Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. 2026/09/02 06:29:53 parsed 1 programs 2026/09/02 06:29:53 serving rpc on tcp://46017 [ 74.902289][ T4197] cgroup: Unknown subsys name 'net' [ 75.013834][ T4197] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.543858][ T4197] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 79.641464][ T4254] chnl_net:caif_netlink_parms(): no params data found [ 79.705483][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.713310][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.721668][ T4254] device bridge_slave_0 entered promiscuous mode [ 79.732350][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.739555][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.747896][ T4254] device bridge_slave_1 entered promiscuous mode [ 79.773348][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.784995][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.812080][ T4254] team0: Port device team_slave_0 added [ 79.819978][ T4254] team0: Port device team_slave_1 added [ 79.842718][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.850019][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.875960][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.889190][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.896237][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.922152][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.960595][ T4254] device hsr_slave_0 entered promiscuous mode [ 79.967865][ T4254] device hsr_slave_1 entered promiscuous mode [ 80.103332][ T4254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.115399][ T4254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.128644][ T4254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.139135][ T4254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.167035][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.174342][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.182099][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.189253][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.235252][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.249088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.263509][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.276841][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.336796][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 80.392871][ T4254] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.413970][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.422628][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.429790][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.441586][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.451475][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.458615][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.479102][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.487693][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.500262][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.512108][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.525732][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.536801][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.628871][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.636769][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.649217][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.667073][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.676743][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.695677][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 80.710942][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 80.720427][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 80.728521][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 80.738959][ T4254] device veth0_vlan entered promiscuous mode [ 80.751079][ T4254] device veth1_vlan entered promiscuous mode [ 80.770262][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 80.778564][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 80.787538][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 80.796371][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 80.808132][ T4254] device veth0_macvtap entered promiscuous mode [ 80.835949][ T4254] device veth1_macvtap entered promiscuous mode [ 80.851010][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.859360][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.868739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.877457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.886214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.898839][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.907626][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.916550][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.928324][ T4254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.937381][ T4254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.946753][ T4254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.955763][ T4254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.506192][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.519670][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.530343][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.569227][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.577414][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.586790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/09/02 06:30:04 executed programs: 0 [ 82.952369][ T4297] chnl_net:caif_netlink_parms(): no params data found [ 83.019237][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.029680][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.038068][ T4297] device bridge_slave_0 entered promiscuous mode [ 83.047053][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.054492][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.062648][ T4297] device bridge_slave_1 entered promiscuous mode [ 83.086745][ T4297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.098731][ T4297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.133041][ T4297] team0: Port device team_slave_0 added [ 83.159933][ T4297] team0: Port device team_slave_1 added [ 83.186903][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.194646][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.223226][ T4297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.238466][ T4297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.245831][ T4297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.276878][ T4297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.311939][ T4297] device hsr_slave_0 entered promiscuous mode [ 83.318936][ T4297] device hsr_slave_1 entered promiscuous mode [ 83.326021][ T4297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.334160][ T4297] Cannot create hsr debugfs directory [ 83.415631][ T4297] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.874976][ T4265] Bluetooth: hci0: command 0x0409 tx timeout [ 85.790870][ T4297] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.829525][ T4297] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.891885][ T4297] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.998201][ T4297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.008153][ T4297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.017654][ T4297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.041941][ T4297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.102102][ T4297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.116467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.124987][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.135554][ T4297] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.160541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.169455][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.178955][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.186113][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.195229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.206542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.215947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.225123][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.232198][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.245738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.274376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.285644][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.296464][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.306230][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.318344][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.327305][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.355468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.364635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.376139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.384900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.412927][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.509068][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.516671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.549563][ T4297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.570741][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.579737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.602585][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.616148][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.628529][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.636808][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.806757][ T4297] device veth0_vlan entered promiscuous mode [ 86.821927][ T4297] device veth1_vlan entered promiscuous mode [ 86.867134][ T1444] device hsr_slave_0 left promiscuous mode [ 86.877446][ T1444] device hsr_slave_1 left promiscuous mode [ 86.884652][ T1444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.892112][ T1444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.905031][ T1444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.912458][ T1444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.922928][ T1444] device bridge_slave_1 left promiscuous mode [ 86.930374][ T1444] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.953672][ T21] Bluetooth: hci0: command 0x041b tx timeout [ 86.966746][ T1444] device bridge_slave_0 left promiscuous mode [ 86.973428][ T1444] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.000460][ T1444] device veth1_macvtap left promiscuous mode [ 87.007257][ T1444] device veth0_macvtap left promiscuous mode [ 87.013387][ T1444] device veth1_vlan left promiscuous mode [ 87.023046][ T1444] device veth0_vlan left promiscuous mode [ 87.239508][ T1444] team0 (unregistering): Port device team_slave_1 removed [ 87.253308][ T1444] team0 (unregistering): Port device team_slave_0 removed [ 87.269865][ T1444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.287614][ T1444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.345188][ T1444] bond0 (unregistering): Released all slaves [ 87.415931][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.425176][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.440018][ T4297] device veth0_macvtap entered promiscuous mode [ 87.452843][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.472474][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.491390][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.501710][ T4297] device veth1_macvtap entered promiscuous mode [ 87.519219][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.527511][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.536685][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.546979][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.560005][ T4297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.570923][ T4297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.581279][ T4297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.591846][ T4297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.603204][ T4297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.614658][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.623365][ T3070] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.689506][ T3070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.701200][ T3070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.709961][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.731429][ T3070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2026/09/02 06:30:09 executed programs: 2 [ 87.741539][ T3070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.749585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.036221][ T4316] loop0: detected capacity change from 0 to 32768 [ 88.053550][ T4316] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.17 (4316) [ 88.078577][ T4316] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 88.095530][ T4316] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.105901][ T4316] BTRFS info (device loop0): use zstd compression, level 3 [ 88.113150][ T4316] BTRFS info (device loop0): using free space tree [ 88.120159][ T4316] BTRFS info (device loop0): has skinny extents [ 88.176210][ T4316] BTRFS info (device loop0): enabling ssd optimizations [ 88.198971][ T26] audit: type=1800 audit(1788330609.451:2): pid=4316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 88.228721][ T4316] FAULT_INJECTION: forcing a failure. [ 88.228721][ T4316] name failslab, interval 1, probability 0, space 0, times 1 [ 88.242369][ T4316] CPU: 1 PID: 4316 Comm: syz.0.17 Not tainted syzkaller #0 [ 88.249621][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.259803][ T4316] Call Trace: [ 88.263110][ T4316] [ 88.266068][ T4316] dump_stack_lvl+0x188/0x250 [ 88.270787][ T4316] ? show_regs_print_info+0x20/0x20 [ 88.276014][ T4316] ? load_image+0x410/0x410 [ 88.280559][ T4316] ? __might_sleep+0xf0/0xf0 [ 88.285181][ T4316] ? __lock_acquire+0x7b50/0x7b50 [ 88.290243][ T4316] ? do_raw_spin_unlock+0x11d/0x230 [ 88.295488][ T4316] should_fail+0x383/0x4b0 [ 88.299945][ T4316] should_failslab+0x5/0x20 [ 88.304477][ T4316] slab_pre_alloc_hook+0x51/0xc0 [ 88.309445][ T4316] ? btrfs_get_or_create_delayed_node+0x13b/0x530 [ 88.315898][ T4316] kmem_cache_alloc+0x3d/0x280 [ 88.320824][ T4316] btrfs_get_or_create_delayed_node+0x13b/0x530 [ 88.327113][ T4316] btrfs_delayed_update_inode+0x24/0x18e0 [ 88.332883][ T4316] btrfs_update_inode+0x258/0x440 [ 88.337949][ T4316] btrfs_create+0x492/0x5d0 [ 88.342501][ T4316] ? btrfs_lookup+0x30/0x30 [ 88.347048][ T4316] ? d_splice_alias+0x110/0x320 [ 88.352022][ T4316] ? btrfs_lookup+0x30/0x30 [ 88.356565][ T4316] path_openat+0x120a/0x2fb0 [ 88.361261][ T4316] ? do_filp_open+0x400/0x400 [ 88.365998][ T4316] do_filp_open+0x1df/0x400 [ 88.370538][ T4316] ? vfs_tmpfile+0x300/0x300 [ 88.375181][ T4316] ? _raw_spin_unlock+0x24/0x40 [ 88.380740][ T4316] ? alloc_fd+0x59e/0x650 [ 88.385130][ T4316] do_sys_openat2+0x14b/0x500 [ 88.389857][ T4316] ? __lock_acquire+0x7b50/0x7b50 [ 88.394944][ T4316] ? do_sys_open+0xe0/0xe0 [ 88.399410][ T4316] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 88.405452][ T4316] ? lock_chain_count+0x20/0x20 [ 88.410366][ T4316] __x64_sys_openat+0x135/0x160 [ 88.415267][ T4316] do_syscall_64+0x4c/0xa0 [ 88.419720][ T4316] ? clear_bhb_loop+0x30/0x80 [ 88.424441][ T4316] ? clear_bhb_loop+0x30/0x80 [ 88.429157][ T4316] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 88.435110][ T4316] RIP: 0033:0x7fc6d395c159 [ 88.439575][ T4316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.459221][ T4316] RSP: 002b:00007fff1abc61b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.467694][ T4316] RAX: ffffffffffffffda RBX: 00007fc6d3be3fa0 RCX: 00007fc6d395c159 [ 88.475718][ T4316] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 88.483763][ T4316] RBP: 00007fc6d39f3024 R08: 0000000000000000 R09: 0000000000000000 [ 88.491774][ T4316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.499789][ T4316] R13: 00007fc6d3be3fac R14: 00007fc6d3be3fa0 R15: 00007fc6d3be3fa0 [ 88.507833][ T4316] [ 89.023894][ T4265] Bluetooth: hci0: command 0x040f tx timeout [ 89.380131][ T4337] loop0: detected capacity change from 0 to 32768 [ 89.474085][ T4337] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.18 (4337) [ 89.496525][ T4337] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 89.519303][ T4337] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.544950][ T4337] BTRFS info (device loop0): use zstd compression, level 3 [ 89.552221][ T4337] BTRFS info (device loop0): using free space tree [ 89.573735][ T4337] BTRFS info (device loop0): has skinny extents [ 89.691439][ T4337] BTRFS info (device loop0): enabling ssd optimizations [ 89.710860][ T26] audit: type=1800 audit(1788330610.961:3): pid=4337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 89.736853][ T4337] FAULT_INJECTION: forcing a failure. [ 89.736853][ T4337] name failslab, interval 1, probability 0, space 0, times 0 [ 89.750952][ T4337] CPU: 0 PID: 4337 Comm: syz.0.18 Not tainted syzkaller #0 [ 89.758217][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.768306][ T4337] Call Trace: [ 89.771619][ T4337] [ 89.774589][ T4337] dump_stack_lvl+0x188/0x250 [ 89.779315][ T4337] ? show_regs_print_info+0x20/0x20 [ 89.784559][ T4337] ? load_image+0x410/0x410 [ 89.789098][ T4337] ? __might_sleep+0xf0/0xf0 [ 89.793750][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 89.798819][ T4337] should_fail+0x383/0x4b0 [ 89.803273][ T4337] should_failslab+0x5/0x20 [ 89.807805][ T4337] slab_pre_alloc_hook+0x51/0xc0 [ 89.812773][ T4337] ? btrfs_insert_dir_item+0x1a0/0x460 [ 89.818263][ T4337] kmem_cache_alloc+0x3d/0x280 [ 89.823068][ T4337] btrfs_insert_dir_item+0x1a0/0x460 [ 89.828398][ T4337] ? insert_with_overflow+0x250/0x250 [ 89.833808][ T4337] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 89.839475][ T4337] ? mutex_unlock+0x10/0x10 [ 89.844019][ T4337] btrfs_add_link+0x309/0xd40 [ 89.848733][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 89.853966][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 89.859020][ T4337] ? do_raw_spin_lock+0x128/0x2f0 [ 89.864077][ T4337] ? btrfs_set_inode_index_count+0x4b0/0x4b0 [ 89.870085][ T4337] ? __rwlock_init+0x50/0x140 [ 89.874787][ T4337] ? btrfs_delayed_update_inode+0x108b/0x18e0 [ 89.880877][ T4337] ? do_raw_spin_unlock+0x11d/0x230 [ 89.886117][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 89.891346][ T4337] btrfs_create+0x511/0x5d0 [ 89.895900][ T4337] ? btrfs_lookup+0x30/0x30 [ 89.900444][ T4337] ? d_splice_alias+0x110/0x320 [ 89.905331][ T4337] ? btrfs_lookup+0x30/0x30 [ 89.909871][ T4337] path_openat+0x120a/0x2fb0 [ 89.914537][ T4337] ? do_filp_open+0x400/0x400 [ 89.919391][ T4337] do_filp_open+0x1df/0x400 [ 89.923938][ T4337] ? vfs_tmpfile+0x300/0x300 [ 89.928593][ T4337] ? _raw_spin_unlock+0x24/0x40 [ 89.933495][ T4337] ? alloc_fd+0x59e/0x650 [ 89.937865][ T4337] do_sys_openat2+0x14b/0x500 [ 89.942565][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 89.947621][ T4337] ? do_sys_open+0xe0/0xe0 [ 89.952074][ T4337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 89.958114][ T4337] ? lock_chain_count+0x20/0x20 [ 89.963007][ T4337] __x64_sys_openat+0x135/0x160 [ 89.967906][ T4337] do_syscall_64+0x4c/0xa0 [ 89.972349][ T4337] ? clear_bhb_loop+0x30/0x80 [ 89.977048][ T4337] ? clear_bhb_loop+0x30/0x80 [ 89.981765][ T4337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 89.987692][ T4337] RIP: 0033:0x7fc6d395c159 [ 89.992137][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.011771][ T4337] RSP: 002b:00007fff1abc61b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.020222][ T4337] RAX: ffffffffffffffda RBX: 00007fc6d3be3fa0 RCX: 00007fc6d395c159 [ 90.028274][ T4337] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 90.036395][ T4337] RBP: 00007fc6d39f3024 R08: 0000000000000000 R09: 0000000000000000 [ 90.044407][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.052412][ T4337] R13: 00007fc6d3be3fac R14: 00007fc6d3be3fa0 R15: 00007fc6d3be3fa0 [ 90.060433][ T4337] [ 90.079368][ T4337] ------------[ cut here ]------------ [ 90.086980][ T4337] WARNING: CPU: 0 PID: 4337 at fs/btrfs/inode.c:6780 btrfs_add_link+0x8a5/0xd40 [ 90.096487][ T4337] Modules linked in: [ 90.100447][ T4337] CPU: 0 PID: 4337 Comm: syz.0.18 Not tainted syzkaller #0 [ 90.109033][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.119377][ T4337] RIP: 0010:btrfs_add_link+0x8a5/0xd40 [ 90.126266][ T4337] Code: e8 00 e4 2d fe 4c 8b 6c 24 18 0f 1f 44 00 00 e8 f1 e3 2d fe eb 16 e8 ea e3 2d fe 48 c7 c7 c0 79 6b 8a 44 89 f6 e8 0b 3e 6a 06 <0f> 0b 48 8b 7c 24 20 48 c7 c6 60 7f 6b 8a ba 7c 1a 00 00 eb 38 e8 [ 90.147858][ T4337] RSP: 0018:ffffc90002f8f720 EFLAGS: 00010246 [ 90.154480][ T4337] RAX: 35091b9e6a49b600 RBX: ffff88806a249478 RCX: ffff88807c3dbb80 [ 90.162612][ T4337] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 90.172200][ T4337] RBP: ffffc90002f8f868 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 90.182080][ T4337] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888070a10001 [ 90.191833][ T4337] R13: 1ffff920005f1ef0 R14: 00000000fffffff4 R15: 1ffff1100d44928f [ 90.200260][ T4337] FS: 000055558d824500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 90.209636][ T4337] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.216706][ T4337] CR2: 0000558bd80815f8 CR3: 0000000020a22000 CR4: 00000000003506f0 [ 90.225424][ T4337] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.233559][ T4337] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.241895][ T4337] Call Trace: [ 90.245646][ T4337] [ 90.248613][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 90.254561][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 90.259727][ T4337] ? do_raw_spin_lock+0x128/0x2f0 [ 90.265232][ T4337] ? btrfs_set_inode_index_count+0x4b0/0x4b0 [ 90.271354][ T4337] ? __rwlock_init+0x50/0x140 [ 90.276522][ T4337] ? btrfs_delayed_update_inode+0x108b/0x18e0 [ 90.282747][ T4337] ? do_raw_spin_unlock+0x11d/0x230 [ 90.289143][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 90.294731][ T4337] btrfs_create+0x511/0x5d0 [ 90.299386][ T4337] ? btrfs_lookup+0x30/0x30 [ 90.304461][ T4337] ? d_splice_alias+0x110/0x320 [ 90.309454][ T4337] ? btrfs_lookup+0x30/0x30 [ 90.314357][ T4337] path_openat+0x120a/0x2fb0 [ 90.319066][ T4337] ? do_filp_open+0x400/0x400 [ 90.324262][ T4337] do_filp_open+0x1df/0x400 [ 90.328817][ T4337] ? vfs_tmpfile+0x300/0x300 [ 90.333533][ T4337] ? _raw_spin_unlock+0x24/0x40 [ 90.339047][ T4337] ? alloc_fd+0x59e/0x650 [ 90.343428][ T4337] do_sys_openat2+0x14b/0x500 [ 90.348765][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 90.354170][ T4337] ? do_sys_open+0xe0/0xe0 [ 90.358687][ T4337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.365263][ T4337] ? lock_chain_count+0x20/0x20 [ 90.370175][ T4337] __x64_sys_openat+0x135/0x160 [ 90.375541][ T4337] do_syscall_64+0x4c/0xa0 [ 90.380035][ T4337] ? clear_bhb_loop+0x30/0x80 [ 90.385151][ T4337] ? clear_bhb_loop+0x30/0x80 [ 90.389973][ T4337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.397144][ T4337] RIP: 0033:0x7fc6d395c159 [ 90.401711][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.421990][ T4337] RSP: 002b:00007fff1abc61b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.430913][ T4337] RAX: ffffffffffffffda RBX: 00007fc6d3be3fa0 RCX: 00007fc6d395c159 [ 90.439304][ T4337] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 90.448124][ T4337] RBP: 00007fc6d39f3024 R08: 0000000000000000 R09: 0000000000000000 [ 90.456596][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.466133][ T4337] R13: 00007fc6d3be3fac R14: 00007fc6d3be3fa0 R15: 00007fc6d3be3fa0 [ 90.474568][ T4337] [ 90.477644][ T4337] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.484949][ T4337] CPU: 0 PID: 4337 Comm: syz.0.18 Not tainted syzkaller #0 [ 90.492174][ T4337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.502257][ T4337] Call Trace: [ 90.505561][ T4337] [ 90.508523][ T4337] dump_stack_lvl+0x188/0x250 [ 90.513245][ T4337] ? show_regs_print_info+0x20/0x20 [ 90.518603][ T4337] ? load_image+0x410/0x410 [ 90.523128][ T4337] panic+0x2f8/0x850 [ 90.527037][ T4337] ? bpf_jit_dump+0xd0/0xd0 [ 90.531640][ T4337] ? btrfs_add_link+0x8a5/0xd40 [ 90.536516][ T4337] __warn+0x248/0x2b0 [ 90.540508][ T4337] ? btrfs_add_link+0x8a5/0xd40 [ 90.545362][ T4337] report_bug+0x1b9/0x2e0 [ 90.549709][ T4337] handle_bug+0x3a/0x70 [ 90.553884][ T4337] exc_invalid_op+0x16/0x40 [ 90.558388][ T4337] asm_exc_invalid_op+0x16/0x20 [ 90.563237][ T4337] RIP: 0010:btrfs_add_link+0x8a5/0xd40 [ 90.568714][ T4337] Code: e8 00 e4 2d fe 4c 8b 6c 24 18 0f 1f 44 00 00 e8 f1 e3 2d fe eb 16 e8 ea e3 2d fe 48 c7 c7 c0 79 6b 8a 44 89 f6 e8 0b 3e 6a 06 <0f> 0b 48 8b 7c 24 20 48 c7 c6 60 7f 6b 8a ba 7c 1a 00 00 eb 38 e8 [ 90.588423][ T4337] RSP: 0018:ffffc90002f8f720 EFLAGS: 00010246 [ 90.594502][ T4337] RAX: 35091b9e6a49b600 RBX: ffff88806a249478 RCX: ffff88807c3dbb80 [ 90.602491][ T4337] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 90.610572][ T4337] RBP: ffffc90002f8f868 R08: ffff8880b902795b R09: 1ffff11017204f2b [ 90.618546][ T4337] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffff888070a10001 [ 90.626524][ T4337] R13: 1ffff920005f1ef0 R14: 00000000fffffff4 R15: 1ffff1100d44928f [ 90.634529][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 90.639747][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 90.644773][ T4337] ? do_raw_spin_lock+0x128/0x2f0 [ 90.649800][ T4337] ? btrfs_set_inode_index_count+0x4b0/0x4b0 [ 90.655978][ T4337] ? __rwlock_init+0x50/0x140 [ 90.660657][ T4337] ? btrfs_delayed_update_inode+0x108b/0x18e0 [ 90.666723][ T4337] ? do_raw_spin_unlock+0x11d/0x230 [ 90.672097][ T4337] ? btrfs_update_inode+0x37c/0x440 [ 90.677299][ T4337] btrfs_create+0x511/0x5d0 [ 90.681829][ T4337] ? btrfs_lookup+0x30/0x30 [ 90.686338][ T4337] ? d_splice_alias+0x110/0x320 [ 90.691206][ T4337] ? btrfs_lookup+0x30/0x30 [ 90.695710][ T4337] path_openat+0x120a/0x2fb0 [ 90.700408][ T4337] ? do_filp_open+0x400/0x400 [ 90.705102][ T4337] do_filp_open+0x1df/0x400 [ 90.709608][ T4337] ? vfs_tmpfile+0x300/0x300 [ 90.714212][ T4337] ? _raw_spin_unlock+0x24/0x40 [ 90.719059][ T4337] ? alloc_fd+0x59e/0x650 [ 90.723391][ T4337] do_sys_openat2+0x14b/0x500 [ 90.728086][ T4337] ? __lock_acquire+0x7b50/0x7b50 [ 90.733111][ T4337] ? do_sys_open+0xe0/0xe0 [ 90.737527][ T4337] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 90.743528][ T4337] ? lock_chain_count+0x20/0x20 [ 90.748387][ T4337] __x64_sys_openat+0x135/0x160 [ 90.753243][ T4337] do_syscall_64+0x4c/0xa0 [ 90.757661][ T4337] ? clear_bhb_loop+0x30/0x80 [ 90.762347][ T4337] ? clear_bhb_loop+0x30/0x80 [ 90.767023][ T4337] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.772913][ T4337] RIP: 0033:0x7fc6d395c159 [ 90.777326][ T4337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.797110][ T4337] RSP: 002b:00007fff1abc61b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 90.805531][ T4337] RAX: ffffffffffffffda RBX: 00007fc6d3be3fa0 RCX: 00007fc6d395c159 [ 90.813519][ T4337] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 90.821509][ T4337] RBP: 00007fc6d39f3024 R08: 0000000000000000 R09: 0000000000000000 [ 90.829504][ T4337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.837491][ T4337] R13: 00007fc6d3be3fac R14: 00007fc6d3be3fa0 R15: 00007fc6d3be3fa0 [ 90.845503][ T4337] [ 90.848777][ T4337] Kernel Offset: disabled [ 90.853411][ T4337] Rebooting in 86400 seconds..