5172] asm_exc_invalid_op+0x16/0x20 [ 97.725518][ T5172] RIP: 0010:ovl_encode_real_fh+0x285/0x330 [ 97.731312][ T5172] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 fd 1d b9 fe 0f 0b eb 10 e8 f4 1d b9 fe 0f 0b eb 07 e8 eb 1d b9 fe <0f> 0b 48 89 df e8 31 f0 fc fe 48 c7 c3 fb ff ff ff eb a3 e8 03 41 [ 97.751105][ T5172] RSP: 0018:ffffc90002f8f6c0 EFLAGS: 00010293 [ 97.757252][ T5172] RAX: ffffffff82bead35 RBX: ffff888074883900 RCX: ffff8880197b8000 [ 97.765206][ T5172] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 97.773173][ T5172] RBP: ffffc90002f8f770 R08: dffffc0000000000 R09: fffffbfff1ad323e [ 97.781230][ T5172] R10: fffffbfff1ad323e R11: 1ffffffff1ad323d R12: 00000000000000ff [ 97.789189][ T5172] R13: 0000000000000080 R14: 1ffff920005f1edc R15: dffffc0000000000 [ 97.797163][ T5172] ? ovl_encode_real_fh+0x285/0x330 [ 97.802385][ T5172] ? ovl_set_attr+0x310/0x310 [ 97.807051][ T5172] ? ovl_lookup_layer+0x379/0x440 [ 97.812082][ T5172] ovl_lookup_index+0x64/0x680 [ 97.816973][ T5172] ovl_lookup+0x10d1/0x16c0 [ 97.821584][ T5172] ? ovl_path_next+0x260/0x260 [ 97.826333][ T5172] ? __init_waitqueue_head+0xa5/0x150 [ 97.831705][ T5172] __lookup_slow+0x27d/0x3d0 [ 97.836369][ T5172] ? lookup_one_len+0x2c0/0x2c0 [ 97.841466][ T5172] ? down_read+0x1aa/0x2e0 [ 97.845977][ T5172] lookup_slow+0x53/0x70 [ 97.850261][ T5172] walk_component+0x319/0x460 [ 97.854925][ T5172] path_lookupat+0x169/0x440 [ 97.859503][ T5172] filename_lookup+0x1e2/0x4f0 [ 97.864259][ T5172] ? hashlen_string+0x110/0x110 [ 97.869109][ T5172] ? strncpy_from_user+0x1fb/0x360 [ 97.874202][ T5172] ? getname_flags+0x1fe/0x500 [ 97.879126][ T5172] user_path_at_empty+0x40/0x190 [ 97.884084][ T5172] path_setxattr+0xae/0x280 [ 97.888589][ T5172] ? simple_xattr_list_add+0xf0/0xf0 [ 97.893928][ T5172] ? lock_chain_count+0x20/0x20 [ 97.898782][ T5172] ? vtime_user_exit+0x2dc/0x400 [ 97.903724][ T5172] __x64_sys_lsetxattr+0xb4/0xd0 [ 97.908658][ T5172] do_syscall_64+0x4c/0xa0 [ 97.913069][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.917725][ T5172] ? clear_bhb_loop+0x30/0x80 [ 97.922377][ T5172] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.928270][ T5172] RIP: 0033:0x7f2a9ce6d849 [ 97.932693][ T5172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.952368][ T5172] RSP: 002b:00007f2a9c0eb058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 97.960785][ T5172] RAX: ffffffffffffffda RBX: 00007f2a9d032fa0 RCX: 00007f2a9ce6d849 [ 97.968737][ T5172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 97.976712][ T5172] RBP: 00007f2a9c0eb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.984665][ T5172] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 97.992706][ T5172] R13: 0000000000000000 R14: 00007f2a9d032fa0 R15: 00007ffcc8a31308 [ 98.000672][ T5172] [ 98.003964][ T5172] Kernel Offset: disabled [ 98.008385][ T5172] Rebooting in 86400 seconds..