[ 49.328039][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.787905][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.825744][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.877393][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.307311][ T9] device hsr_slave_0 left promiscuous mode [ 51.343141][ T9] device hsr_slave_1 left promiscuous mode [ 51.442143][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.443497][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.445090][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.446402][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.447929][ T9] device bridge_slave_1 left promiscuous mode [ 51.449060][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.482694][ T9] device bridge_slave_0 left promiscuous mode [ 51.483717][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.602263][ T9] device veth1_macvtap left promiscuous mode [ 51.603338][ T9] device veth0_macvtap left promiscuous mode [ 51.604370][ T9] device veth1_vlan left promiscuous mode [ 51.605331][ T9] device veth0_vlan left promiscuous mode [ 51.709169][ T9] team0 (unregistering): Port device team_slave_1 removed [ 51.713577][ T9] team0 (unregistering): Port device team_slave_0 removed [ 51.717704][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.748156][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.867992][ T9] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. 1970/01/01 00:00:54 parsed 1 programs [ 56.043421][ T4348] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 59.646200][ T4398] chnl_net:caif_netlink_parms(): no params data found [ 59.664859][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.666054][ T4398] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.667497][ T4398] device bridge_slave_0 entered promiscuous mode [ 59.669787][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.670967][ T4398] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.672528][ T4398] device bridge_slave_1 entered promiscuous mode [ 59.681202][ T4398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.684576][ T4398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.693936][ T4398] team0: Port device team_slave_0 added [ 59.697614][ T4398] team0: Port device team_slave_1 added [ 59.704965][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.706206][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.710581][ T4398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.713133][ T4398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.714349][ T4398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.718520][ T4398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.783382][ T4398] device hsr_slave_0 entered promiscuous mode [ 59.832283][ T4398] device hsr_slave_1 entered promiscuous mode [ 60.406510][ T4398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.433845][ T4398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.473914][ T4398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.514380][ T4398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.580629][ T4398] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.581906][ T4398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.583636][ T4398] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.584856][ T4398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.626773][ T4398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.631030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.635072][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.636660][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.638760][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 60.653293][ T4398] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.656057][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.657554][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.659420][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.660522][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.674207][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.675944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.677619][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.678869][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.680425][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.682564][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.689345][ T4398] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.690935][ T4398] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.695266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.697406][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.699266][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.700983][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.704410][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.708540][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.711276][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.715441][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.719584][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.721191][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.786407][ T4398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.793081][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.795845][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.799384][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.800961][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.820709][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.823938][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.825684][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.827256][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.830195][ T4398] device veth0_vlan entered promiscuous mode [ 60.834022][ T4398] device veth1_vlan entered promiscuous mode [ 60.843035][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.844711][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.846142][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.847738][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.850639][ T4398] device veth0_macvtap entered promiscuous mode [ 60.855776][ T4398] device veth1_macvtap entered promiscuous mode [ 60.861774][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.864178][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.865856][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.867430][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.869364][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.873293][ T4398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.874787][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.876713][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.879467][ T4398] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.880977][ T4398] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.883546][ T4398] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.885101][ T4398] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.008789][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.010145][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.011520][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.227067][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.228819][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.231235][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.235019][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:01 executed programs: 0 [ 61.796839][ T4620] chnl_net:caif_netlink_parms(): no params data found [ 61.817739][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.819100][ T4620] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.820611][ T4620] device bridge_slave_0 entered promiscuous mode [ 61.823262][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.824542][ T4620] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.826158][ T4620] device bridge_slave_1 entered promiscuous mode [ 61.834467][ T4620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.837581][ T4620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.846261][ T4620] team0: Port device team_slave_0 added [ 61.848168][ T4620] team0: Port device team_slave_1 added [ 61.855526][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.856675][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.861190][ T4620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.863755][ T4620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.864922][ T4620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.869182][ T4620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.923731][ T4620] device hsr_slave_0 entered promiscuous mode [ 61.953685][ T4620] device hsr_slave_1 entered promiscuous mode [ 61.993537][ T4620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.994792][ T4620] Cannot create hsr debugfs directory [ 63.655323][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.782313][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 65.862452][ T4183] Bluetooth: hci0: command 0x041b tx timeout [ 66.137388][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.197382][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.146903][ T4620] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.174220][ T4620] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.214127][ T4620] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.263717][ T4620] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.327216][ T4620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.331228][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.333108][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.336325][ T4620] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.338933][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.340660][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.342772][ T4337] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.343940][ T4337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.345595][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.349197][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.351003][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.355322][ T1060] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.356589][ T1060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.359301][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.363795][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.366756][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.368762][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.370532][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.374642][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.376245][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.380030][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.381663][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.385579][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.387191][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.389783][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.431187][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.433425][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.437375][ T4620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.444233][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.446037][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.471984][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.474163][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.475846][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.477365][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.480294][ T4620] device veth0_vlan entered promiscuous mode [ 67.488247][ T4620] device veth1_vlan entered promiscuous mode [ 67.495944][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.497510][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.499149][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.500813][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.504696][ T4620] device veth0_macvtap entered promiscuous mode [ 67.507237][ T4620] device veth1_macvtap entered promiscuous mode [ 67.512537][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.514266][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.516461][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.517789][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.519404][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.520953][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.522814][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.528029][ T4620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.529903][ T4620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.531908][ T4620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.535156][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.536959][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.539743][ T4620] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.541149][ T4620] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.542940][ T4620] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.544400][ T4620] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.565695][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.567053][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.569599][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.576480][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.577869][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.579269][ T1060] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:07 executed programs: 2 [ 67.942176][ T3623] Bluetooth: hci0: command 0x040f tx timeout [ 67.982956][ T4717] loop0: detected capacity change from 0 to 131072 [ 68.035753][ T4717] F2FS-fs (loop0): invalid crc value [ 68.040350][ T4717] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.048864][ T4717] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 68.053201][ T4717] ------------[ cut here ]------------ [ 68.054152][ T4717] WARNING: CPU: 1 PID: 4717 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 68.055423][ T4717] Modules linked in: [ 68.056042][ T4717] CPU: 1 PID: 4717 Comm: syz.0.16 Not tainted syzkaller #0 [ 68.057187][ T4717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.058798][ T4717] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.060054][ T4717] pc : drop_nlink+0xe8/0x140 [ 68.060773][ T4717] lr : drop_nlink+0xe8/0x140 [ 68.061477][ T4717] sp : ffff80001fef77c0 [ 68.062105][ T4717] x29: ffff80001fef77c0 x28: 0000000000000044 x27: ffff0000ed9805e0 [ 68.063517][ T4717] x26: ffff0000ed980758 x25: 0000000001c9c380 x24: ffff0000eda81c80 [ 68.064881][ T4717] x23: 1fffe0001db50399 x22: ffff0000eda81cc8 x21: dfff800000000000 [ 68.066275][ T4717] x20: 0000000000000000 x19: ffff0000eda81c80 x18: 0000000000000000 [ 68.067714][ T4717] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000004ffff [ 68.069100][ T4717] x14: 0000000000000001 x13: 1fffe0001db50428 x12: 0000000000000000 [ 68.070517][ T4717] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 68.071955][ T4717] x8 : ffff0000cb189b40 x7 : 0000000000000000 x6 : 0000000000000000 [ 68.073291][ T4717] x5 : ffff8000171107d0 x4 : 0000000000000002 x3 : ffff8000082c02f4 [ 68.074716][ T4717] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 68.076095][ T4717] Call trace: [ 68.076628][ T4717] drop_nlink+0xe8/0x140 [ 68.077340][ T4717] f2fs_rename2+0x110c/0x1b64 [ 68.078140][ T4717] vfs_rename+0xb08/0xe3c [ 68.078887][ T4717] do_renameat2+0x73c/0xc90 [ 68.079661][ T4717] __arm64_sys_renameat2+0xe8/0x104 [ 68.080560][ T4717] invoke_syscall+0x98/0x28c [ 68.081375][ T4717] el0_svc_common+0x13c/0x258 [ 68.082192][ T4717] do_el0_svc+0x5c/0x140 [ 68.082934][ T4717] el0_svc+0x78/0x1d0 [ 68.083617][ T4717] el0t_64_sync_handler+0xcc/0xe4 [ 68.084450][ T4717] el0t_64_sync+0x1a0/0x1a4 [ 68.085253][ T4717] irq event stamp: 307746 [ 68.086001][ T4717] hardirqs last enabled at (307745): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 68.087828][ T4717] hardirqs last disabled at (307746): [] el1_dbg+0x24/0x80 [ 68.089321][ T4717] softirqs last enabled at (307680): [] handle_softirqs+0xa70/0xc14 [ 68.090961][ T4717] softirqs last disabled at (307635): [] __irq_exit_rcu+0x240/0x434 [ 68.092576][ T4717] ---[ end trace 8de4e7b3883592dc ]--- [ 68.732749][ T4723] loop0: detected capacity change from 0 to 131072 [ 68.787461][ T4723] F2FS-fs (loop0): invalid crc value [ 68.790274][ T4723] F2FS-fs (loop0): Found nat_bits in checkpoint [ 68.798887][ T4723] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 68.801381][ T4723] ------------[ cut here ]------------ [ 68.802295][ T4723] WARNING: CPU: 1 PID: 4723 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 68.803787][ T4723] Modules linked in: [ 68.804539][ T4723] CPU: 1 PID: 4723 Comm: syz.0.17 Tainted: G W syzkaller #0 [ 68.806160][ T4723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 68.807897][ T4723] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 68.809234][ T4723] pc : drop_nlink+0xe8/0x140 [ 68.810050][ T4723] lr : drop_nlink+0xe8/0x140 [ 68.810926][ T4723] sp : ffff80001ff777c0 [ 68.811657][ T4723] x29: ffff80001ff777c0 x28: 0000000000000044 x27: ffff0000d9708bc0 [ 68.813072][ T4723] x26: ffff0000d9709028 x25: 000000002de54480 x24: ffff0000eda84c00 [ 68.814466][ T4723] x23: 1fffe0001db50989 x22: ffff0000eda84c48 x21: dfff800000000000 [ 68.815897][ T4723] x20: 0000000000000000 x19: ffff0000eda84c00 x18: 0000000000000000 [ 68.817282][ T4723] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 68.818635][ T4723] x14: 0000000000000001 x13: 1fffe0001db50a18 x12: 0000000000000000 [ 68.820014][ T4723] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 68.821379][ T4723] x8 : ffff0000c0c451c0 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 68.822727][ T4723] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 68.824113][ T4723] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 68.825466][ T4723] Call trace: [ 68.826020][ T4723] drop_nlink+0xe8/0x140 [ 68.826737][ T4723] f2fs_rename2+0x110c/0x1b64 [ 68.827539][ T4723] vfs_rename+0xb08/0xe3c [ 68.828253][ T4723] do_renameat2+0x73c/0xc90 [ 68.829009][ T4723] __arm64_sys_renameat2+0xe8/0x104 [ 68.829874][ T4723] invoke_syscall+0x98/0x28c [ 68.830657][ T4723] el0_svc_common+0x13c/0x258 [ 68.831440][ T4723] do_el0_svc+0x5c/0x140 [ 68.832152][ T4723] el0_svc+0x78/0x1d0 [ 68.832814][ T4723] el0t_64_sync_handler+0xcc/0xe4 [ 68.833690][ T4723] el0t_64_sync+0x1a0/0x1a4 [ 68.834443][ T4723] irq event stamp: 306180 [ 68.835161][ T4723] hardirqs last enabled at (306179): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 68.836996][ T4723] hardirqs last disabled at (306180): [] el1_dbg+0x24/0x80 [ 68.838477][ T4723] softirqs last enabled at (306030): [] local_bh_enable+0x10/0x34 [ 68.840127][ T4723] softirqs last disabled at (306028): [] local_bh_disable+0x10/0x34 [ 68.841797][ T4723] ---[ end trace 8de4e7b3883592dd ]--- [ 69.460926][ T4729] loop0: detected capacity change from 0 to 131072 [ 69.470396][ T4729] F2FS-fs (loop0): invalid crc value [ 69.473691][ T4729] F2FS-fs (loop0): Found nat_bits in checkpoint [ 69.482973][ T4729] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 69.485630][ T4729] ------------[ cut here ]------------ [ 69.486585][ T4729] WARNING: CPU: 0 PID: 4729 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 69.488016][ T4729] Modules linked in: [ 69.488713][ T4729] CPU: 0 PID: 4729 Comm: syz.0.18 Tainted: G W syzkaller #0 [ 69.490065][ T4729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 69.491607][ T4729] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 69.492887][ T4729] pc : drop_nlink+0xe8/0x140 [ 69.493665][ T4729] lr : drop_nlink+0xe8/0x140 [ 69.494425][ T4729] sp : ffff8000200477c0 [ 69.495116][ T4729] x29: ffff8000200477c0 x28: 0000000000000045 x27: ffff0000c525ebc0 [ 69.496523][ T4729] x26: ffff0000c525f8f8 x25: 000000001b6b0b00 x24: ffff0000eda4af80 [ 69.498036][ T4729] x23: 1fffe0001db495f9 x22: ffff0000eda4afc8 x21: dfff800000000000 [ 69.499463][ T4729] x20: 0000000000000000 x19: ffff0000eda4af80 x18: 