[ 71.594191][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.600704][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. 2026/06/18 05:19:54 parsed 1 programs [ 76.713492][ T7] cfg80211: failed to load regulatory.db [ 78.099885][ T4488] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.562157][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.570042][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.578242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.593565][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.602337][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.613410][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.808143][ T4537] chnl_net:caif_netlink_parms(): no params data found [ 79.848746][ T4537] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.856201][ T4537] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.864223][ T4537] device bridge_slave_0 entered promiscuous mode [ 79.873224][ T4537] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.880345][ T4537] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.888440][ T4537] device bridge_slave_1 entered promiscuous mode [ 79.910781][ T4537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.935111][ T4537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.966578][ T4537] team0: Port device team_slave_0 added [ 79.976298][ T4537] team0: Port device team_slave_1 added [ 79.999236][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.007471][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.035149][ T4537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.051232][ T4537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.059805][ T4537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.088344][ T4537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.141799][ T4537] device hsr_slave_0 entered promiscuous mode [ 80.154526][ T4537] device hsr_slave_1 entered promiscuous mode [ 80.845208][ T4537] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.865120][ T4537] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.895580][ T4537] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.914565][ T4537] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.035254][ T4537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.055741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.064693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.084649][ T4537] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.096360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.106187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.124607][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.131720][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.152291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.161209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.170852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.180336][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.188011][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.196840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.206153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.216516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.226899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.238103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.254879][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.268251][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.277830][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.287661][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.297228][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.307084][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.318108][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.473892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.494521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.528974][ T4537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.556219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.567924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.588085][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.600159][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.609622][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.620360][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.629952][ T4537] device veth0_vlan entered promiscuous mode [ 