[ 9.527968][ T2615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 9.530831][ T2615] eql: remember to turn off Van-Jacobson compression on your slave devices [ 9.560502][ T1012] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.564859][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.10.18' (ECDSA) to the list of known hosts. executing program syzkaller login: [ 28.998412][ T3030] loop0: detected capacity change from 0 to 2048 [ 29.004858][ T3031] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 29.015721][ T3030] ------------[ cut here ]------------ [ 29.017168][ T3030] refcount_t: underflow; use-after-free. [ 29.018818][ T3030] WARNING: CPU: 1 PID: 3030 at lib/refcount.c:87 refcount_dec_and_lock+0x180/0x1ec [ 29.021229][ T3030] Modules linked in: [ 29.022217][ T3030] CPU: 1 PID: 3030 Comm: syz-executor186 Not tainted 6.0.0-rc7-syzkaller-18095-gbbed346d5a96 #0 [ 29.024809][ T3030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/30/2022 [ 29.027565][ T3030] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 29.029575][ T3030] pc : refcount_dec_and_lock+0x180/0x1ec [ 29.031064][ T3030] lr : refcount_dec_and_lock+0x17c/0x1ec [ 29.032696][ T3030] sp : ffff8000126e3a30 [ 29.033795][ T3030] x29: ffff8000126e3a30 x28: ffff80000cc15062 x27: ffff0000c7c38640 [ 29.035908][ T3030] x26: 0000000000000002 x25: 00000000ffffffff x24: 0000000000000000 [ 29.037995][ T3030] x23: 00000000c0000000 x22: 0000000000000000 x21: ffff80000d5eb4a0 [ 29.040061][ T3030] x20: ffff0000c8c9b420 x19: ffff80000d8c8000 x18: 00000000000000c0 [ 29.042154][ T3030] x17: ffff80000dd0b198 x16: ffff80000db49158 x15: ffff0000c8f39a80 [ 29.044252][ T3030] x14: 0000000000000000 x13: 00000000ffffffff x12: ffff0000c8f39a80 [ 29.046304][ T3030] x11: ff808000081c0d5c x10: 0000000000000000 x9 : 71c13a87731a7b00 [ 29.048374][ T3030] x8 : 71c13a87731a7b00 x7 : ffff80000819545c x6 : 0000000000000000 [ 29.050426][ T3030] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 29.052613][ T3030] x2 : 0000000000000000 x1 : 0000000100000000 x0 : 0000000000000000 [ 29.054710][ T3030] Call trace: [ 29.055698][ T3030] refcount_dec_and_lock+0x180/0x1ec [ 29.057096][ T3030] nilfs_put_root+0x30/0x80 [ 29.058251][ T3030] nilfs_detach_log_writer+0x3b8/0x4d0 [ 29.059810][ T3030] nilfs_put_super+0x28/0x9c [ 29.061006][ T3030] generic_shutdown_super+0x8c/0x190 [ 29.062369][ T3030] kill_block_super+0x30/0x78 [ 29.063574][ T3030] deactivate_locked_super+0x70/0xe8 [ 29.064911][ T3030] deactivate_super+0xd0/0xd4 [ 29.066125][ T3030] cleanup_mnt+0x1f8/0x234 [ 29.067344][ T3030] __cleanup_mnt+0x20/0x30 [ 29.068447][ T3030] task_work_run+0xc4/0x14c [ 29.069557][ T3030] do_exit+0x26c/0xbe0 [ 29.070641][ T3030] do_group_exit+0x60/0xe8 [ 29.071792][ T3030] __wake_up_parent+0x0/0x40 [ 29.073107][ T3030] el0_svc_common+0x138/0x220 [ 29.074315][ T3030] do_el0_svc+0x48/0x164 [ 29.075417][ T3030] el0_svc+0x58/0x150 [ 29.076423][ T3030] el0t_64_sync_handler+0x84/0xf0 [ 29.077832][ T3030] el0t_64_sync+0x18c/0x190 [ 29.078945][ T3030] irq event stamp: 9232 [ 29.079974][ T3030] hardirqs last enabled at (9231): [] __up_console_sem+0xb0/0xfc [ 29.082537][ T3030] hardirqs last disabled at (9232): [] el1_dbg+0x24/0x5c [ 29.084787][ T3030] softirqs last enabled at (7848): [] local_bh_enable+0x10/0x34 [ 29.087362][ T3030] softirqs last disabled at (7846): [] local_bh_disable+0x10/0x34 [ 29.089753][ T3030] ---[ end trace 0000000000000000 ]---