0000000000000000 [ 69.500840][ T4729] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 69.502212][ T4729] x14: 0000000000000001 x13: 1fffe0001db49688 x12: 0000000000000000 [ 69.503612][ T4729] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 69.504995][ T4729] x8 : ffff0000c2300000 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 69.506408][ T4729] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 69.507801][ T4729] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 69.509145][ T4729] Call trace: [ 69.509713][ T4729] drop_nlink+0xe8/0x140 [ 69.510432][ T4729] f2fs_rename2+0x110c/0x1b64 [ 69.511236][ T4729] vfs_rename+0xb08/0xe3c [ 69.512000][ T4729] do_renameat2+0x73c/0xc90 [ 69.512774][ T4729] __arm64_sys_renameat2+0xe8/0x104 [ 69.513668][ T4729] invoke_syscall+0x98/0x28c [ 69.514498][ T4729] el0_svc_common+0x13c/0x258 [ 69.515339][ T4729] do_el0_svc+0x5c/0x140 [ 69.516091][ T4729] el0_svc+0x78/0x1d0 [ 69.516803][ T4729] el0t_64_sync_handler+0xcc/0xe4 [ 69.517688][ T4729] el0t_64_sync+0x1a0/0x1a4 [ 69.518481][ T4729] irq event stamp: 306530 [ 69.519233][ T4729] hardirqs last enabled at (306529): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 69.521081][ T4729] hardirqs last disabled at (306530): [] el1_dbg+0x24/0x80 [ 69.522569][ T4729] softirqs last enabled at (306366): [] local_bh_enable+0x10/0x34 [ 69.524219][ T4729] softirqs last disabled at (306364): [] local_bh_disable+0x10/0x34 [ 69.525879][ T4729] ---[ end trace 8de4e7b3883592de ]--- [ 69.623612][ T2532] cfg80211: failed to load regulatory.db [ 69.633252][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.634399][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 70.025907][ T3623] Bluetooth: hci0: command 0x0419 tx timeout [ 70.132433][ T4735] loop0: detected capacity change from 0 to 131072 [ 70.218362][ T4735] F2FS-fs (loop0): invalid crc value [ 70.224343][ T4735] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.242050][ T4735] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 70.247049][ T4735] ------------[ cut here ]------------ [ 70.247987][ T4735] WARNING: CPU: 1 PID: 4735 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 70.249338][ T4735] Modules linked in: [ 70.250029][ T4735] CPU: 1 PID: 4735 Comm: syz.0.19 Tainted: G W syzkaller #0 [ 70.251464][ T4735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.253115][ T4735] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.254496][ T4735] pc : drop_nlink+0xe8/0x140 [ 70.255417][ T4735] lr : drop_nlink+0xe8/0x140 [ 70.256255][ T4735] sp : ffff8000200677c0 [ 70.257023][ T4735] x29: ffff8000200677c0 x28: 0000000000000046 x27: ffff0000dd5148d0 [ 70.258556][ T4735] x26: ffff0000e2cecd38 x25: 000000000d1cef00 x24: ffff0000eda38000 [ 70.260080][ T4735] x23: 1fffe0001db47009 x22: ffff0000eda38048 x21: dfff800000000000 [ 70.261503][ T4735] x20: 0000000000000000 x19: ffff0000eda38000 x18: 0000000000000000 [ 70.262899][ T4735] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 70.264358][ T4735] x14: 0000000000000001 x13: 1fffe0001db47098 x12: 0000000000000000 [ 70.265805][ T4735] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 70.267222][ T4735] x8 : ffff0000dbfed1c0 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 70.268617][ T4735] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 70.270006][ T4735] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 70.271399][ T4735] Call trace: [ 70.271960][ T4735] drop_nlink+0xe8/0x140 [ 70.272707][ T4735] f2fs_rename2+0x110c/0x1b64 [ 70.273522][ T4735] vfs_rename+0xb08/0xe3c [ 70.274307][ T4735] do_renameat2+0x73c/0xc90 [ 70.275070][ T4735] __arm64_sys_renameat2+0xe8/0x104 [ 70.275953][ T4735] invoke_syscall+0x98/0x28c [ 70.276765][ T4735] el0_svc_common+0x13c/0x258 [ 70.277581][ T4735] do_el0_svc+0x5c/0x140 [ 70.278333][ T4735] el0_svc+0x78/0x1d0 [ 70.279036][ T4735] el0t_64_sync_handler+0xcc/0xe4 [ 70.279904][ T4735] el0t_64_sync+0x1a0/0x1a4 [ 70.280702][ T4735] irq event stamp: 306674 [ 70.281454][ T4735] hardirqs last enabled at (306673): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 70.283359][ T4735] hardirqs last disabled at (306674): [] el1_dbg+0x24/0x80 [ 70.284849][ T4735] softirqs last enabled at (306478): [] local_bh_enable+0x10/0x34 [ 70.286467][ T4735] softirqs last disabled at (306476): [] local_bh_disable+0x10/0x34 [ 70.288098][ T4735] ---[ end trace 8de4e7b3883592df ]--- [ 70.624540][ T9] device hsr_slave_0 left promiscuous mode [ 70.663998][ T9] device hsr_slave_1 left promiscuous mode [ 70.772159][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.773487][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.775303][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.776393][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.777930][ T9] device bridge_slave_1 left promiscuous mode [ 70.779003][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.812808][ T9] device bridge_slave_0 left promiscuous mode [ 70.813997][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.875499][ T4741] loop0: detected capacity change from 0 to 131072 [ 70.933741][ T4741] F2FS-fs (loop0): invalid crc value [ 70.938618][ T4741] F2FS-fs (loop0): Found nat_bits in checkpoint [ 70.942464][ T9] device veth1_macvtap left promiscuous mode [ 70.943532][ T9] device veth0_macvtap left promiscuous mode [ 70.944521][ T9] device veth1_vlan left promiscuous mode [ 70.945889][ T9] device veth0_vlan left promiscuous mode [ 70.962617][ T4741] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 70.965274][ T4741] ------------[ cut here ]------------ [ 70.966210][ T4741] WARNING: CPU: 1 PID: 4741 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 70.967604][ T4741] Modules linked in: [ 70.968286][ T4741] CPU: 1 PID: 4741 Comm: syz.0.20 Tainted: G W syzkaller #0 [ 70.969742][ T4741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 70.971635][ T4741] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 70.972995][ T4741] pc : drop_nlink+0xe8/0x140 [ 70.973919][ T4741] lr : drop_nlink+0xe8/0x140 [ 70.974842][ T4741] sp : ffff8000200677c0 [ 70.975590][ T4741] x29: ffff8000200677c0 x28: 0000000000000046 x27: ffff0000e2d7bbe8 [ 70.977046][ T4741] x26: ffff0000e2d7ba70 x25: 0000000038074300 x24: ffff0000eda3af80 [ 70.978542][ T4741] x23: 1fffe0001db475f9 x22: ffff0000eda3afc8 x21: dfff800000000000 [ 70.979991][ T4741] x20: 0000000000000000 x19: ffff0000eda3af80 x18: 0000000000000000 [ 70.981430][ T4741] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 70.982944][ T4741] x14: 0000000000000001 x13: 1fffe0001db47688 x12: 0000000000000000 [ 70.984399][ T4741] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 70.985809][ T4741] x8 : ffff0000d4a59b40 