81.642593][ T4537] device veth1_vlan entered promiscuous mode [ 81.654737][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.663714][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.685834][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.695988][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.708590][ T4537] device veth0_macvtap entered promiscuous mode [ 81.719094][ T4537] device veth1_macvtap entered promiscuous mode [ 81.744844][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.754521][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.764292][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.773486][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.782473][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.793465][ T4537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.803807][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 81.816984][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 81.828991][ T4537] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.840685][ T4537] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.851119][ T4537] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.860877][ T4537] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.987344][ T4537] syz-executor (4537) used greatest stack depth: 20944 bytes left 2026/06/18 05:20:03 executed programs: 0 [ 84.095370][ T4711] chnl_net:caif_netlink_parms(): no params data found [ 84.187689][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.196505][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.205893][ T4711] device bridge_slave_0 entered promiscuous mode [ 84.222153][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.238972][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.253649][ T4711] device bridge_slave_1 entered promiscuous mode [ 84.309945][ T4711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.322210][ T4711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.356568][ T4711] team0: Port device team_slave_0 added [ 84.376321][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.391215][ T4711] team0: Port device team_slave_1 added [ 84.415416][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.422766][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.449154][ T4711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.462330][ T4711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.469305][ T4711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.495820][ T4711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.529402][ T4711] device hsr_slave_0 entered promiscuous mode [ 84.536320][ T4711] device hsr_slave_1 entered promiscuous mode [ 84.543357][ T4711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.550920][ T4711] Cannot create hsr debugfs directory [ 85.912327][ T4300] Bluetooth: hci0: command 0x0409 tx timeout [ 87.357899][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.416825][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.486980][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.001521][ T4298] Bluetooth: hci0: command 0x041b tx timeout [ 88.247681][ T4711] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.256420][ T4711] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.265808][ T4711] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.278944][ T4711] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.331368][ T4711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.344699][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.353673][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.364407][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.390232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.401247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.410567][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.417687][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.425821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.452673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.462689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.471920][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.478988][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.493299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.503918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.527189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.536908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.546248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.569687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.578415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.589731][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.598209][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.610391][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.619202][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.629706][ T4711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.643052][ T154] device hsr_slave_0 left promiscuous mode [ 88.649628][ T154] device hsr_slave_1 left promiscuous mode [ 88.656803][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.664530][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.673300][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.680724][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.688420][ T154] device bridge_slave_1 left promiscuous mode [ 88.694813][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.703064][ T154] device bridge_slave_0 left promiscuous mode [ 88.709257][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.719849][ T154] device veth1_macvtap left promiscuous mode [ 88.725931][ T154] device veth0_macvtap left promiscuous mode [ 88.732163][ T154] device veth1_vlan left promiscuous mode [ 88.737960][ T154] device veth0_vlan left promiscuous mode [ 88.864853][ T154] team0 (unregistering): Port device team_slave_1 removed [ 88.879907][ T154] team0 (unregistering): Port device team_slave_0 removed [ 88.891280][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.904819][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.948308][ T154] bond0 (unregistering): Released all slaves [ 89.065000][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.072558][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.084654][ T4711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.099674][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.109652][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.144460][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.154556][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.163733][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.171903][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.187792][ T4711] device veth0_vlan entered promiscuous mode [ 89.212668][ T4711] device veth1_vlan entered promiscuous mode [ 89.229173][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.237788][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.245984][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.255132][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.265886][ T4711] device veth0_macvtap entered promiscuous mode [ 89.276772][ T4711] device veth1_macvtap entered promiscuous mode [ 89.289555][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.297083][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.305163][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.313632][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.322729][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.333666][ T4711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.340937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.349792][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.369742][ T4711] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.379777][ T4711] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.389293][ T4711] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.398646][ T4711] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.450092][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.471467][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.483519][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 2026/06/18 05:20:08 executed programs: 2 [ 89.516652][ T156] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.525395][ T156] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.534246][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.600079][ T4867] FAULT_INJECTION: forcing a failure. [ 89.600079][ T4867] name failslab, interval 1, probability 0, space 0, times 1 [ 89.615469][ T4867] CPU: 0 PID: 4867 Comm: syz.0.15 Not tainted syzkaller #0 [ 89.622703][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.632867][ T4867] Call Trace: [ 89.636154][ T4867] [ 89.639081][ T4867] dump_stack_lvl+0x188/0x250 [ 89.643901][ T4867] ? show_regs_print_info+0x20/0x20 [ 89.649102][ T4867] ? load_image+0x410/0x410 [ 89.653696][ T4867] ? __might_sleep+0xf0/0xf0 [ 89.658285][ T4867] ? __lock_acquire+0x7b50/0x7b50 [ 89.663310][ T4867] should_fail+0x383/0x4b0 [ 89.667731][ T4867] should_failslab+0x5/0x20 [ 89.672230][ T4867] slab_pre_alloc_hook+0x51/0xc0 [ 89.677180][ T4867] kmem_cache_alloc_trace+0x47/0x290 [ 89.682465][ T4867] ? ovl_encode_real_fh+0xd6/0x340 [ 89.687578][ T4867] ? _raw_spin_unlock+0x24/0x40 [ 89.692428][ T4867] ovl_encode_real_fh+0xd6/0x340 [ 89.697465][ T4867] ? ovl_lookup_trap_inode+0x88/0xe0 [ 89.702762][ T4867] ? ovl_set_attr+0x3b0/0x3b0 [ 89.707452][ T4867] ? ovl_lookup_single+0x54b/0x830 [ 89.712568][ T4867] ? ovl_lookup_layer+0x379/0x440 [ 89.717586][ T4867] ovl_lookup_index+0x64/0x680 [ 89.722361][ T4867] ovl_lookup+0x10a6/0x16e0 [ 89.726888][ T4867] ? ovl_path_next+0x260/0x260 [ 89.731666][ T4867] __lookup_slow+0x29d/0x410 [ 89.736258][ T4867] ? lookup_one_len+0x2d0/0x2d0 [ 89.741120][ T4867] ? down_read+0x1aa/0x2e0 [ 89.745536][ T4867] lookup_slow+0x53/0x70 [ 89.749775][ T4867] walk_component+0x314/0x460 [ 89.754451][ T4867] path_lookupat+0x148/0x420 [ 89.759125][ T4867] filename_lookup+0x21e/0x550 [ 89.763898][ T4867] ? __lock_acquire+0x7b50/0x7b50 [ 89.768930][ T4867] ? hashlen_string+0x110/0x110 [ 89.773812][ T4867] ? strncpy_from_user+0x1f4/0x350 [ 89.778947][ T4867] ? getname_flags+0x1f9/0x4f0 [ 89.783799][ T4867] user_path_at_empty+0x40/0x190 [ 89.788750][ T4867] path_setxattr+0xb3/0x290 [ 89.793254][ T4867] ? simple_xattr_list_add+0xf0/0xf0 [ 89.798544][ T4867] ? lock_chain_count+0x20/0x20 [ 89.803400][ T4867] __x64_sys_lsetxattr+0xb4/0xd0 [ 89.808430][ T4867] do_syscall_64+0x4c/0xa0 [ 89.812925][ T4867] ? clear_bhb_loop+0x30/0x80 [ 89.817601][ T4867] ? clear_bhb_loop+0x30/0x80 [ 89.822364][ T4867] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.828269][ T4867] RIP: 0033:0x7fe83f873999 [ 89.832692][ T4867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.852293][ T4867] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 89.860713][ T4867] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 89.868682][ T4867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 89.876650][ T4867] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 89.884712][ T4867] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 89.892692][ T4867] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 89.900697][ T4867] [ 89.955510][ T4869] FAULT_INJECTION: forcing a failure. [ 89.955510][ T4869] name failslab, interval 1, probability 0, space 0, times 0 [ 89.971376][ T4869] CPU: 0 PID: 4869 Comm: syz.0.16 Not tainted syzkaller #0 [ 89.978602][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 89.989010][ T4869] Call Trace: [ 89.992303][ T4869] [ 89.995229][ T4869] dump_stack_lvl+0x188/0x250 [ 89.999905][ T4869] ? show_regs_print_info+0x20/0x20 [ 90.005100][ T4869] ? load_image+0x410/0x410 [ 90.009617][ T4869] ? __might_sleep+0xf0/0xf0 [ 90.014210][ T4869] ? __lock_acquire+0x7b50/0x7b50 [ 90.019228][ T4869] ? lockdep_init_map_type+0x98/0x900 [ 90.024604][ T4869] should_fail+0x383/0x4b0 [ 90.029041][ T4869] should_failslab+0x5/0x20 [ 90.033551][ T4869] slab_pre_alloc_hook+0x51/0xc0 [ 90.038582][ T4869] ? security_inode_alloc+0x30/0x110 [ 90.043907][ T4869] kmem_cache_alloc+0x3d/0x280 [ 90.048694][ T4869] security_inode_alloc+0x30/0x110 [ 90.054073][ T4869] inode_init_always+0x8e5/0xc90 [ 90.059009][ T4869] ? ovl_lookup_inode+0x130/0x130 [ 90.064039][ T4869] iget5_locked+0xc9/0x250 [ 90.068677][ T4869] ? ovl_get_trap_inode+0x190/0x190 [ 90.072771][ T4299] Bluetooth: hci0: command 0x040f tx timeout [ 90.073870][ T4869] ovl_get_inode+0x4ed/0xbb0 [ 90.084444][ T4869] ovl_lookup+0x13a6/0x16e0 [ 90.089066][ T4869] ? ovl_path_next+0x260/0x260 [ 90.093934][ T4869] __lookup_slow+0x29d/0x410 [ 90.098702][ T4869] ? lookup_one_len+0x2d0/0x2d0 [ 90.103554][ T4869] ? ovl_permission+0xc2/0x1e0 [ 90.108402][ T4869] ? down_read+0x1aa/0x2e0 [ 90.112817][ T4869] lookup_one_unlocked+0x184/0x2a0 [ 90.117933][ T4869] ? lookup_one+0x2d0/0x2d0 [ 90.122444][ T4869] ovl_lookup_single+0x5c/0x830 [ 90.127338][ T4869] ovl_lookup_layer+0x379/0x440 [ 90.132283][ T4869] ovl_lookup+0x6ad/0x16e0 [ 90.136712][ T4869] ? ovl_path_next+0x260/0x260 [ 90.141486][ T4869] __lookup_slow+0x29d/0x410 [ 90.146073][ T4869] ? lookup_one_len+0x2d0/0x2d0 [ 90.150942][ T4869] ? down_read+0x1aa/0x2e0 [ 90.155368][ T4869] lookup_slow+0x53/0x70 [ 90.159601][ T4869] walk_component+0x314/0x460 [ 90.164277][ T4869] path_lookupat+0x148/0x420 [ 90.168862][ T4869] filename_lookup+0x21e/0x550 [ 90.173643][ T4869] ? __lock_acquire+0x7b50/0x7b50 [ 90.178671][ T4869] ? hashlen_string+0x110/0x110 [ 90.183629][ T4869] ? strncpy_from_user+0x1f4/0x350 [ 90.188738][ T4869] ? getname_flags+0x1f9/0x4f0 [ 90.193513][ T4869] user_path_at_empty+0x40/0x190 [ 90.198453][ T4869] path_setxattr+0xb3/0x290 [ 90.203041][ T4869] ? simple_xattr_list_add+0xf0/0xf0 [ 90.208319][ T4869] ? lock_chain_count+0x20/0x20 [ 90.213206][ T4869] __x64_sys_lsetxattr+0xb4/0xd0 [ 90.218147][ T4869] do_syscall_64+0x4c/0xa0 [ 90.222559][ T4869] ? clear_bhb_loop+0x30/0x80 [ 90.227331][ T4869] ? clear_bhb_loop+0x30/0x80 [ 90.232010][ T4869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.237915][ T4869] RIP: 0033:0x7fe83f873999 [ 90.242336][ T4869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.261943][ T4869] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 90.270486][ T4869] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 90.278467][ T4869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 90.286439][ T4869] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.294396][ T4869] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 90.302350][ T4869] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 90.310323][ T4869] [ 90.326861][ T4869] overlayfs: failed to get inode (-12) [ 90.395301][ T4871] FAULT_INJECTION: forcing a failure. [ 90.395301][ T4871] name failslab, interval 1, probability 0, space 0, times 0 [ 90.408739][ T4871] CPU: 0 PID: 4871 Comm: syz.0.17 Not tainted syzkaller #0 [ 90.415944][ T4871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.425998][ T4871] Call Trace: [ 90.429269][ T4871] [ 90.432185][ T4871] dump_stack_lvl+0x188/0x250 [ 90.436860][ T4871] ? show_regs_print_info+0x20/0x20 [ 90.442043][ T4871] ? load_image+0x410/0x410 [ 90.446553][ T4871] ? __might_sleep+0xf0/0xf0 [ 90.451214][ T4871] ? __lock_acquire+0x7b50/0x7b50 [ 90.456255][ T4871] should_fail+0x383/0x4b0 [ 90.460699][ T4871] should_failslab+0x5/0x20 [ 90.465191][ T4871] slab_pre_alloc_hook+0x51/0xc0 [ 90.470121][ T4871] kmem_cache_alloc_trace+0x47/0x290 [ 90.475393][ T4871] ? ovl_encode_real_fh+0xd6/0x340 [ 90.480584][ T4871] ? _raw_spin_unlock+0x24/0x40 [ 90.485444][ T4871] ovl_encode_real_fh+0xd6/0x340 [ 90.490378][ T4871] ? ovl_lookup_trap_inode+0x88/0xe0 [ 90.495647][ T4871] ? ovl_set_attr+0x3b0/0x3b0 [ 90.500566][ T4871] ? ovl_lookup_single+0x54b/0x830 [ 90.505661][ T4871] ? ovl_lookup_layer+0x379/0x440 [ 90.510679][ T4871] ovl_lookup_index+0x64/0x680 [ 90.515434][ T4871] ovl_lookup+0x10a6/0x16e0 [ 90.519951][ T4871] ? ovl_path_next+0x260/0x260 [ 90.524738][ T4871] __lookup_slow+0x29d/0x410 [ 90.529428][ T4871] ? lookup_one_len+0x2d0/0x2d0 [ 90.534274][ T4871] ? down_read+0x1aa/0x2e0 [ 90.538703][ T4871] lookup_slow+0x53/0x70 [ 90.542930][ T4871] walk_component+0x314/0x460 [ 90.547594][ T4871] path_lookupat+0x148/0x420 [ 90.552180][ T4871] filename_lookup+0x21e/0x550 [ 90.556939][ T4871] ? __lock_acquire+0x7b50/0x7b50 [ 90.561950][ T4871] ? hashlen_string+0x110/0x110 [ 90.566815][ T4871] ? strncpy_from_user+0x1f4/0x350 [ 90.571915][ T4871] ? getname_flags+0x1f9/0x4f0 [ 90.576688][ T4871] user_path_at_empty+0x40/0x190 [ 90.581613][ T4871] path_setxattr+0xb3/0x290 [ 90.586102][ T4871] ? simple_xattr_list_add+0xf0/0xf0 [ 90.591373][ T4871] ? lock_chain_count+0x20/0x20 [ 90.596215][ T4871] __x64_sys_lsetxattr+0xb4/0xd0 [ 90.601144][ T4871] do_syscall_64+0x4c/0xa0 [ 90.605552][ T4871] ? clear_bhb_loop+0x30/0x80 [ 90.610220][ T4871] ? clear_bhb_loop+0x30/0x80 [ 90.615142][ T4871] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.621020][ T4871] RIP: 0033:0x7fe83f873999 [ 90.625419][ T4871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.645107][ T4871] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 90.653682][ T4871] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 90.661648][ T4871] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 90.669616][ T4871] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.677580][ T4871] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 90.685627][ T4871] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 90.693603][ T4871] [ 90.760973][ T4874] FAULT_INJECTION: forcing a failure. [ 90.760973][ T4874] name failslab, interval 1, probability 0, space 0, times 0 [ 90.778189][ T4874] CPU: 0 PID: 4874 Comm: syz.0.18 Not tainted syzkaller #0 [ 90.785418][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 90.795821][ T4874] Call Trace: [ 90.799098][ T4874] [ 90.802023][ T4874] dump_stack_lvl+0x188/0x250 [ 90.806702][ T4874] ? show_regs_print_info+0x20/0x20 [ 90.811908][ T4874] ? load_image+0x410/0x410 [ 90.816518][ T4874] ? __might_sleep+0xf0/0xf0 [ 90.821110][ T4874] ? __lock_acquire+0x7b50/0x7b50 [ 90.826230][ T4874] should_fail+0x383/0x4b0 [ 90.830654][ T4874] should_failslab+0x5/0x20 [ 90.835179][ T4874] slab_pre_alloc_hook+0x51/0xc0 [ 90.840215][ T4874] kmem_cache_alloc_trace+0x47/0x290 [ 90.845500][ T4874] ? ovl_encode_real_fh+0xd6/0x340 [ 90.850618][ T4874] ? _raw_spin_unlock+0x24/0x40 [ 90.855573][ T4874] ovl_encode_real_fh+0xd6/0x340 [ 90.860534][ T4874] ? ovl_lookup_trap_inode+0x88/0xe0 [ 90.865836][ T4874] ? ovl_set_attr+0x3b0/0x3b0 [ 90.870505][ T4874] ? ovl_lookup_single+0x54b/0x830 [ 90.875610][ T4874] ? ovl_lookup_layer+0x379/0x440 [ 90.880637][ T4874] ovl_lookup_index+0x64/0x680 [ 90.885413][ T4874] ovl_lookup+0x10a6/0x16e0 [ 90.889924][ T4874] ? ovl_path_next+0x260/0x260 [ 90.894860][ T4874] __lookup_slow+0x29d/0x410 [ 90.899455][ T4874] ? lookup_one_len+0x2d0/0x2d0 [ 90.904465][ T4874] ? down_read+0x1aa/0x2e0 [ 90.909042][ T4874] lookup_slow+0x53/0x70 [ 90.913513][ T4874] walk_component+0x314/0x460 [ 90.918210][ T4874] path_lookupat+0x148/0x420 [ 90.922819][ T4874] filename_lookup+0x21e/0x550 [ 90.927591][ T4874] ? __lock_acquire+0x7b50/0x7b50 [ 90.932608][ T4874] ? hashlen_string+0x110/0x110 [ 90.937476][ T4874] ? strncpy_from_user+0x1f4/0x350 [ 90.942669][ T4874] ? getname_flags+0x1f9/0x4f0 [ 90.947538][ T4874] user_path_at_empty+0x40/0x190 [ 90.952486][ T4874] path_setxattr+0xb3/0x290 [ 90.956995][ T4874] ? simple_xattr_list_add+0xf0/0xf0 [ 90.962287][ T4874] ? lock_chain_count+0x20/0x20 [ 90.967304][ T4874] __x64_sys_lsetxattr+0xb4/0xd0 [ 90.972245][ T4874] do_syscall_64+0x4c/0xa0 [ 90.976765][ T4874] ? clear_bhb_loop+0x30/0x80 [ 90.981436][ T4874] ? clear_bhb_loop+0x30/0x80 [ 90.986346][ T4874] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.992264][ T4874] RIP: 0033:0x7fe83f873999 [ 90.996810][ T4874] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.016931][ T4874] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.025614][ T4874] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 91.033601][ T4874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 91.041587][ T4874] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.049553][ T4874] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 91.057634][ T4874] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 91.065609][ T4874] [ 91.100030][ T4876] FAULT_INJECTION: forcing a failure. [ 91.100030][ T4876] name failslab, interval 1, probability 0, space 0, times 0 [ 91.114341][ T4876] CPU: 1 PID: 4876 Comm: syz.0.19 Not tainted syzkaller #0 [ 91.121733][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.132238][ T4876] Call Trace: [ 91.135540][ T4876] [ 91.138482][ T4876] dump_stack_lvl+0x188/0x250 [ 91.143157][ T4876] ? show_regs_print_info+0x20/0x20 [ 91.148353][ T4876] ? load_image+0x410/0x410 [ 91.152851][ T4876] ? __might_sleep+0xf0/0xf0 [ 91.157606][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 91.162629][ T4876] should_fail+0x383/0x4b0 [ 91.167650][ T4876] should_failslab+0x5/0x20 [ 91.172146][ T4876] slab_pre_alloc_hook+0x51/0xc0 [ 91.177282][ T4876] kmem_cache_alloc_trace+0x47/0x290 [ 91.182654][ T4876] ? ovl_encode_real_fh+0xd6/0x340 [ 91.187969][ T4876] ovl_encode_real_fh+0xd6/0x340 [ 91.192992][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 91.198146][ T4876] ? ovl_set_attr+0x3b0/0x3b0 [ 91.202826][ T4876] ovl_encode_fh+0x6ee/0x930 [ 91.207496][ T4876] ? ovl_do_rename+0x1c0/0x1c0 [ 91.212433][ T4876] exportfs_encode_fh+0x169/0x480 [ 91.217541][ T4876] ovl_encode_real_fh+0x102/0x340 [ 91.223042][ T4876] ? ovl_set_attr+0x3b0/0x3b0 [ 91.227718][ T4876] ? ovl_lookup_single+0x54b/0x830 [ 91.232849][ T4876] ? ovl_lookup_layer+0x379/0x440 [ 91.237894][ T4876] ovl_lookup_index+0x64/0x680 [ 91.242679][ T4876] ovl_lookup+0x10a6/0x16e0 [ 91.247215][ T4876] ? ovl_path_next+0x260/0x260 [ 91.251971][ T4876] __lookup_slow+0x29d/0x410 [ 91.256571][ T4876] ? lookup_one_len+0x2d0/0x2d0 [ 91.261424][ T4876] ? down_read+0x1aa/0x2e0 [ 91.265869][ T4876] lookup_slow+0x53/0x70 [ 91.270097][ T4876] walk_component+0x314/0x460 [ 91.274767][ T4876] path_lookupat+0x148/0x420 [ 91.279344][ T4876] filename_lookup+0x21e/0x550 [ 91.284094][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 91.289108][ T4876] ? hashlen_string+0x110/0x110 [ 91.294406][ T4876] ? strncpy_from_user+0x1f4/0x350 [ 91.299671][ T4876] ? getname_flags+0x1f9/0x4f0 [ 91.304452][ T4876] user_path_at_empty+0x40/0x190 [ 91.309392][ T4876] path_setxattr+0xb3/0x290 [ 91.313893][ T4876] ? simple_xattr_list_add+0xf0/0xf0 [ 91.319176][ T4876] ? lock_chain_count+0x20/0x20 [ 91.324107][ T4876] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.329119][ T4876] do_syscall_64+0x4c/0xa0 [ 91.333542][ T4876] ? clear_bhb_loop+0x30/0x80 [ 91.338231][ T4876] ? clear_bhb_loop+0x30/0x80 [ 91.342898][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.348877][ T4876] RIP: 0033:0x7fe83f873999 [ 91.353374][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.373524][ T4876] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.382054][ T4876] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 91.390023][ T4876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 91.398164][ T4876] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.406212][ T4876] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 91.414180][ T4876] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 91.422160][ T4876] [ 91.440069][ T4876] ------------[ cut here ]------------ [ 91.446503][ T4876] WARNING: CPU: 1 PID: 4876 at fs/overlayfs/copy_up.c:371 ovl_encode_real_fh+0x291/0x340 [ 91.456474][ T4876] Modules linked in: [ 91.460397][ T4876] CPU: 1 PID: 4876 Comm: syz.0.19 Not tainted syzkaller #0 [ 91.468290][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.478421][ T4876] RIP: 0010:ovl_encode_real_fh+0x291/0x340 [ 91.484434][ T4876] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 c3 b5 fe 0f 0b eb 10 e8 08 c3 b5 fe 0f 0b eb 07 e8 ff c2 b5 fe <0f> 0b 48 89 df e8 e5 4d fa fe 48 c7 c3 fb ff ff ff eb 9d e8 f7 18 [ 91.504295][ T4876] RSP: 0018:ffffc90002fcf700 EFLAGS: 00010293 [ 91.510428][ T4876] RAX: ffffffff82c32e41 RBX: ffff88801a9f1900 RCX: ffff8880220abb80 [ 91.518442][ T4876] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 91.526453][ T4876] RBP: ffffc90002fcf7b0 R08: ffffffff8d89c92f R09: 1ffffffff1b13925 [ 91.534937][ T4876] R10: dffffc0000000000 R11: fffffbfff1b13926 R12: 00000000000000ff [ 91.542966][ T4876] R13: 0000000000000080 R14: dffffc0000000000 R15: 1ffff920005f9ee4 [ 91.551082][ T4876] FS: 00007fe83eae76c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 91.560244][ T4876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.566880][ T4876] CR2: 00007fe83f8c0a40 CR3: 000000002a6ff000 CR4: 00000000003506e0 [ 91.574996][ T4876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 91.583117][ T4876] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.591087][ T4876] Call Trace: [ 91.594402][ T4876] [ 91.597340][ T4876] ? ovl_set_attr+0x3b0/0x3b0 [ 91.602074][ T4876] ? ovl_lookup_single+0x54b/0x830 [ 91.607196][ T4876] ? ovl_lookup_layer+0x379/0x440 [ 91.612275][ T4876] ovl_lookup_index+0x64/0x680 [ 91.617050][ T4876] ovl_lookup+0x10a6/0x16e0 [ 91.621622][ T4876] ? ovl_path_next+0x260/0x260 [ 91.626412][ T4876] __lookup_slow+0x29d/0x410 [ 91.630999][ T4876] ? lookup_one_len+0x2d0/0x2d0 [ 91.635893][ T4876] ? down_read+0x1aa/0x2e0 [ 91.640322][ T4876] lookup_slow+0x53/0x70 [ 91.644599][ T4876] walk_component+0x314/0x460 [ 91.649482][ T4876] path_lookupat+0x148/0x420 [ 91.654182][ T4876] filename_lookup+0x21e/0x550 [ 91.658959][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 91.664233][ T4876] ? hashlen_string+0x110/0x110 [ 91.669250][ T4876] ? strncpy_from_user+0x1f4/0x350 [ 91.674433][ T4876] ? getname_flags+0x1f9/0x4f0 [ 91.679212][ T4876] user_path_at_empty+0x40/0x190 [ 91.684189][ T4876] path_setxattr+0xb3/0x290 [ 91.688698][ T4876] ? simple_xattr_list_add+0xf0/0xf0 [ 91.694010][ T4876] ? lock_chain_count+0x20/0x20 [ 91.698867][ T4876] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.703835][ T4876] do_syscall_64+0x4c/0xa0 [ 91.708367][ T4876] ? clear_bhb_loop+0x30/0x80 [ 91.713103][ T4876] ? clear_bhb_loop+0x30/0x80 [ 91.717792][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.723735][ T4876] RIP: 0033:0x7fe83f873999 [ 91.728159][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.748028][ T4876] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.757525][ T4876] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 91.765719][ T4876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 91.773874][ T4876] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.783000][ T4876] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 91.790990][ T4876] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 91.799022][ T4876] [ 91.802111][ T4876] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.809491][ T4876] CPU: 1 PID: 4876 Comm: syz.0.19 Not tainted syzkaller #0 [ 91.816677][ T4876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 91.826728][ T4876] Call Trace: [ 91.830006][ T4876] [ 91.832969][ T4876] dump_stack_lvl+0x188/0x250 [ 91.837651][ T4876] ? show_regs_print_info+0x20/0x20 [ 91.842833][ T4876] ? load_image+0x410/0x410 [ 91.847328][ T4876] panic+0x2f8/0x850 [ 91.851309][ T4876] ? bpf_jit_dump+0xd0/0xd0 [ 91.855975][ T4876] ? ovl_encode_real_fh+0x291/0x340 [ 91.861184][ T4876] __warn+0x248/0x2b0 [ 91.865276][ T4876] ? ovl_encode_real_fh+0x291/0x340 [ 91.870571][ T4876] report_bug+0x1b9/0x2e0 [ 91.875036][ T4876] handle_bug+0x3a/0x70 [ 91.879498][ T4876] exc_invalid_op+0x16/0x40 [ 91.884094][ T4876] asm_exc_invalid_op+0x16/0x20 [ 91.889098][ T4876] RIP: 0010:ovl_encode_real_fh+0x291/0x340 [ 91.895111][ T4876] Code: 3c 48 89 d8 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 11 c3 b5 fe 0f 0b eb 10 e8 08 c3 b5 fe 0f 0b eb 07 e8 ff c2 b5 fe <0f> 0b 48 89 df e8 e5 4d fa fe 48 c7 c3 fb ff ff ff eb 9d e8 f7 18 [ 91.914718][ T4876] RSP: 0018:ffffc90002fcf700 EFLAGS: 00010293 [ 91.920881][ T4876] RAX: ffffffff82c32e41 RBX: ffff88801a9f1900 RCX: ffff8880220abb80 [ 91.930246][ T4876] RDX: 0000000000000000 RSI: 00000000000000ff RDI: 00000000000000ff [ 91.938222][ T4876] RBP: ffffc90002fcf7b0 R08: ffffffff8d89c92f R09: 1ffffffff1b13925 [ 91.946810][ T4876] R10: dffffc0000000000 R11: fffffbfff1b13926 R12: 00000000000000ff [ 91.954961][ T4876] R13: 0000000000000080 R14: dffffc0000000000 R15: 1ffff920005f9ee4 [ 91.962955][ T4876] ? ovl_encode_real_fh+0x291/0x340 [ 91.968287][ T4876] ? ovl_set_attr+0x3b0/0x3b0 [ 91.972962][ T4876] ? ovl_lookup_single+0x54b/0x830 [ 91.978095][ T4876] ? ovl_lookup_layer+0x379/0x440 [ 91.983122][ T4876] ovl_lookup_index+0x64/0x680 [ 91.987977][ T4876] ovl_lookup+0x10a6/0x16e0 [ 91.992490][ T4876] ? ovl_path_next+0x260/0x260 [ 91.997325][ T4876] __lookup_slow+0x29d/0x410 [ 92.001922][ T4876] ? lookup_one_len+0x2d0/0x2d0 [ 92.006787][ T4876] ? down_read+0x1aa/0x2e0 [ 92.011363][ T4876] lookup_slow+0x53/0x70 [ 92.015625][ T4876] walk_component+0x314/0x460 [ 92.020324][ T4876] path_lookupat+0x148/0x420 [ 92.024905][ T4876] filename_lookup+0x21e/0x550 [ 92.029660][ T4876] ? __lock_acquire+0x7b50/0x7b50 [ 92.034672][ T4876] ? hashlen_string+0x110/0x110 [ 92.039522][ T4876] ? strncpy_from_user+0x1f4/0x350 [ 92.044712][ T4876] ? getname_flags+0x1f9/0x4f0 [ 92.049464][ T4876] user_path_at_empty+0x40/0x190 [ 92.054402][ T4876] path_setxattr+0xb3/0x290 [ 92.058920][ T4876] ? simple_xattr_list_add+0xf0/0xf0 [ 92.064197][ T4876] ? lock_chain_count+0x20/0x20 [ 92.069035][ T4876] __x64_sys_lsetxattr+0xb4/0xd0 [ 92.074025][ T4876] do_syscall_64+0x4c/0xa0 [ 92.078431][ T4876] ? clear_bhb_loop+0x30/0x80 [ 92.083092][ T4876] ? clear_bhb_loop+0x30/0x80 [ 92.087750][ T4876] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.093625][ T4876] RIP: 0033:0x7fe83f873999 [ 92.098039][ T4876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.117630][ T4876] RSP: 002b:00007fe83eae7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 92.126035][ T4876] RAX: ffffffffffffffda RBX: 00007fe83fa3efa0 RCX: 00007fe83f873999 [ 92.133997][ T4876] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000140 [ 92.141961][ T4876] RBP: 00007fe83eae70a0 R08: 0000000000000000 R09: 0000000000000000 [ 92.149940][ T4876] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000002 [ 92.157926][ T4876] R13: 0000000000000000 R14: 00007fe83fa3efa0 R15: 00007fffd2564168 [ 92.165949][ T4876] [ 92.169254][ T4876] Kernel Offset: disabled [ 92.173733][ T4876] Rebooting in 86400 seconds..