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 70.987242][ T4741] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 70.988684][ T4741] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 70.990130][ T4741] Call trace: [ 70.990699][ T4741] drop_nlink+0xe8/0x140 [ 70.991422][ T4741] f2fs_rename2+0x110c/0x1b64 [ 70.992218][ T4741] vfs_rename+0xb08/0xe3c [ 70.993021][ T4741] do_renameat2+0x73c/0xc90 [ 70.993798][ T4741] __arm64_sys_renameat2+0xe8/0x104 [ 70.994676][ T4741] invoke_syscall+0x98/0x28c [ 70.995465][ T4741] el0_svc_common+0x13c/0x258 [ 70.996259][ T4741] do_el0_svc+0x5c/0x140 [ 70.996991][ T4741] el0_svc+0x78/0x1d0 [ 70.997653][ T4741] el0t_64_sync_handler+0xcc/0xe4 [ 70.998535][ T4741] el0t_64_sync+0x1a0/0x1a4 [ 70.999301][ T4741] irq event stamp: 305494 [ 71.000017][ T4741] hardirqs last enabled at (305493): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 71.001888][ T4741] hardirqs last disabled at (305494): [] el1_dbg+0x24/0x80 [ 71.003393][ T4741] softirqs last enabled at (305328): [] local_bh_enable+0x10/0x34 [ 71.005017][ T4741] softirqs last disabled at (305326): [] local_bh_disable+0x10/0x34 [ 71.006606][ T4741] ---[ end trace 8de4e7b3883592e0 ]--- [ 71.089966][ T9] team0 (unregistering): Port device team_slave_1 removed [ 71.098422][ T9] team0 (unregistering): Port device team_slave_0 removed [ 71.102887][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.137712][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.249026][ T9] bond0 (unregistering): Released all slaves [ 71.600547][ T4747] loop0: detected capacity change from 0 to 131072 [ 71.637260][ T4747] F2FS-fs (loop0): invalid crc value [ 71.639753][ T4747] F2FS-fs (loop0): Found nat_bits in checkpoint [ 71.650129][ T4747] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 71.653600][ T4747] ------------[ cut here ]------------ [ 71.654427][ T4747] WARNING: CPU: 0 PID: 4747 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 71.655853][ T4747] Modules linked in: [ 71.656542][ T4747] CPU: 0 PID: 4747 Comm: syz.0.21 Tainted: G W syzkaller #0 [ 71.657824][ T4747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 71.659476][ T4747] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 71.660659][ T4747] pc : drop_nlink+0xe8/0x140 [ 71.661353][ T4747] lr : drop_nlink+0xe8/0x140 [ 71.662021][ T4747] sp : ffff8000200b77c0 [ 71.662727][ T4747] x29: ffff8000200b77c0 x28: 0000000000000047 x27: ffff0000cf588bc0 [ 71.664102][ T4747] x26: ffff0000cf5882f0 x25: 00000000258d0980 x24: ffff0000eda4df00 [ 71.665493][ T4747] x23: 1fffe0001db49be9 x22: ffff0000eda4df48 x21: dfff800000000000 [ 71.666888][ T4747] x20: 0000000000000000 x19: ffff0000eda4df00 x18: 0000000000000000 [ 71.668240][ T4747] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 71.669621][ T4747] x14: 0000000000000001 x13: 1fffe0001db49c78 x12: 0000000000000000 [ 71.671023][ T4747] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 71.672361][ T4747] x8 : ffff0000d6273680 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 71.673748][ T4747] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 71.675193][ T4747] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 71.676609][ T4747] Call trace: [ 71.677198][ T4747] drop_nlink+0xe8/0x140 [ 71.678031][ T4747] f2fs_rename2+0x110c/0x1b64 [ 71.678889][ T4747] vfs_rename+0xb08/0xe3c [ 71.679722][ T4747] do_renameat2+0x73c/0xc90 [ 71.680604][ T4747] __arm64_sys_renameat2+0xe8/0x104 [ 71.681628][ T4747] invoke_syscall+0x98/0x28c [ 71.682441][ T4747] el0_svc_common+0x13c/0x258 [ 71.683323][ T4747] do_el0_svc+0x5c/0x140 [ 71.684130][ T4747] el0_svc+0x78/0x1d0 [ 71.684906][ T4747] el0t_64_sync_handler+0xcc/0xe4 [ 71.685854][ T4747] el0t_64_sync+0x1a0/0x1a4 [ 71.686672][ T4747] irq event stamp: 307472 [ 71.687434][ T4747] hardirqs last enabled at (307471): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 71.689445][ T4747] hardirqs last disabled at (307472): [] el1_dbg+0x24/0x80 [ 71.691271][ T4747] softirqs last enabled at (307318): [] local_bh_enable+0x10/0x34 [ 71.693215][ T4747] softirqs last disabled at (307316): [] local_bh_disable+0x10/0x34 [ 71.695121][ T4747] ---[ end trace 8de4e7b3883592e1 ]--- [ 72.277454][ T4753] loop0: detected capacity change from 0 to 131072 [ 72.317495][ T4753] F2FS-fs (loop0): invalid crc value [ 72.320064][ T4753] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.329888][ T4753] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 72.335271][ T4753] ------------[ cut here ]------------ [ 72.336232][ T4753] WARNING: CPU: 1 PID: 4753 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 72.337765][ T4753] Modules linked in: [ 72.338512][ T4753] CPU: 1 PID: 4753 Comm: syz.0.22 Tainted: G W syzkaller #0 [ 72.340045][ T4753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 72.341801][ T4753] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 72.343290][ T4753] pc : drop_nlink+0xe8/0x140 [ 72.344151][ T4753] lr : drop_nlink+0xe8/0x140 [ 72.344988][ T4753] sp : ffff8000200477c0 [ 72.345712][ T4753] x29: ffff8000200477c0 x28: 0000000000000048 x27: ffff0000e2fb18f8 [ 72.347146][ T4753] x26: ffff0000e2fb1780 x25: 00000000127a3980 x24: ffff0000eda3c280 [ 72.348617][ T4753] x23: 1fffe0001db47859 x22: ffff0000eda3c2c8 x21: dfff800000000000 [ 72.350029][ T4753] x20: 0000000000000000 x19: ffff0000eda3c280 x18: 0000000000000000 [ 72.351444][ T4753] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 72.352809][ T4753] x14: 0000000000000001 x13: 1fffe0001db478e8 x12: 0000000000000000 [ 72.354193][ T4753] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 72.355789][ T4753] x8 : ffff0000d8e9b680 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 72.357330][ T4753] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 72.358831][ T4753] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 72.360239][ T4753] Call trace: [ 72.360797][ T4753] drop_nlink+0xe8/0x140 [ 72.361524][ T4753] f2fs_rename2+0x110c/0x1b64 [ 72.362308][ T4753] vfs_rename+0xb08/0xe3c [ 72.363160][ T4753] do_renameat2+0x73c/0xc90 [ 72.364082][ T4753] __arm64_sys_renameat2+0xe8/0x104 [ 72.365123][ T4753] invoke_syscall+0x98/0x28c [ 72.366027][ T4753] el0_svc_common+0x13c/0x258 [ 72.366996][ T4753] do_el0_svc+0x5c/0x140 [ 72.367836][ T4753] el0_svc+0x78/0x1d0 [ 72.368615][ T4753] el0t_64_sync_handler+0xcc/0xe4 [ 72.369639][ T4753] el0t_64_sync+0x1a0/0x1a4 [ 72.370548][ T4753] irq event stamp: 305860 [ 72.371400][ T4753] hardirqs last enabled at (305859): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 72.373610][ T4753] hardirqs last disabled at (305860): [] el1_dbg+0x24/0x80 [ 72.375397][ T4753] softirqs last enabled at (305692): [] handle_softirqs+0xa70/0xc14 [ 72.377281][ T4753] softirqs last disabled at (305681): [] __irq_exit_rcu+0x240/0x434 [ 72.379113][ T4753] ---[ end trace 8de4e7b3883592e2 ]--- [ 72.979377][ T4759] loop0: detected capacity change from 0 to 131072 [ 73.068309][ T4759] F2FS-fs (loop0): invalid crc value [ 73.093549][ T4759] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.111548][ T4759] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 73.115794][ T4759] ------------[ cut here ]------------ [ 73.116671][ T4759] WARNING: CPU: 0 PID: 4759 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 73.117972][ T4759] Modules linked in: [ 73.118588][ T4759] CPU: 0 PID: 4759 Comm: syz.0.23 Tainted: G W syzkaller #0 [ 73.119930][ T4759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.121393][ T4759] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.122589][ T4759] pc : drop_nlink+0xe8/0x140 [ 73.123329][ T4759] lr : drop_nlink+0xe8/0x140 [ 73.124098][ T4759] sp : ffff8000200d77c0 [ 73.124790][ T4759] x29: ffff8000200d77c0 x28: 0000000000000049 x27: ffff0000dd6d3490 [ 73.126141][ T4759] x26: ffff0000c04aeeb0 x25: 00000000055d4a80 x24: ffff0000edb72f80 [ 73.127775][ T4759] x23: 1fffe0001db6e5f9 x22: ffff0000edb72fc8 x21: dfff800000000000 [ 73.129387][ T4759] x20: 0000000000000000 x19: ffff0000edb72f80 x18: 0000000000000000 [ 73.130841][ T4759] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 73.132346][ T4759] x14: 0000000000000001 x13: 1fffe0001db6e688 x12: 0000000000000000 [ 73.133844][ T4759] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 73.135367][ T4759] x8 : ffff0000d81c9b40 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 73.136831][ T4759] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 73.138282][ T4759] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 73.139718][ T4759] Call trace: [ 73.140308][ T4759] drop_nlink+0xe8/0x140 [ 73.141056][ T4759] f2fs_rename2+0x110c/0x1b64 [ 73.141888][ T4759] vfs_rename+0xb08/0xe3c [ 73.142651][ T4759] do_renameat2+0x73c/0xc90 [ 73.143421][ T4759] __arm64_sys_renameat2+0xe8/0x104 [ 73.144300][ T4759] invoke_syscall+0x98/0x28c [ 73.145103][ T4759] el0_svc_common+0x13c/0x258 [ 73.145926][ T4759] do_el0_svc+0x5c/0x140 [ 73.146690][ T4759] el0_svc+0x78/0x1d0 [ 73.147412][ T4759] el0t_64_sync_handler+0xcc/0xe4 [ 73.148301][ T4759] el0t_64_sync+0x1a0/0x1a4 [ 73.149075][ T4759] irq event stamp: 308106 [ 73.149811][ T4759] hardirqs last enabled at (308105): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 73.151671][ T4759] hardirqs last disabled at (308106): [] el1_dbg+0x24/0x80 [ 73.153176][ T4759] softirqs last enabled at (307952): [] local_bh_enable+0x10/0x34 [ 73.154832][ T4759] softirqs last disabled at (307950): [] local_bh_disable+0x10/0x34 [ 73.156477][ T4759] ---[ end trace 8de4e7b3883592e3 ]--- 1970/01/01 00:01:13 executed programs: 10 [ 73.795146][ T4766] loop0: detected capacity change from 0 to 131072 [ 73.857734][ T4766] F2FS-fs (loop0): invalid crc value [ 73.860412][ T4766] F2FS-fs (loop0): Found nat_bits in checkpoint [ 73.869401][ T4766] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 73.872878][ T4766] ------------[ cut here ]------------ [ 73.873800][ T4766] WARNING: CPU: 1 PID: 4766 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 73.875117][ T4766] Modules linked in: [ 73.875793][ T4766] CPU: 1 PID: 4766 Comm: syz.0.24 Tainted: G W syzkaller #0 [ 73.877239][ T4766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 73.879090][ T4766] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 73.880485][ T4766] pc : drop_nlink+0xe8/0x140 [ 73.881284][ T4766] lr : drop_nlink+0xe8/0x140 [ 73.882103][ T4766] sp : ffff8000200d77c0 [ 73.882896][ T4766] x29: ffff8000200d77c0 x28: 0000000000000049 x27: ffff0000e2ceed38 [ 73.884338][ T4766] x26: ffff0000e2ceebc0 x25: 0000000032a9f880 x24: ffff0000eda3d580 [ 73.885783][ T4766] x23: 1fffe0001db47ab9 x22: ffff0000eda3d5c8 x21: dfff800000000000 [ 73.887259][ T4766] x20: 0000000000000000 x19: ffff0000eda3d580 x18: 0000000000000000 [ 73.888725][ T4766] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 73.890113][ T4766] x14: 0000000000000001 x13: 1fffe0001db47b48 x12: 0000000000000000 [ 73.891664][ T4766] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 73.893263][ T4766] x8 : ffff0000da4f8000 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 73.894783][ T4766] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 73.896266][ T4766] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 73.897731][ T4766] Call trace: [ 73.898285][ T4766] drop_nlink+0xe8/0x140 [ 73.899005][ T4766] f2fs_rename2+0x110c/0x1b64 [ 73.899817][ T4766] vfs_rename+0xb08/0xe3c [ 73.900568][ T4766] do_renameat2+0x73c/0xc90 [ 73.901325][ T4766] __arm64_sys_renameat2+0xe8/0x104 [ 73.902200][ T4766] invoke_syscall+0x98/0x28c [ 73.902977][ T4766] el0_svc_common+0x13c/0x258 [ 73.903772][ T4766] do_el0_svc+0x5c/0x140 [ 73.904525][ T4766] el0_svc+0x78/0x1d0 [ 73.905230][ T4766] el0t_64_sync_handler+0xcc/0xe4 [ 73.906059][ T4766] el0t_64_sync+0x1a0/0x1a4 [ 73.906814][ T4766] irq event stamp: 307032 [ 73.907546][ T4766] hardirqs last enabled at (307031): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 73.909388][ T4766] hardirqs last disabled at (307032): [] el1_dbg+0x24/0x80 [ 73.910898][ T4766] softirqs last enabled at (306874): [] local_bh_enable+0x10/0x34 [ 73.912512][ T4766] softirqs last disabled at (306872): [] local_bh_disable+0x10/0x34 [ 73.914396][ T4766] ---[ end trace 8de4e7b3883592e4 ]--- [ 74.507479][ T4780] loop0: detected capacity change from 0 to 131072 [ 74.561277][ T4780] F2FS-fs (loop0): invalid crc value [ 74.563706][ T4780] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.573486][ T4780] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 74.576198][ T4780] ------------[ cut here ]------------ [ 74.577149][ T4780] WARNING: CPU: 1 PID: 4780 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 74.578485][ T4780] Modules linked in: [ 74.579146][ T4780] CPU: 1 PID: 4780 Comm: syz.0.25 Tainted: G W syzkaller #0 [ 74.580574][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 74.582250][ T4780] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 74.583612][ T4780] pc : drop_nlink+0xe8/0x140 [ 74.584417][ T4780] lr : drop_nlink+0xe8/0x140 [ 74.585275][ T4780] sp : ffff8000200d77c0 [ 74.586016][ T4780] x29: ffff8000200d77c0 x28: 000000000000004a x27: ffff0000e2f44000 [ 74.587403][ T4780] x26: ffff0000e2f44178 x25: 0000000020c85580 x24: ffff0000e7ca0980 [ 74.588883][ T4780] x23: 1fffe0001cf94139 x22: ffff0000e7ca09c8 x21: dfff800000000000 [ 74.590338][ T4780] x20: 0000000000000000 x19: ffff0000e7ca0980 x18: 0000000000000000 [ 74.591737][ T4780] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 74.593185][ T4780] x14: 0000000000000001 x13: 1fffe0001cf941c8 x12: 0000000000000000 [ 74.594623][ T4780] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 74.596060][ T4780] x8 : ffff0000db2e8000 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 74.597430][ T4780] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 74.598794][ T4780] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 74.600176][ T4780] Call trace: [ 74.600750][ T4780] drop_nlink+0xe8/0x140 [ 74.601489][ T4780] f2fs_rename2+0x110c/0x1b64 [ 74.602274][ T4780] vfs_rename+0xb08/0xe3c [ 74.602996][ T4780] do_renameat2+0x73c/0xc90 [ 74.603781][ T4780] __arm64_sys_renameat2+0xe8/0x104 [ 74.604690][ T4780] invoke_syscall+0x98/0x28c [ 74.605503][ T4780] el0_svc_common+0x13c/0x258 [ 74.606308][ T4780] do_el0_svc+0x5c/0x140 [ 74.607039][ T4780] el0_svc+0x78/0x1d0 [ 74.607708][ T4780] el0t_64_sync_handler+0xcc/0xe4 [ 74.608558][ T4780] el0t_64_sync+0x1a0/0x1a4 [ 74.609331][ T4780] irq event stamp: 306298 [ 74.610065][ T4780] hardirqs last enabled at (306297): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 74.612000][ T4780] hardirqs last disabled at (306298): [] el1_dbg+0x24/0x80 [ 74.613525][ T4780] softirqs last enabled at (305510): [] handle_softirqs+0xa70/0xc14 [ 74.615264][ T4780] softirqs last disabled at (305457): [] __irq_exit_rcu+0x240/0x434 [ 74.616846][ T4780] ---[ end trace 8de4e7b3883592e5 ]--- [ 75.213729][ T4787] loop0: detected capacity change from 0 to 131072 [ 75.255020][ T4787] F2FS-fs (loop0): invalid crc value [ 75.259327][ T4787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.267512][ T4787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 75.270113][ T4787] ------------[ cut here ]------------ [ 75.271029][ T4787] WARNING: CPU: 1 PID: 4787 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 75.272551][ T4787] Modules linked in: [ 75.273285][ T4787] CPU: 1 PID: 4787 Comm: syz.0.26 Tainted: G W syzkaller #0 [ 75.274979][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.276840][ T4787] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.278271][ T4787] pc : drop_nlink+0xe8/0x140 [ 75.279038][ T4787] lr : drop_nlink+0xe8/0x140 [ 75.279818][ T4787] sp : ffff8000202077c0 [ 75.280519][ T4787] x29: ffff8000202077c0 x28: 000000000000004b x27: ffff0000ed845be8 [ 75.281868][ T4787] x26: ffff0000ed845028 x25: 000000000e4e1c00 x24: ffff0000e7ca2f80 [ 75.283250][ T4787] x23: 1fffe0001cf945f9 x22: ffff0000e7ca2fc8 x21: dfff800000000000 [ 75.284662][ T4787] x20: 0000000000000000 x19: ffff0000e7ca2f80 x18: 0000000000000000 [ 75.285983][ T4787] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 75.287323][ T4787] x14: 0000000000000001 x13: 1fffe0001cf94688 x12: 0000000000000000 [ 75.288718][ T4787] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 75.290091][ T4787] x8 : ffff0000d55251c0 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 75.291484][ T4787] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 75.292819][ T4787] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 75.294186][ T4787] Call trace: [ 75.294744][ T4787] drop_nlink+0xe8/0x140 [ 75.295470][ T4787] f2fs_rename2+0x110c/0x1b64 [ 75.296264][ T4787] vfs_rename+0xb08/0xe3c [ 75.297022][ T4787] do_renameat2+0x73c/0xc90 [ 75.297815][ T4787] __arm64_sys_renameat2+0xe8/0x104 [ 75.298744][ T4787] invoke_syscall+0x98/0x28c [ 75.299556][ T4787] el0_svc_common+0x13c/0x258 [ 75.300378][ T4787] do_el0_svc+0x5c/0x140 [ 75.301132][ T4787] el0_svc+0x78/0x1d0 [ 75.301819][ T4787] el0t_64_sync_handler+0xcc/0xe4 [ 75.302665][ T4787] el0t_64_sync+0x1a0/0x1a4 [ 75.303482][ T4787] irq event stamp: 306806 [ 75.304283][ T4787] hardirqs last enabled at (306805): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 75.306172][ T4787] hardirqs last disabled at (306806): [] el1_dbg+0x24/0x80 [ 75.307739][ T4787] softirqs last enabled at (306528): [] local_bh_enable+0x10/0x34 [ 75.309400][ T4787] softirqs last disabled at (306526): [] local_bh_disable+0x10/0x34 [ 75.311071][ T4787] ---[ end trace 8de4e7b3883592e6 ]--- [ 75.900857][ T4795] loop0: detected capacity change from 0 to 131072 [ 75.909267][ T4795] F2FS-fs (loop0): invalid crc value [ 75.911674][ T4795] F2FS-fs (loop0): Found nat_bits in checkpoint [ 75.920052][ T4795] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 75.923498][ T4795] ------------[ cut here ]------------ [ 75.924433][ T4795] WARNING: CPU: 0 PID: 4795 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 75.925749][ T4795] Modules linked in: [ 75.926379][ T4795] CPU: 0 PID: 4795 Comm: syz.0.27 Tainted: G W syzkaller #0 [ 75.927767][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 75.929353][ T4795] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 75.930678][ T4795] pc : drop_nlink+0xe8/0x140 [ 75.931464][ T4795] lr : drop_nlink+0xe8/0x140 [ 75.932262][ T4795] sp : ffff8000200d77c0 [ 75.932964][ T4795] x29: ffff8000200d77c0 x28: 000000000000004b x27: ffff0000dd601a70 [ 75.934340][ T4795] x26: ffff0000dd601028 x25: 0000000035a4e900 x24: ffff0000e2ff8980 [ 75.935720][ T4795] x23: 1fffe0001c5ff139 x22: ffff0000e2ff89c8 x21: dfff800000000000 [ 75.937099][ T4795] x20: 0000000000000000 x19: ffff0000e2ff8980 x18: 0000000000000000 [ 75.938494][ T4795] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 75.939864][ T4795] x14: 0000000000000001 x13: 1fffe0001c5ff1c8 x12: 0000000000000000 [ 75.941216][ T4795] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 75.942579][ T4795] x8 : ffff0000de5551c0 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 75.943956][ T4795] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 75.945297][ T4795] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 75.946673][ T4795] Call trace: [ 75.947245][ T4795] drop_nlink+0xe8/0x140 [ 75.948005][ T4795] f2fs_rename2+0x110c/0x1b64 [ 75.948804][ T4795] vfs_rename+0xb08/0xe3c [ 75.949542][ T4795] do_renameat2+0x73c/0xc90 [ 75.950304][ T4795] __arm64_sys_renameat2+0xe8/0x104 [ 75.951207][ T4795] invoke_syscall+0x98/0x28c [ 75.951999][ T4795] el0_svc_common+0x13c/0x258 [ 75.952807][ T4795] do_el0_svc+0x5c/0x140 [ 75.953490][ T4795] el0_svc+0x78/0x1d0 [ 75.954168][ T4795] el0t_64_sync_handler+0xcc/0xe4 [ 75.955026][ T4795] el0t_64_sync+0x1a0/0x1a4 [ 75.955802][ T4795] irq event stamp: 307020 [ 75.956513][ T4795] hardirqs last enabled at (307019): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 75.958330][ T4795] hardirqs last disabled at (307020): [] el1_dbg+0x24/0x80 [ 75.959780][ T4795] softirqs last enabled at (306850): [] local_bh_enable+0x10/0x34 [ 75.961354][ T4795] softirqs last disabled at (306848): [] local_bh_disable+0x10/0x34 [ 75.962984][ T4795] ---[ end trace 8de4e7b3883592e7 ]--- [ 76.576845][ T4801] loop0: detected capacity change from 0 to 131072 [ 76.627135][ T4801] F2FS-fs (loop0): invalid crc value [ 76.631621][ T4801] F2FS-fs (loop0): Found nat_bits in checkpoint [ 76.650116][ T4801] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 76.652950][ T4801] ------------[ cut here ]------------ [ 76.653914][ T4801] WARNING: CPU: 0 PID: 4801 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 76.655287][ T4801] Modules linked in: [ 76.655968][ T4801] CPU: 0 PID: 4801 Comm: syz.0.28 Tainted: G W syzkaller #0 [ 76.657370][ T4801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 76.659078][ T4801] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 76.660377][ T4801] pc : drop_nlink+0xe8/0x140 [ 76.661147][ T4801] lr : drop_nlink+0xe8/0x140 [ 76.661908][ T4801] sp : ffff8000202577c0 [ 76.662693][ T4801] x29: ffff8000202577c0 x28: 000000000000004c x27: ffff0000cbf5ed38 [ 76.664190][ T4801] x26: ffff0000cbf5ea48 x25: 00000000258d0980 x24: ffff0000e2ffb900 [ 76.665701][ T4801] x23: 1fffe0001c5ff729 x22: ffff0000e2ffb948 x21: dfff800000000000 [ 76.667209][ T4801] x20: 0000000000000000 x19: ffff0000e2ffb900 x18: 0000000000000000 [ 76.668723][ T4801] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 76.670358][ T4801] x14: 0000000000000001 x13: 1fffe0001c5ff7b8 x12: 0000000000000000 [ 76.671945][ T4801] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 76.673454][ T4801] x8 : ffff0000d9f59b40 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 76.675103][ T4801] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 76.676602][ T4801] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 76.678055][ T4801] Call trace: [ 76.678617][ T4801] drop_nlink+0xe8/0x140 [ 76.679374][ T4801] f2fs_rename2+0x110c/0x1b64 [ 76.680203][ T4801] vfs_rename+0xb08/0xe3c [ 76.680981][ T4801] do_renameat2+0x73c/0xc90 [ 76.681784][ T4801] __arm64_sys_renameat2+0xe8/0x104 [ 76.682701][ T4801] invoke_syscall+0x98/0x28c [ 76.683475][ T4801] el0_svc_common+0x13c/0x258 [ 76.684294][ T4801] do_el0_svc+0x5c/0x140 [ 76.684992][ T4801] el0_svc+0x78/0x1d0 [ 76.685651][ T4801] el0t_64_sync_handler+0xcc/0xe4 [ 76.686488][ T4801] el0t_64_sync+0x1a0/0x1a4 [ 76.687245][ T4801] irq event stamp: 306696 [ 76.688116][ T4801] hardirqs last enabled at (306695): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 76.690242][ T4801] hardirqs last disabled at (306696): [] el1_dbg+0x24/0x80 [ 76.691953][ T4801] softirqs last enabled at (306520): [] local_bh_enable+0x10/0x34 [ 76.693701][ T4801] softirqs last disabled at (306518): [] local_bh_disable+0x10/0x34 [ 76.695450][ T4801] ---[ end trace 8de4e7b3883592e8 ]--- [ 77.278232][ T4807] loop0: detected capacity change from 0 to 131072 [ 77.329424][ T4807] F2FS-fs (loop0): invalid crc value [ 77.332008][ T4807] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.348151][ T4807] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 77.350666][ T4807] ------------[ cut here ]------------ [ 77.351608][ T4807] WARNING: CPU: 0 PID: 4807 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 77.353004][ T4807] Modules linked in: [ 77.353758][ T4807] CPU: 0 PID: 4807 Comm: syz.0.29 Tainted: G W syzkaller #0 [ 77.355446][ T4807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 77.357352][ T4807] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 77.358770][ T4807] pc : drop_nlink+0xe8/0x140 [ 77.359589][ T4807] lr : drop_nlink+0xe8/0x140 [ 77.360413][ T4807] sp : ffff8000201e77c0 [ 77.361155][ T4807] x29: ffff8000201e77c0 x28: 000000000000004d x27: ffff0000cf4ab780 [ 77.362619][ T4807] x26: ffff0000cf4ab318 x25: 000000001312d000 x24: ffff0000e2ffe880 [ 77.364021][ T4807] x23: 1fffe0001c5ffd19 x22: ffff0000e2ffe8c8 x21: dfff800000000000 [ 77.365692][ T4807] x20: 0000000000000000 x19: ffff0000e2ffe880 x18: 0000000000000000 [ 77.367269][ T4807] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 77.368840][ T4807] x14: 0000000000000001 x13: 1fffe0001c5ffda8 x12: 0000000000000000 [ 77.370328][ T4807] x11: ff80800008955d48 x10: 0000000000000000 x9 : ffff800008955d48 [ 77.371789][ T4807] x8 : ffff0000d9f5b680 x7 : ffff80000a1becf4 x6 : 0000000000000000 [ 77.373226][ T4807] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082c02f4 [ 77.374575][ T4807] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 77.375966][ T4807] Call trace: [ 77.376583][ T4807] drop_nlink+0xe8/0x140 [ 77.377380][ T4807] f2fs_rename2+0x110c/0x1b64 [ 77.378262][ T4807] vfs_rename+0xb08/0xe3c [ 77.379016][ T4807] do_renameat2+0x73c/0xc90 [ 77.379800][ T4807] __arm64_sys_renameat2+0xe8/0x104 [ 77.380687][ T4807] invoke_syscall+0x98/0x28c [ 77.381457][ T4807] el0_svc_common+0x13c/0x258 [ 77.382266][ T4807] do_el0_svc+0x5c/0x140 [ 77.382999][ T4807] el0_svc+0x78/0x1d0 [ 77.383667][ T4807] el0t_64_sync_handler+0xcc/0xe4 [ 77.384525][ T4807] el0t_64_sync+0x1a0/0x1a4 [ 77.385295][ T4807] irq event stamp: 306276 [ 77.385991][ T4807] hardirqs last enabled at (306275): [] seqcount_lockdep_reader_access+0x1fc/0x2c0 [ 77.387949][ T4807] hardirqs last disabled at (306276): [] el1_dbg+0x24/0x80 [ 77.389482][ T4807] softirqs last enabled at (306118): [] local_bh_enable+0x10/0x34 [ 77.391131][ T4807] softirqs last disabled at (306116): [] local_bh_disable+0x10/0x34 [ 77.392769][ T4807] ---[ end trace 8de4e7b3883592e9 ]--- [ 77.969339][ T4813] loop0: detected capacity change from 0 to 131072 [ 78.017551][ T4813] F2FS-fs (loop0): invalid crc value [ 78.024744][ T4813] F2FS-fs (loop0): Found nat_bits in checkpoint [ 78.033974][ T4813] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 78.036431][ T4813] ------------[ cut here ]------------ [ 78.037393][ T4813] WARNING: CPU: 0 PID: 4813 at fs/inode.c:332 drop_nlink+0xe8/0x140 [ 78.038924][ T4813] Modules linked in: [ 78.039658][ T4813] CPU: 0 PID: 4813 Comm: syz.0.30 Tainted: G W syzkaller #0 [ 78.041106][ T4813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 78.042819][ T4813] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.044223][ T4813] pc : drop_nlink+0xe8/0x140 [ 78.045017][ T4813] lr : drop_nlink+0xe8/0x140 [ 78.045823][ T4813] sp : ffff8000201e77c0 [ 78.046566][ T4813] x29: ffff8000201e77c0 x28: 000000000000004e x27: ffff0000e2dbdd60 [ 78.048060][ T4813] x26: ffff0000e2dbd028 x25: 0000000000989680 x24: ffff0000e7e59300 [ 78.049570][ T4813] x23: 1fffe0001cfcb269 x22: ffff0000e7e59348 x21: dfff800000000000 [ 78.051073][ T4813] x20: 0000000000000000 x19: ffff0000e7e59300 x18: 0000000000000000 [ 78.052540][ T4813] x17: 0000000000000000 x16: ffff8000082c00f8 x15: 000000000000a000 [ 78.053974][ T4813] x14: 0000000000000001 x13: 1fffe0001cfcb2f8 x12: 0000000000000000